Privacy Policy
Controller
The controller for the processing of personal data on this website under the GDPR (EU 2016/679) and the Swiss FADP is:
RENTANA AG
Sonnenbergstrasse 14
6060 Sarnen
Canton of Obwalden, Switzerland
UID: CHE-114.894.758
management@rentana-ag.de
We have not appointed a data protection officer, as we are not legally required to do so. Please send all data protection enquiries to the address above.
What data we collect
We only collect data that you actively provide, or that is technically required to operate the website:
- Application questionnaire: your name, your email address and the answers to six profile questions (age, life situation, trading experience, weekly time, monthly capital, self-assessment). Submitted via Formspree to our email inbox. The email address is used to reach you about your application and your appointment.
- Appointment booking: name, email address and any further details requested by the Calendly booking form.
- Email contact: if you write to us directly, we process your address and the content of your message in order to answer it.
- Server log files: IP address, browser type, operating system, referring page, date and time of the request. Recorded automatically by our hosting provider.
- Cookies: technically necessary cookies only, see section 05.
Purpose and legal basis
- Application and intro call: preparing and holding a conversation about joining the mentorship. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).
- Answering enquiries: handling questions you send us. Legal basis: Art. 6(1)(b) or (f) GDPR.
- Technical operation: ensuring the website functions securely and defending against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
- Optional statistics cookies: only on the basis of your consent, which you can withdraw at any time. Legal basis: Art. 6(1)(a) GDPR.
Third-party services
We use the following services to operate this website. Where required, we have concluded data processing agreements or rely on EU standard contractual clauses for transfers.
- Netlify (hosting): Netlify, Inc., San Francisco, USA. Processes server log files.
- Formspree (form submission): when the questionnaire is submitted, your name and answers are sent to Formspree and forwarded to us by email.
- Calendly (appointment booking): Calendly LLC, Atlanta, USA. Processes name and email address to manage appointments. The booking window only loads once you have completed the questionnaire.
- Google Fonts: Google Ireland Limited, Dublin, Ireland. Fonts are loaded from Google servers when the page opens, which transmits your IP address.
Cookies
Cookies are small text files stored by your browser. You can change your choice at any time via the “Cookie settings” link in the footer of the start page, or by deleting cookies in your browser settings.
- Technically necessary , sf_cookie_consent (365 days): stores your cookie choice locally in your browser.
- Technically necessary, sf_applied (local storage): remembers in your browser which email address has already submitted an application, so the same address is not submitted twice. The entry stays on your device and disappears when you clear the site data in your browser.
- Optional statistics cookies: are only set after you consent via “Accept all”. No analytics or tracking service is currently active on this website, so no such cookies are set at present.
Recipients and transfers abroad
Your data is not sold and not passed on for advertising purposes. Recipients are limited to the service providers named in section 04, acting as processors on our instructions, and to public authorities where we are legally obliged to disclose.
Some of these providers are based in the USA. Transfers are based on EU standard contractual clauses or on the EU-US Data Privacy Framework. As the controller is based in Switzerland, data may also be processed there; Switzerland is recognised by the EU Commission as providing an adequate level of protection.
Retention
Personal data is stored only as long as necessary for the respective purpose or as required by statutory retention periods.
- Questionnaire answers and enquiries: deleted after 24 months at the latest if no contractual relationship arises.
- Server log files: deleted after 30 days.
- Contract and accounting records: kept for the statutory periods of up to ten years.
Data security
This website uses TLS encryption, recognisable by the padlock in your browser and the https prefix in the address bar. Everything you send us through the questionnaire is transmitted encrypted. We take appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access. No transmission over the internet can be guaranteed to be entirely secure.
No obligation to provide data
Providing your data is neither required by law nor by contract. You are free not to complete the questionnaire. Without the details it asks for, however, we cannot assess an application or arrange an appointment.
No automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. The questionnaire only sorts answers for our own review; every decision about an application is made by a person.
Minors
If you are under 18, please only send us data with the consent of a parent or guardian. We do not knowingly collect data from children under 16 without such consent. If you believe a minor has provided us with data, write to us and we will delete it.
Your rights
As a data subject you have the following rights (Art. 15–22 GDPR, and the corresponding provisions of the Swiss FADP):
- Access (Art. 15): what data we hold about you.
- Rectification (Art. 16): correction of inaccurate data.
- Erasure (Art. 17): deletion of your data unless a retention obligation applies.
- Restriction (Art. 18) and data portability (Art. 20).
- Objection (Art. 21) to processing based on legitimate interests, including any form of direct marketing.
- Withdrawal of consent (Art. 7(3)) at any time, with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
- Complaint: with the competent supervisory authority, for example the FDPIC in Switzerland or the authority in your EU country of residence.
We answer requests within one month. Please send them to:
Changes
We update this privacy policy when the services we use or the legal situation change. The version published here is the one that applies. Last updated: August 2026.