Privacy Policy

Last updated: 8 November 2026

1. Scope and controller

This policy applies to https://axendorinnovation.com and its public website resources. The responsible party is Zakraoui Axendor Innovation, a sole proprietorship registered in Switzerland and operating this site under the Axendor Innovation brand, Dorfstrasse 123, 8424 Embrach ZH, Switzerland. Privacy requests may be sent to contact@axendorinnovation.com.

2. Information actually processed

When the website is requested, hosting and security systems may process an IP address, date and time, requested URL, browser or device details, request headers and security logs. The application code does not create a separate visitor profile from this information.

The diagnostic asks for an operating-environment selection and nine questionnaire responses, not a name or contact details. When a visitor requests a result, the selection and responses are sent to Axendor’s same-origin diagnostic service. That service calculates the Brain, Eyes and Muscle scores, Triad Health Index and screening profile, and returns the visitor’s result. The hosting and security infrastructure also processes technical request information, including an IP address, as described above.

The Contact forms accept a full name, corporate email, company name and the business context the visitor chooses to provide. The website validates these fields and prepares an email draft locally. It does not submit or store the form. Data is transmitted only if the visitor reviews and sends the draft through their own email application.

The Academy enquiry is different: when a visitor sends an Academy request (programme, full name, corporate email, company name, number of participants and message), the request is submitted to Axendor Academy and stored there to prepare a quotation. Axendor receives a notification by email. If the quotation is confirmed, each participant named by the client receives a personal invitation to create an Academy account; the account then holds the participant’s name, email address, licences and learning records. To limit abuse, the Academy keeps a one-way, daily-changing code derived from the sender’s IP address with each request; it does not keep the IP address itself.

3. Purposes and legal bases

Technical request information is used to deliver, secure and maintain the website, based on Axendor’s legitimate interests in operating a reliable service. Business correspondence is used to answer an inquiry, assess a possible engagement and take requested pre-contractual steps. Where records must be retained by law, processing is based on the relevant legal obligation. Consent is used only where a feature specifically asks for it.

4. Diagnostic and free report

Diagnostic progress and answers are stored in this tab’s sessionStorage so a reload can restore the screening. Requesting or reloading a result transmits the selected environment and nine responses to Axendor’s same-origin service for temporary evaluation. The application does not write these answers or the result to a server-side database or persistent session. If the visitor chooses the contextual Diagnostic Session route, the industry, profile, scores and Health Index are also kept in that tab for the handoff. The tab also keeps a simple count of assessment restarts, limited to three per browser session; this count contains no answers or personal details.

The free screening PDF is generated in the browser from the result returned by the service and the same-origin Axendor logo. Creating the PDF does not make another diagnostic-evaluation request or send data to an external PDF service. It includes a short, randomly generated report reference, not an identity or tracking identifier. No personal details are requested for the report. A downloaded PDF remains on the visitor’s device until they delete or share it.

5. Recipients and service providers

Axendor receives contact information when a visitor sends an email or an Academy request. The visitor’s email provider and Microsoft 365, used for Axendor’s contact mailbox and for the Academy’s invitation and password emails, process that correspondence under their respective service arrangements. Academy requests and accounts are stored by the Academy on Cloudflare and Supabase, which act as Axendor’s infrastructure providers.

The corporate website is configured for Cloudflare Worker delivery and security. Diagnostic evaluation requests, including the selected environment and nine responses, pass through that infrastructure for temporary processing. The infrastructure may also process technical request and security information, including IP-based rate-limit keys, to deliver and protect the site. Cloudflare processes this information as Axendor’s infrastructure provider, under its customer terms and data processing addendum. The Academy links to a separate private learning service, which has its own data-processing arrangements when a visitor follows that link. This website does not send diagnostic answers or contact-form drafts to the learning service; only an Academy request is sent to it, as described above.

6. Retention

Diagnostic sessionStorage lasts for the browser-tab session and can be cleared by restarting the assessment or closing the tab session. The application does not persist diagnostic answers or results in server-side storage after evaluation. Hosting and security providers may retain technical request and security information under their applicable configurations and policies. Downloaded PDFs remain under the visitor’s control. Academy requests are kept for as long as needed to answer them and to manage the resulting licences; invitation and password links expire after 14 days and two hours respectively. Email correspondence is kept only for as long as needed to respond, manage a resulting business relationship, maintain necessary records and meet legal obligations.

7. International processing

Hosting, security, email or external learning providers may process information outside Switzerland. Provider locations, transfer mechanisms and safeguards depend on the services active at the time. Where personal data is transferred to a country that does not offer an adequate level of data protection, Axendor relies on the safeguards provided by its service providers, such as standard contractual clauses.

8. Cookies, analytics and local storage

With your consent, the website uses Microsoft Clarity analytics to understand how visitors use pages, through usage data such as clicks, scrolling, page views, device and browser details and approximate location, together with Clarity cookies. The legal basis is your consent, which you can give, refuse or withdraw through the cookie banner and the “Cookie preferences” link in the footer. Clarity is not loaded if you reject it. Microsoft processes this data as a service provider and may process it outside Switzerland, including in the United States, under its own terms and the Microsoft Privacy Statement. The website does not use advertising trackers. It also uses the tab-local diagnostic storage described above and stores your analytics choice in localStorage. Details are in the separate Cookie Notice.

9. Rights and complaints

Subject to applicable law, individuals may request access, correction, deletion, restriction, objection and data portability where relevant. Consent may be withdrawn at any time without affecting earlier processing. Requests should be sent to contact@axendorinnovation.com; Axendor may need reasonable information to verify the requester.

In Switzerland, complaints may be addressed to the Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, individuals may also complain to the competent supervisory authority in their EEA country.

10. Automated decisions and external links

The diagnostic is an indicative screening tool. It does not make a legal, contractual or similarly significant automated decision and does not automatically prescribe an intervention. External websites and services have their own terms and privacy practices.

11. Updates

This policy may be updated when the website, providers or legal requirements change. The date above identifies the current version.