Celonis Global Privacy Notice

Last Update: July 20, 2026

1. About this Privacy Notice

This Celonis Privacy Notice (“Privacy Notice”), on behalf of Celonis SE and all subsidiaries (“Celonis”, “we”, “us”, “our”), explains how and what type of data related to you as a natural person (“Personal Data”) is collected, why it is collected and to whom it is shared or disclosed. It also contains comprehensive information about your rights related to your Personal Data. Please read this Privacy Notice carefully.

This Privacy Notice applies when you:

● Visit any of our websites, social media pages, or office premises,

● Access or use any of our applications or platforms, such as Celonis EMS, Celonis Free Plan, Celonis Academy, Celonis Community and the Celonis Partner Hub, or make.com,

● Register and/or attend any virtual or in-person events hosted or attended by us,

● Your employer does business with us,

● Contact our customer support or complete a webform,

● Participate in our user research activities,

● Otherwise interact or communicate with us, including through our chatbot.

These services are hereinafter collectively referred to as the “Services”.

Important Notes:

● For employment candidates with Celonis, the dedicated Privacy Notice for the application process can be found here.

● On our websites, we also collect cookies information, for details please see our Cookies notice here.

● For customers with a Data Processing Agreement (DPA), that agreement takes precedence.

● This Notice applies globally unless superseded by local law addendums.

2. About us

When we refer to “Celonis” (“we”, “us”) in this Privacy Notice, we mean Celonis SE and/or the Celonis subsidiary that is responsible for the processing of your Personal Data.

Data Controller

Celonis SE, Theresienstraße 6, 80333 Munich, Germany

Privacy Contact

Email: privacy@celonis.com

Mailing Address: Privacy Team, Celonis SE, Theresienstraße 6, 80333 Munich, Germany

3. What types of Personal Data do we collect?

We collect and process the following types of Personal Data:

Contact and business data

Contact data includes, but are not limited to, last name, first name, email address (personal and business), physical address, job position, company, phone number, country of origin, LinkedIn profile, and in some circumstances usernames and passwords (encrypted) related to the product.

Communication and interaction data

Communication data refers to the data resulting from your interaction with us, e.g., emails, chat messages, webinars and events visited/attended, files downloaded, user research participation, and product interest information. We may also collect registration information related to your attendance at one of our events, including travel information, scheduling information, food preferences or allergies, and accessibility requests. When attending an event, Celonis and its agents may photograph and record the event and activities related to the event in visual and audio media. For property under Celonis responsibility, we may process video surveillance (CCTV) information and support tickets. When you participate in business meetings, product demonstrations, or discovery calls, with our Go-To-Market and account teams, we may collect audio and video recordings, live transcriptions, meeting metadata, and AI-generated summaries.

Application-related usage data

We may automatically gather and analyze information on how and whether specific features of our Services are used, such as details about which of our applications and versions are being used, user interactions with the Services (including searches and other actions taken by users), pages and files viewed, online trainings attended, types of data sources queried, types of visualizations built, system configuration information, number of steps in a workflow, the type(s) of operations used and the queries submitted, as well as hardware properties such as CPU type and amount of RAM, logfile data, and date and time stamps associated with use of the Services.

Device and browser data

When you visit one of our websites or applications, data from your computer or mobile device may be collected, such as device type, geographic location derived from IP, information about the browser type and version, the operating system and version, the internet service provider or mobile carrier, the IP Address (or proxy server), session duration, referring URL (if any), and identifiers that help us to recognize your device and validate that you are a licensed user.

Payment & Financial Data

Credit card and payment method info, cardholder name and billing address, payment type and last 4 digits, billing email, purchase history, invoices and statements, tax ID numbers, payment status.

IMPORTANT (Payment Data): Celonis does not store full credit card numbers. Payment processing is handled by third-party processors under contractual obligations meeting rigorous cybersecurity standards (such as PCI SSC Standards set by the Payment Card Industry Security Standards Council).

Cookies & Tracking Technologies

We may use cookies and tracking technologies to enhance experience, understand behavior, and support marketing. This technology may capture screen recordings and visual interactions, mouse clicks and scrolling patterns, page navigation and dwell time, and form interactions (with masking for sensitive fields).

Chat Recordings

Celonis offers chat functionality through third-party vendors on various properties:

● Public Website Chat: Available on www.celonis.com, operates via AI bot, publicly accessible.

● Academy Chat: Available on Celonis Academy, accessible behind login, AI-powered learning assistance.

By chatting with us, you consent to the recording and storing of the chat by Celonis and our third-party vendors for training and quality purposes. By clicking "Accept" or similar button, you agree to our Terms and Privacy Notice.

Chats are stored and may not be deleted immediately upon ending the conversation. We may use the recordings for training AI systems (where applicable), quality assurance purposes, customer support analysis, and product improvement.

Microsoft Teams Meeting Consent & Technical Controls

For certain business interactions conducted via Microsoft Teams, we display a notice to inform participants that the meeting is being recorded and processed using artificial intelligence features. This notice outlines the purposes of the processing and directs participants to this privacy notice for full details.

Consent Management: We require and collect your explicit consent before recording begins, as managed natively through the Microsoft Teams platform.

4. How do we collect your Personal Data?

You provide Personal Data directly to us by accessing one of our websites or applications, attending one of our events, registering and/or using one of the Services, and participating in activities with us (e.g. user research). We may also obtain Personal Data from your employer in the context of providing the Services or obtain information about you from third party sources, such as public databases, websites, resellers and distributors, marketing or business partners, security and fraud detection firms and social media platforms.

5. Why do we process your Personal Data

We may process your Personal Data for one or more of the following purposes:

Provide the requested Services

To provide the requested Services and to make sure that we fulfill contractual obligations with you or your organization. This includes but is not limited to resolving technical issues you encounter, responding to your requests for assistance, providing training related to our Services and responding to any request you may send us through our website, email or any other way.

Improve and enhance our Services

To improve our operations, systems, products, processes in order to enhance your experience, we need to understand your preferences, analyze aggregated, anonymized or statistical usage data and crash information as well as conduct surveys with regards to our Services. Celonis may use session replay technology on a limited subset of pages for research and user experience improvement purposes.

Enable security and compliance

To maintain the security and compliance of our Services with the objective to protect against, investigate and deter fraudulent, unauthorized, or illegal activity and to avoid and detect attacks on our applications or misuse of our Services. To ensure appropriate security of our office premises and comply with any legal and regulatory obligations.

Perform sales, marketing and events related activities

To communicate news about upcoming events, products, services and for direct advertising. To inform you about our Services. To manage your registration to our events and to make visual and audio media related to the event available to you.

Sales Meetings & AI Processing

If you participate in a meeting with us (including via Microsoft Teams or other communication platforms), you acknowledge that the session may be recorded, transcribed, and utilized for data collection and processing. Where applicable, we may use Artificial Intelligence (AI) analytics and advanced processing tools to analyze this data for the following specific business purposes:

Automated Transcription & Summarization: Meeting audio/video is processed to generate secure text transcripts, automated meeting summaries, and action items.

Deal Execution & CRM Accuracy: To automatically log customer interactions, timelines, and technical requirements directly into Salesforce, eliminating manual data entry and ensuring historical context is preserved for account teams.

Revenue Optimization & Pipeline Expansion: To analyze conversational keywords, customer pain points, and mentioned product lines to proactively identify relevant portfolio expansions, upgrades, or add-ons.

Sales Coaching & Quality Assurance: To review high-impact calls internally for Go-To-Market team onboarding, quality assurance, compliance with internal messaging, and feedback on pitch delivery.

We process your Personal Data only where one of the following applies:

● We need to process your Personal Data to perform our contractual responsibilities or requested Services,

● We have a legitimate interest to process your Personal Data (which is not overridden by your rights). Our legitimate interests may include improving and optimizing our product experiences, ensuring the physical and cybersecurity of our networks and office premises, and conducting responsible B2B sales, prospecting, and data enhancement activities,

● You have given consent to process your Personal Data. This may include instances where you opt in to receive our direct marketing communications, or when you accept the placement of non-essential tracking cookies, session replay scripts, or tracking pixels via our Cookie Consent Banner. You have the right to withdraw this consent at any time,

● We need to process your Personal Data to comply with a legal or regulatory obligation.

7. Who will have access to your Personal Data?

Depending on the purpose and the necessity, we may disclose your Personal Data to the following categories of recipients:

● To any subsidiaries of Celonis SE (i.e. internal transfer within our organization),

● To third parties who act as data processors under our instruction as specified in the related concluded contracts,

● To our auditors, attorneys or other advisors under professional obligations of confidentiality in connection with corporate functions,

● When you sign up to one of our events and we ask third parties to host, sponsor or present, including webinars and trainings, we may forward your contact data to the respective third party who may use it to provide access to the event or to contact you for related marketing purposes,

● To government, law enforcement and regulatory bodies to meet applicable legal or regulatory obligations.

A list of applicable recipients can be provided upon request.

If you are an EU resident, your Personal Data may be transferred outside of the European Economic Area (EEA). We take the necessary steps to ensure that the transfer of your Personal Data outside of the EEA receives an adequate level of protection.

8. How long do we store your Personal Data?

When permitted and in compliance with applicable laws and regulations, Your Personal Data will be deleted upon your request or as soon as it is no longer serving the purpose for which it has been collected. If regulations require longer storage of your Personal Data, or if we need your Personal Data to assert legal claims or defend against legal claims, we will store your Personal Data until the expiration of the corresponding storage period or until the settlement of the claims.

9. How do we protect your Personal Data?

To protect your Personal Data against accidental or unlawful destruction, loss, use, or alteration and against unauthorized disclosure or access, we use adequate physical, technical and organizational security measures.

10. What are your rights regarding your Personal Data?

As permitted by, and in compliance with, applicable laws and regulations, we provide you with the following rights:

● Request access, update, correction or deletion of your Personal Data,
● Withdraw your consent at any time for future processing (i.e. our marketing emails permit you to opt-out of receiving further communications by selecting the “unsubscribe” link),
● Request to restrict the processing or object to the processing of your Personal Data,
● Have your Personal Data transmitted to other recipients, if technically feasible,
● File a complaint with us and/or with a relevant data protection authority,
● Not to be discriminated for exercising your rights.


Additional rights may be applicable to you based on local laws and regulations. You may exercise your rights by contacting us at privacy@celonis.com.

California Residents' Rights (CCPA/CPRA)
California Notice at Collection (REQUIRED DISCLOSURE)
At the time you provide personal information to Celonis, you have the right to know:
1. The categories of personal information we collect
2. The purposes for which we use your information
3. Whether we share that information with third parties (including for sales/sharing and targeted advertising)
4. Your California privacy rights

DISCLOSURE
● We collect contact data, communication data, usage data, device data, and payment data.
● We use this data to provide services, improve products, market our offerings, and comply with law.
● We share data with service providers, subsidiaries, and third-party vendors.
● Some sharing constitutes "sales" or "sharing" under California law.
● You have rights to access, delete, correct, and opt-out of sales/sharing.

Your Privacy Choices
● Right to Opt-Out of Sale/Sharing: Email privacy@celonis.com.
● Right to Access Your Data: Email privacy@celonis.com.
● Right to Delete Your Data: Email privacy@celonis.com.
● Right to Correct Inaccurate Data: Email privacy@celonis.com.
● Right to Limit Use: Email privacy@celonis.com.
● Right to Non-Discrimination: We will not penalize you for exercising rights.

To Exercise Rights
● Email: privacy@celonis.com.
● The subject line should indicate which right you're exercising.
● Response timeline: 45 days.

11. Chat Recording Practices

Celonis offers chat functionality through third-party vendors on various properties:

● Public Website Chat: Available on www.celonis.com, operates via AI bot, publicly accessible.

● Academy Chat: Available on Celonis Academy, accessible behind login, AI-powered learning assistance.

By chatting with us, you consent to the recording and storing of the chat by Celonis and our third-party vendors for training and quality purposes. By clicking "Agree" or similar button, you agree to our Terms and Privacy Notice.

Chats are stored and may not be deleted immediately upon ending the conversation. We may use the recordings for training AI systems (where applicable), quality assurance purposes, customer support analysis, and product improvement.

Chat data retention: Chats may be retained for training and quality purposes. You can request deletion of specific chat conversations by contacting privacy@celonis.com.

12. Updates

We regularly review this Privacy Notice.

This Privacy Notice was last updated in 20 July 2026