Privacy

This policy sets out which personal data is processed when you visit this website or send an enquiry, why that happens and what rights you have. It follows the Swiss Federal Act on Data Protection (FADP) in the version in force since 1 September 2023. Where the offering also addresses people in the European Economic Area, the General Data Protection Regulation (GDPR) applies in addition.

Celestin Enzler, sole proprietorship, trading as Celestino Consulting
Florastrasse 11, 6330 Cham, Switzerland
Email: info@celestinocrypto.ch
Phone: +41 79 892 60 91
No data protection adviser under Article 10 FADP and no data protection officer under Article 37 GDPR has been appointed. Neither is required for a business of this size and this kind of processing. Please address any request directly to the contact details above.

Personal data is processed only to the extent necessary for the purpose concerned. No data is collected as a precaution, no personality profiles are built and no data is sold. Wherever an enquiry can be answered without a particular detail, providing that detail is optional.

The website runs with an external hosting provider that processes personal data solely on our behalf and is contractually bound to confidentiality. When a page is requested, technical log data is recorded on the server: IP address, time, the address requested, the volume of data transferred, browser and operating system identifiers and the referring page. These logs serve secure operation and fault diagnosis, are not combined with other data and are deleted automatically by the host after a short period.
[[OPEN: enter the name, registered office and server location of the hosting provider and confirm how long server logs are retained there.]]

No third-party service is used to measure reach. Instead, a counter of our own runs on this website's server. For each page view it records: the address requested without query parameters, the language version, the device class (phone, tablet or computer), the domain of the referring page without the full address, and the country of origin. The country is derived from the IP address using a database held locally on the server, without any third-party lookup. The IP address itself is used in memory only and is not stored. Only daily totals are stored, from which no individual person and no individual visit can be identified. No cookies are set for this, no recognition identifier is assigned and no data is passed to third parties.

The form on the contact page collects: name and email address as required fields, plus, optionally, telephone number, your own assessment of your level of knowledge, the amount you have in mind, your time horizon and your message. These details are used solely to answer your enquiry and to prepare a first conversation. They are sent by email to the Celestino Consulting mailbox and additionally stored in the protected administration area of this website so that no enquiry is lost. The notification email also contains the time and the IP address of the submission, which serves as evidence in case of misuse. In the copy stored on the server the IP address does not appear in clear text but only as a shortened check value generated with a secret key.

Under the GDPR the legal bases are Article 6(1)(b) (steps taken at your request prior to entering into a contract) and Article 6(1)(f) (legitimate interest in handling enquiries properly). Under Swiss law the processing rests on your own act of getting in touch; it is proportionate to the stated purpose and recognisable to you. Without a name and email address an enquiry cannot be answered; every other field may be left empty.

The form is protected against spam. This includes a field invisible to humans, a check on the time between loading and submitting, a simple arithmetic question and a limit on the number of submissions per IP address. For that limit the IP address is held on the server for the duration of the time window. In addition, every submission and every block is recorded in an operating log with the time, the check value of the IP address described above and a shortened browser identifier. No third-party service such as reCAPTCHA or Turnstile is used, so no data leaves the server.

After submitting you receive an automatic acknowledgement at the email address you provided. It contains no advertising and only confirms that your message has arrived.
[[OPEN: state which provider sends the website's emails, that is, the host's mail server or an external sending service, so that it can be named here as a processor.]]

If you write to us or call us directly, your details are used to deal with your request. The website also carries a link to WhatsApp. It establishes no connection unless you click it. If you use that route, the terms and privacy policy of the WhatsApp provider apply to the exchange of messages, over which we have no influence. For confidential information we recommend email or the form.

The price ticker shows market data from CoinGecko. This website's server fetches that data itself at regular intervals and serves it from a cache. Your browser makes no connection to CoinGecko and no data about you is transmitted there.

All typefaces are held on this website's own server. No fonts are loaded from Google Fonts or any other network. The site embeds no videos, maps, calendars or social media content. Links to Instagram or other platforms only take you there once you click them.

This website sets no cookies for advertising or analytics. Your choice in the cookie notice is stored in your browser's local storage under the key "siteConsent" so that the notice does not reappear on every visit; that entry stays in your browser and is not transmitted to the server. If you switch language via a link carrying a language parameter, your choice is stored for one year in a technically necessary cookie named "SITE_LANG". In the password-protected administration area a further cookie is set for sign-in; that area is not accessible to visitors.

At the time of this version neither Google Analytics nor Google Tag Manager, neither a Meta pixel nor any comparable service is active. The website is built to load such services only after explicit consent and passes no data to them until then. Should such a service be used in future, it will only happen with your consent given through the cookie notice, and this policy will be updated beforehand.

Your data is not sold and not passed on for advertising purposes. Access is limited to the service providers needed to run the site, namely the hosting provider and the email sending provider, each acting as a processor within the meaning of Article 9 FADP and Article 28 GDPR. Data is disclosed to authorities only where there is a legal obligation to do so.

Personal data is transferred to countries outside Switzerland only to the extent that the servers used are located there.
[[OPEN: once the hosting provider is fixed, state the server location here. If it lies within the European Economic Area, data protection is recognised as adequate under the Federal Council's country list; if it lies outside, the standard contractual clauses must also be named as the safeguard.]]

Enquiries that do not lead to an engagement are deleted once they have been answered and no follow-up questions are to be expected, at the latest after twelve months. If an enquiry leads to an engagement, the statutory periods apply; business records must be kept for ten years under Article 958f of the Swiss Code of Obligations. The aggregated visitor statistics contain no personal data and are kept permanently. Operating logs are overwritten on a rolling basis.

The website is delivered exclusively over an encrypted connection (HTTPS with TLS), and the browser is instructed to use encryption for future requests as well. A strict content policy limits which resources may be loaded at all. The administration area is password protected and stored enquiries cannot be retrieved from outside. Complete protection against unauthorised access is nevertheless not possible when data travels over the internet.

You may at any time ask whether and which personal data concerning you is processed (Article 25 FADP). You may request the correction of inaccurate data, its deletion or destruction, and that processing be stopped (Article 32 FADP), and you may request that your data be handed over in a common electronic format or transferred to another party (Article 28 FADP). An informal message to the address above is sufficient. So that information reaches the right person, we may ask for proof of identity. Such information is provided free of charge as a rule.

Where the GDPR applies, you additionally have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may object at any time to processing based on a legitimate interest (Article 21). Any consent given may be withdrawn at any time with effect for the future, without affecting the lawfulness of processing carried out beforehand. No automated individual decision-making or profiling within the meaning of Article 22 GDPR takes place.

If you believe your data is not being processed lawfully, you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern, edoeb.admin.ch). If you live in the European Union, you may also turn to the data protection supervisory authority of your country of residence (Article 77 GDPR). We would ask you to come to us first, which is usually the faster route.

This policy is amended whenever the website or the services it uses change. The version published on this page at the time is the one that applies.
Last updated: August 2026.