Privacy policy

The controller for personal data processed through this website is:

Company

OpenTheta AG

Address

Sihlbruggstrasse 140
6340 Baar
Switzerland

Email

contact@ykaizen.com

Company details are set out in our Impressum.

We are a Swiss company, so the revised Federal Act on Data Protection (revFADP), in force since 1 September 2023, governs our processing.

Because this site is aimed at organisations in the European Union, the GDPR applies in addition under its Art. 3(2)(a). Where the two regimes differ we apply whichever gives you the stronger protection, and the rights in section 8 say which regime each one comes from.

We have not appointed a data protection officer, as we do not meet the thresholds in Art. 37 GDPR and the revFADP imposes no general equivalent on a company of our size. Data protection enquiries reach us at the contact address above and are handled directly.

This site is a set of static files served by Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes data on our behalf under a data processing agreement.

When you request a page, our host necessarily processes the data your browser transmits in order to deliver it: typically your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system version. We use it to deliver the site, keep it available, and detect and defend against attacks.

Our justification under the revFADP, and our legal basis under Art. 6(1)(f) GDPR, is our legitimate interest in operating a website that is reachable, stable and protected against abuse. This data is not combined with other sources and we do not use it to identify individual visitors.

Cloudflare processes some of this data outside Switzerland and the European Economic Area, including in the United States. Where the recipient is certified under the Swiss–U.S. Data Privacy Framework we rely on that framework; otherwise transfers rest on the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC / EDÖB) and, for GDPR purposes, adopted by the European Commission.

Cloudflare's own privacy information is at cloudflare.com/privacypolicy.

There is no contact form on this site. If you email us, we process the address you write from, your name if you give it, and the content of your message, so that we can answer it and carry on the conversation.

Where your enquiry concerns entering into or performing a contract, our GDPR basis is Art. 6(1)(b); otherwise it is Art. 6(1)(f), our legitimate interest in responding to enquiries about our product. We keep correspondence for as long as the matter is live and any statutory retention period requires, then delete it. We do not sell contact details, and we do not add anyone to a mailing list they did not ask for.

This site sets no cookies. It runs no analytics, no advertising scripts, no tracking pixels and no session recording. There is no consent banner because there is nothing to consent to — we store and read nothing on your device beyond what your browser caches to display the page.

The fonts are served from our own domain, bundled at build time. No request is made to a font CDN or any other third party while you read this page, so no third party learns that you visited it.

The buttons marked “See the live demo” take you to the kAIzen application, a separate service on a different domain with its own processing and its own terms. Once you follow that link this policy no longer applies. We pass no information about you along with the link.

You can ask us at any time to:

• tell you whether we process data about you and give you a copy — Art. 25 revFADP, Art. 15 GDPR;
• correct data that is wrong — Art. 32 revFADP, Art. 16 GDPR;
• delete data we no longer have grounds to keep — Art. 32 revFADP, Art. 17 GDPR;
• restrict how we process it — Art. 18 GDPR;
• hand over data you gave us in a portable, machine-readable form — Art. 28 revFADP, Art. 20 GDPR;
• stop relying on consent, where processing rests on it.

Write to contact@ykaizen.com. We answer within a month, as Art. 12(3) GDPR requires, and normally much sooner.

Where we process your data on the basis of a legitimate interest — which on this site means our server logs — you have the right to object at any time, on grounds relating to your particular situation. If you object we will stop, unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. Send an objection to contact@ykaizen.com.

If you think we have handled your data wrongly, please tell us first — most things are quickest to fix directly.

You can also raise it with a regulator. In Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), which supervises compliance with the revFADP; you may also bring a civil claim before the Swiss courts. Where the GDPR applies to you, you have the right under its Art. 77 to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.

This site is served exclusively over TLS. You can confirm it from the lock indicator in your browser's address bar and the https:// prefix. While encryption is active, what you exchange with this site cannot be read by third parties in transit.

We update this policy when the site changes or the legal position does. The current version always applies, and the date at the top tells you when it last changed.