Privacy Policy
Last updated: October 2026
1. Controller
The controller responsible for the processing of personal data on this website and in connection with the services offered is:
KIAM Advisory
Emeline Sandrine Betsi Épse Kiam
Veilchenweg 10
59192 Bergkamen
Germany
Email: info@kiam-advisory.com
Website: www.kiam-advisory.com
For applications and programme-related communication, the following address is additionally available:
service.pedagogique@kiam-advisory.com
A data protection officer has not been appointed, insofar as there is no legal obligation to do so.
2. General Information on Data Processing
The protection of your personal data is important to us.
We process personal data only insofar as this is necessary for the operation of our website, the handling of enquiries and applications, the performance of our services, communication with prospective clients, participants and partners or the fulfilment of legal obligations.
Processing is carried out in particular on the basis of Art. 6(1)(a), (b), (c) and (f) GDPR, in each case depending on the specific processing operation.
3. Accessing the Website and Technical Access Data
When our website is accessed, technically necessary information may be processed. This may include in particular:
IP address
date and time of access
pages accessed
browser used
operating system
referrer information
technical information about the device used
The processing serves in particular the technical provision, security and stability of the website.
These data are not merged with other data sources unless this is necessary for the stated purposes or permitted by law.
4. Hosting and Systeme.io
For the provision and technical management of essential parts of our website and our digital offerings, we use systeme.io, a service of ITACWT Limited, 2 Cruise Park Rise, Tyrrelstown, Dublin 15, Ireland.
In the course of its use, personal data may be processed, in particular in connection with:
contact forms
applications
course and programme access
email communication
registrations
marketing and newsletter functions, insofar as these are used
technical access to the website
According to its own information, Systeme.io uses, among other things, infrastructure from Amazon Web Services. Processing is carried out in accordance with the applicable data protection provisions and contractual agreements.
Further information on data processing by systeme.io can be found in the provider's privacy information.
Website content (pages, scripts, images) is delivered via the Amazon CloudFront content delivery network of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg.
To detect and fix technical errors, systeme.io loads the Sentry service of Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, on all pages. Technical error data may be processed in the process, in particular IP address, browser and device information and the page visited. This is based on our legitimate interest in the stable and secure operation of the website pursuant to Art. 6(1)(f) GDPR.
When you fill in forms, systeme.io temporarily stores the values entered in your browser's session storage (sessionStorage) so that entries are not lost when the page is reloaded. This data is deleted when the browser tab is closed and is not transmitted to third parties.
5. Contacting Us
If you contact us by email or via a contact form, we process the data you transmit, in particular:
name
email address
telephone number, if provided
organisation or company, if provided
content of your enquiry
other voluntarily transmitted information
The processing is carried out to handle your enquiry and, where applicable, to prepare or perform a contract.
6. Applications for KIAMBETSI® Programmes
If you apply for a KIAMBETSI® programme, we process the data provided in the application form.
This may include in particular:
first name and surname
email address
telephone number
country
current position
organisation or company
industry
professional experience
professional background
motivation
desired skills development
professional or entrepreneurial challenges
other voluntary information
In the further course of the application procedure, depending on the programme and examination requirements, additional documents may be requested, in particular a CV, cover letter and proof of qualifications.
Insofar as the submission of proof of identity is required, you will be informed of this separately.
The processing serves to review the application, to communicate with applicants and to prepare the selection and admission procedure.
After an initial review by KIAM Advisory, applicants whose documents have been selected for the next phase may be asked to submit original certificates to the competent partner.
Final admission will only be communicated by KIAM Advisory after review of the required documents and receipt of the corresponding confirmation from the competent partner.
7. Coaching, Consulting, Training and Programmes
If you make use of services from KIAM Advisory, personal data may be processed that are necessary for the preparation, performance and follow-up of the respective service.
This may include in particular:
contact details
professional information
organisational and company information
information on professional goals
information from conversations and work processes
organisational information on the performance of the service
The processing is carried out for the implementation of pre-contractual measures, for the performance of the contract and, where applicable, on the basis of legitimate interests.
8. Confidentiality in Coaching and Consulting
In the context of coaching, consulting and development services, information may be processed that is voluntarily disclosed by the respective participants.
This information is treated confidentially and, as a matter of principle, is not disclosed to third parties without an appropriate legal basis or consent.
In the case of services commissioned by companies, a distinction is made between the interests of the client and confidentiality towards the coached or participating person.
As a matter of principle, the content of individual conversations is not disclosed to the client without an appropriate basis.
This does not apply to information whose disclosure has been expressly agreed or is required by law.
9. Partner Area
A protected digital partner area may be provided for authorised partners.
In this context, the following data in particular may be processed:
name
email address
organisation
access credentials
information on the use of the partner area
technical access data
The processing is carried out to provide and manage partner access and to carry out the respective collaboration.
On the login page of the Partner Area, systeme.io additionally loads the GrowthBook service (GrowthBook, Inc., USA) for the technical control of features. A technical entry (gbFeaturesCache) is stored in your browser's local storage (localStorage).
10. Email Communication
We use email communication to handle enquiries, applications and contractual matters and for organisational communication with prospective clients, participants and partners.
Depending on the purpose and content of the communication, the processing may be based on Art. 6(1)(b), (c) or (f) GDPR or on consent pursuant to Art. 6(1)(a) GDPR.
11. Newsletter and Promotional Communication
Insofar as we offer a newsletter or other promotional communication, it is, as a matter of principle, only sent on the basis of corresponding consent, insofar as such consent is required by law.
Consent given may be withdrawn at any time with effect for the future.
The lawfulness of the processing carried out until the withdrawal remains unaffected.
We use the double opt-in procedure for newsletter subscriptions: after submitting the sign-up form, you will receive an email with a confirmation link. Your subscription only becomes effective once you click this link, and your contact is then marked with the attribute "Newsletter" in our system. We process your first name, last name, email address and the time of subscription and confirmation. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
Requesting a free guide (e.g. decision guide, clarity guide) is not a newsletter subscription. We use the data provided to deliver the requested guide.
12. Cookies
Our website may use cookies and similar technologies.
Technically necessary cookies may be used insofar as they are required to provide the website or service function expressly requested by you.
For non-essential cookies or similar technologies, we obtain consent prior to their use, insofar as required by law.
The legal basis is in particular § 25 TDDDG in conjunction with Art. 6 GDPR.
Which specific cookies and technologies are used depends on the technical configuration of the website activated at the time.
No cookies are currently set on the general pages of this website.
The following cookies are set when the order pages are opened:
purchase_process_id (systeme.io, duration: session): assignment of the ongoing order process
v (systeme.io, duration: approx. 400 days): visitor identification for the order process
__stripe_mid (Stripe, duration: 1 year): fraud prevention
__stripe_sid (Stripe, duration: 30 minutes): fraud prevention
m (Stripe, domain m.stripe.com, duration: approx. 400 days): fraud prevention and device recognition
hmt_id (hCaptcha, duration: 30 days): detection of automated access
__cf_bm (Cloudflare for hCaptcha, duration: 30 minutes): bot management
__cflb (Cloudflare for hCaptcha, duration: short-term): load balancing
13. Analysis and Tracking
Analysis or tracking technologies are only used insofar as they are actually activated on the website and the necessary data protection requirements are met.
A mere verification of the website via Google Search Console does not constitute general visitor analysis via Google Analytics.
Should analysis, marketing or tracking services be used in the future, the corresponding information and, where applicable, the necessary consent options will be adapted.
14. External Links and Social Networks
Our website may contain links to external websites and social networks.
When you click on such a link, you leave our website. The operator of the respective external platform is responsible for the data processing on that platform.
We do not have full influence over the data processing carried out there.
15. Disclosure of Personal Data
Personal data are only disclosed insofar as there is a legal basis for doing so.
Disclosure may take place in particular if:
this is necessary for the performance of a contract,
you have given corresponding consent,
we are legally obliged to do so,
this is necessary to safeguard legitimate interests and there are no overriding interests of the data subject to the contrary,
an integrated service provider processes personal data on our behalf.
In the context of application and admission procedures, necessary application and qualification data may be transmitted to the respective competent partner, insofar as this is necessary for review and admission and permissible under data protection law.
16. Processors and Service Providers
We may use external service providers for certain technical and organisational processes.
Insofar as these process personal data on our behalf, this is done on the basis of corresponding data processing agreements or another suitable basis under data protection law.
The service providers used may include in particular providers for:
website and platform operation
email communication
digital course and learning systems
technical infrastructure
payment processing
accounting
IT security
insofar as these services are actually used.
17. Payment Processing and Accounting
Insofar as chargeable services are offered, personal data may be processed for payment processing and invoicing.
This may include in particular name, billing address, payment information, contract data and invoice data.
Payment and billing data may be processed and stored within the scope of statutory retention obligations.
The following services are used for this on our order pages:
Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland) for payments by credit or debit card and, depending on the offer, Apple Pay, Klarna and Multibanco
PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) for payments via PayPal
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), available as a payment method for digital products
Klarna (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden), available as a payment method for digital products
hCaptcha (Intuition Machines, Inc., 350 Alabama Street, San Francisco, CA 94110, USA) to protect the payment form against misuse and automated access
Stripe and hCaptcha are already loaded when the order page is opened. Payment data is transmitted directly to the respective payment service. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and, for fraud prevention and protection against misuse, Art. 6(1)(f) GDPR.
18. Transfer to Third Countries
Personal data are only transferred to countries outside the European Union or the European Economic Area if the legal requirements of Art. 44 et seq. GDPR are met.
This may include in particular an adequacy decision of the European Commission or appropriate safeguards such as standard contractual clauses.
Insofar as individual service providers process data outside the EEA, the applicable data protection requirements are taken into account.
A connection to the USA currently exists in particular for the following services or their group companies: Sentry (Functional Software, Inc.), Stripe (Stripe, Inc.), hCaptcha (Intuition Machines, Inc.), Cloudflare (Cloudflare, Inc.), Amazon Web Services (Amazon.com, Inc.), PayPal (PayPal Holdings, Inc.), Apple (Apple Inc.) and GrowthBook (GrowthBook, Inc.).
19. Storage Period and Erasure
We store personal data only for as long as is necessary for the respective purposes or as statutory retention obligations exist.
Once the respective processing purpose no longer applies, the data are erased unless there are statutory retention obligations or other legally permissible grounds for further storage.
Statutory retention obligations may arise in particular from tax and commercial law provisions.
Insofar as data are required for the establishment, exercise or defence of legal claims, storage may continue beyond this.
20. Rights of Data Subjects
Subject to the statutory requirements, you have in particular the following rights:
right of access pursuant to Art. 15 GDPR
right to rectification pursuant to Art. 16 GDPR
right to erasure pursuant to Art. 17 GDPR
right to restriction of processing pursuant to Art. 18 GDPR
right to data portability pursuant to Art. 20 GDPR
right to object pursuant to Art. 21 GDPR
right to withdraw consent given with effect for the future
To exercise your rights, you can use the contact details provided above.
21. Objection
Insofar as we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.
If personal data are processed for the purposes of direct marketing, you may object to this processing at any time.
22. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.
For our registered office in North Rhine-Westphalia, the following supervisory authority in particular is relevant:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Further information and the current contact details can be found on the authority's website.
23. Data Security
We take appropriate technical and organisational measures to protect personal data against loss, destruction, manipulation, unauthorised access and other unauthorised processing.
The security measures are adapted in line with technical developments and organisational possibilities.
24. Updates to this Privacy Policy
We may amend this privacy policy if legal requirements, technical procedures or the services we use change.
The current version published on this website applies in each case.
Last updated: October 2026