Privacy Statement

Last updated 26 September 2026

01

Who we are

Embreier Sàrl is a Swiss limited liability company registered in the canton of Vaud and based in Lausanne (UID CHE-342.861.914). We build Kalyr, adaptive intelligence for consequential work.

Embreier Sàrl is the controller for the processing described in this Statement. In this Statement, "Embreier", "we", "our" and "us" mean Embreier Sàrl. For any question about your personal data, write to privacy@embreier.com.

02

What this Statement covers

This Statement covers personal data we process for our own purposes: when you visit embreier.com, write to us, attend an event, apply for a role, take part in an Embreier programme or training, or do business with us.

Our website, our services and our roles are meant for adults.

Kalyr deployments

When an organisation uses Kalyr, that organisation decides what data is processed and why. Embreier processes that data on the organisation's behalf, on its documented instructions and under a separate agreement. The organisation's own privacy notice is the right place to learn how it uses your data, and requests about that data go to the organisation first. We support it as the law requires.

Other websites

Our pages link to sites run by others, such as LinkedIn. Their own privacy policies apply when you use them.

What this Statement is

This Statement tells you how we handle personal data. It is information, not a contract, and it gives you the rights the law provides.

03

What we collect

We collect personal data you give us, data created when you use our website, and data others share with us about you in a professional setting.

Contact dataName, email address, phone number, organisation, role and country.
Professional dataEmployer, job title, areas of expertise, and the process or problem you describe to us.
Communication dataMessages and correspondence with us, including through our forms and by email.
Candidate dataYour CV, links, answers to our questions, languages, work authorisation, and notes from conversations with us.
Programme and training dataFor people who take part in Embreier programmes or training: registration details, attendance, assessments and certification status.
Billing dataInvoicing details for services purchased from us.
Technical dataIP address, browser and device information, and the pages you visit, collected by our website and its service providers.
Images and recordingsPhotographs or recordings from events or sessions, where you agreed to them or were told in advance.

Where it comes from

Mostly from you. Sometimes from your employer or organisation, from people who refer you to us, or from publicly available professional sources such as your professional profile.

04

Why we use it, and on what basis

We use personal data for the purposes below. Where European or UK data protection law applies, the legal basis is shown under each purpose.

Reply to you and run our relationshipAnswering enquiries, arranging meetings, keeping in touch with people we work with.Legitimate interests · contract
Provide our products and servicesIncluding programmes, certification and Kalyr, and everything a contract with you requires.Contract
RecruitAssessing applications, interviewing and hiring.Steps before a contract · legitimate interests · consent where we ask for it
Keep training recordsConfirming what someone completed and any certification they hold, and protecting the integrity of our credentials.Legitimate interests · contract
Protect Embreier and othersProtecting our rights, intellectual property, confidential information, systems and people, and establishing, exercising or defending legal claims.Legitimate interests
Improve our website and communicationsUnderstanding which pages help people and how our messages are received.Legitimate interests · consent for cookies where required
Send news about EmbreierUpdates and invitations you can stop at any time.Consent · legitimate interests
Meet our legal obligationsAccounting, tax, and requests from authorities we are bound to answer.Legal obligation

Decisions about people, including hiring decisions, are made by people at Embreier.

05

Applying to Embreier

When you apply, we use your application to assess it and to stay in touch about it. The people you would work with read it, and our service providers hold it for us.

We keep an application for up to six months after the search closes. If you tick "Embreier may contact me about future roles", we keep it for up to two years so we can reach you about a later role. You can withdraw that choice at any time.

If you join us, your application becomes part of your employment record, and a separate notice for team members applies.

06

Who we share it with

Service providersCompanies that work for us under contract and only on our instructions: website hosting (Squarespace), website translation (Weglot), website forms (Formspree), and our email, productivity, accounting and payment providers.
Professional advisersLawyers, accountants, auditors and insurers, bound by confidentiality.
Authorities and courtsWhere the law requires it, or where needed to establish, exercise or defend legal claims.
A buyer or investorIn a financing, merger, sale or reorganisation, under confidentiality and only as far as needed.
Anyone else you ask us to share withWith your agreement.

Embreier does not sell personal data.

07

Cookies and similar technologies

Our website uses cookies it needs in order to work, and analytics that show us how the site is used. You can block or delete cookies at any time in your browser settings; the site keeps working without the analytics.

Some content on our pages, such as fonts, images and video, loads from the servers of the providers who host it. When your browser loads that content, those providers receive your IP address.

08

International transfers

Embreier is based in Switzerland. Some of our service providers process data in the European Economic Area, the United Kingdom or the United States.

When personal data goes to a country the Swiss Federal Council has not recognised as providing adequate protection, we use a recognised safeguard, such as standard contractual clauses or a provider's certification under the Swiss-US Data Privacy Framework. You can ask us for details of the safeguard that applies.

09

How long we keep it

We keep personal data only as long as its purpose requires, then delete or anonymise it.

Enquiries and correspondenceUp to two years after our last contact, unless a relationship continues.
ApplicationsAs set out in section 05.
Programme and training recordsFor as long as a certification is valid, and then for as long as needed to answer questions about it and to establish, exercise or defend legal claims.
Accounting and business recordsTen years, as Swiss law requires.
Where a claim or dispute is possibleUntil the relevant limitation period ends.
10

How we protect it

We use technical and organisational measures suited to the risk: access limited to the people who need it, encryption in transit, and service providers held to the same standard by contract.

No system is perfectly secure. If a breach is likely to put your rights at high risk, we inform the Federal Data Protection and Information Commissioner and, where the law requires, you.

11

Your rights

Under the Swiss Federal Act on Data Protection, and where it applies, the EU or UK General Data Protection Regulation, you can:

See your dataAsk whether we process your personal data and receive a copy.
Correct itAsk us to fix data that is inaccurate or incomplete.
Erase itAsk us to delete it, where the law allows.
Limit or objectAsk us to restrict processing, or object to processing based on legitimate interests or used for marketing.
Take it with youReceive data you gave us in a common electronic format, or have it sent to someone else.
Withdraw consentAt any time, for the future.
ComplainTo the Federal Data Protection and Information Commissioner in Switzerland, or to the data protection authority where you live or work in the EU or UK.

These rights have limits the law sets, for example where we must keep data by law, where another person's rights or our business secrets are involved, or where data is needed to establish, exercise or defend legal claims. We may ask you to confirm your identity first. We reply within thirty days, and requests are free of charge in the ordinary course.

privacy@embreier.com
12

Changes to this Statement

We update this Statement when the way we process personal data changes. The date at the top shows the latest version. Where a change significantly affects you, we will tell you where we can.

13

Contact

Embreier Sàrl, Lausanne, Switzerland. Registered in the Swiss commercial register under UID CHE-342.861.914.

privacy@embreier.com