Privacy Policy

KATalyzed | Your External CMO

Effective date: November 2, 2026
Last updated: November 2, 2026
Website: https://katalyzed.com

1. Introduction

Your privacy matters to us.

At KATalyzed, we are committed to protecting your personal information and handling it with transparency, care, and responsibility.

This Privacy Policy explains how we collect, use, store, protect, and share personal information when you visit our website, contact us, or engage with our marketing consulting, Fractional CMO, branding, creative, and professional training services.

Our approach is based on the European Union General Data Protection Regulation (GDPR), applicable Slovenian legislation, and other relevant international privacy laws, including Germany's Telecommunications Digital Services Data Protection Act (TDDDG), Poland's Electronic Communications Law, and the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), where these laws apply.

This policy applies to website visitors, prospective clients, existing clients, business partners, and other individuals who interact with KATalyzed.

2. Data Controller and Contact Information

The person responsible for processing personal information through this website is:

Katja Omlor
KATalyzed | Your External CMO

Voklo 69
4208 Šenčur
Slovenia

Email: hello@katalyzed.com
Phone: +386 41 427 269
Website: https://katalyzed.com

For any questions about privacy, personal information, or your data protection rights, please contact us directly.

3. What Personal Information We Collect

We collect only personal information that is reasonably necessary for operating our website, communicating with visitors, delivering services, and managing business relationships.

Depending on your interaction with KATalyzed, this may include:

Personal and Business Contact Information

• Full name, email address, and telephone number.

• Company name, professional position, and business address.

• Country of residence or business location.

• Information submitted through contact forms, emails, or consultation requests.

Business and Project Information

• Business objectives and marketing requirements.

• Project descriptions, inquiries, and correspondence.

• Information required for proposals, contracts, and service delivery.

• Billing, invoicing, and payment-related records.

• Information exchanged during consultations, workshops, or projects.

Technical and Website Information

• IP address and approximate location.

• Browser type, device information, and operating system.

• Pages visited, referral URLs, and access times.

• Website security and technical performance information.

• Cookie preferences and other technical identifiers, where applicable.

Information from Third Parties

We may receive professional information through referrals, public business directories, professional networking platforms, or business partners, where permitted by law.

We do not intentionally collect sensitive personal information through this website.

4. Why We Process Your Information

We process personal information for legitimate and clearly defined business purposes.

These include:

Communication and Inquiries: Responding to questions, consultation requests, and business inquiries.

Marketing Consulting and Service Delivery: Preparing proposals, managing projects, conducting workshops, and delivering agreed services.

Business Relationship Management: Maintaining professional communications and client relationships.

Website Operation and Security: Maintaining website functionality, protecting against unauthorized activity, and resolving technical issues.

Legal and Financial Obligations: Managing contracts, accounting records, invoices, tax obligations, and legal compliance.

Marketing Communications: Sending business updates, service announcements, or relevant marketing information where legally permitted.

Website Analytics: Understanding website usage and improving performance where appropriate consent or another valid legal basis applies.

We do not use personal information for purposes incompatible with those for which it was originally collected unless a lawful basis permits such processing.

5. Legal Basis for Processing

Under Article 6 of the GDPR, we process personal information using one or more of the following legal bases:

Consent — Article 6(1)(a): Where you have voluntarily agreed to a particular processing activity, such as optional analytics or consent-based email marketing.

Contractual Necessity — Article 6(1)(b): Where processing is necessary to take steps at your request before entering into a contract or to fulfill a contract with you.

Legal Obligation — Article 6(1)(c): Where processing is required by applicable accounting, tax, or other legal obligations.

Legitimate Interests — Article 6(1)(f): Where processing is necessary to operate, secure, and improve our business, respond to professional inquiries, maintain business relationships, or protect legal interests, provided these interests are not overridden by your rights and freedoms.

Where we process information relating to employees or representatives of business clients, legitimate interests or another applicable legal basis may apply.

If processing relies on consent, you may withdraw it at any time.

6. Contact Forms and Business Communications

When you contact us through our website, email, telephone, or other communication channels, we use the information provided to respond to your request and manage related communications.

Your information may also be used to arrange consultations, prepare proposals, or deliver requested services.

Submitting a contact form does not automatically subscribe you to promotional emails.

Where required, separate consent is obtained for marketing communications.

You are not required to provide personal information unless it is necessary for your inquiry, contractual relationship, or another specified purpose.

7. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to maintain essential functions, remember preferences, improve website performance, or support optional analytics and marketing activities.

Cookies may include:

Essential Cookies: Necessary for website security, functionality, and services explicitly requested by visitors.

Functional Cookies: Used to remember optional website settings and preferences.

Analytics Cookies: Used to understand website usage and performance.

Marketing Cookies: Used to measure marketing effectiveness or provide advertising-related functionality, where enabled.

Where legally required, non-essential cookies and tracking technologies will be activated only after obtaining your valid consent.

Visitors must be able to reject optional cookies, make meaningful choices, and withdraw consent through the website's cookie management functionality.

Essential technologies that meet the relevant legal exemptions may operate without consent.

Where required, detailed information about individual cookies, their providers, purposes, and retention periods will be made available through our cookie management system.

8. Analytics and Third-Party Technologies

KATalyzed may use external service providers to operate and maintain its website and business activities.

Depending on the services implemented, these may include website hosting, technical maintenance, email communication, meeting scheduling, analytics, customer relationship management, and digital collaboration tools.

We assess applicable privacy and security requirements before using third-party service providers.

Where legally required, appropriate data processing agreements and safeguards are implemented.

Optional analytics, advertising technologies, and third-party integrations requiring consent will not be activated before valid consent is obtained.

Where providers act as independent controllers, their separate privacy policies may also apply.

9. Marketing Emails and Newsletters

We may communicate with clients and prospective clients about relevant services, business updates, workshops, and marketing insights where permitted by applicable law.

Where consent is required, we obtain it before sending promotional communications.

Where applicable law permits communications to existing customers or business contacts without prior consent, we respect the relevant legal conditions and provide an effective opportunity to opt out.

You may unsubscribe from promotional communications at any time by using an available unsubscribe mechanism or emailing hello@katalyzed.com.

We do not disclose contact information to unrelated third parties for their independent direct marketing without a valid legal basis.

10. When We Share Personal Information

We may share personal information with carefully selected third parties where reasonably necessary for legitimate business operations or legal compliance.

These may include:

• Website hosting and technology providers.

• Email and communication service providers.

• Accounting and professional advisers.

• Contractors and project collaborators.

• IT security and support providers.

• Public authorities where disclosure is legally required.

We require appropriate confidentiality, privacy, and security safeguards when third parties process information on our behalf.

We do not sell personal information for monetary compensation.

Some advertising or tracking disclosures may nevertheless qualify as a "sale" or "sharing" under certain privacy laws, regardless of whether payment is involved. Where applicable, we provide the legally required disclosures and choices.

11. International Data Transfers

KATalyzed operates internationally and may communicate or collaborate with clients, partners, and service providers outside the European Economic Area (EEA).

Where personal information protected by the GDPR is transferred outside the EEA, we use an appropriate lawful transfer mechanism.

Depending on the circumstances, this may include:

• European Commission adequacy decisions.

• European Commission Standard Contractual Clauses.

• Appropriate supplementary technical or organizational measures.

• The EU-US Data Privacy Framework for qualifying transfers to appropriately certified US organizations.

• Other lawful transfer mechanisms permitted by applicable legislation.

You may contact hello@katalyzed.com to request further information about applicable international transfer safeguards.

12. How Long We Keep Personal Information

We retain personal information only for as long as necessary to fulfill the relevant purpose, comply with applicable law, or protect legitimate legal interests.

Retention depends on the category of information and its purpose.

Business Inquiries: Retained for as long as reasonably necessary to handle the inquiry and related communications.

Client and Contractual Records: Retained during the business relationship and for any additional period required by law or justified by relevant legal claims.

Accounting and Invoicing Records: Retained for the applicable statutory retention periods.

Marketing Information: Retained while an appropriate legal basis exists, including until consent is withdrawn where applicable. Limited records may be maintained to honor unsubscribe requests.

Website and Security Logs: Retained for the period reasonably necessary for technical operation, security, and incident investigation.

Cookie Information: Retained in accordance with the purposes an