Data Protection

1. Data Controller

The entity responsible for the processing of personal data in connection with this website and the Carigiet GEO service is:

Carigiet GEO · sole proprietorship, proprietor: Matthias Carigiet
Alte Landstrasse 237
8708 Maennedorf, Switzerland

Email: info@carigiet.com
Phone: +41 44 798 18 54

The data controller within the meaning of the Swiss Federal Act on Data Protection is Carigiet GEO.

2. Scope and Principles

This privacy policy applies to the website carigiet.com as well as to the AI visibility analysis tool operated by Carigiet GEO (hereinafter referred to as the “Analysis Tool”, accessible at audit.carigiet.com).

We process personal data in compliance with the revised Swiss Federal Act on Data Protection (FADP, in force since September 1, 2023) and the corresponding ordinance. To the extent that we process data of individuals in the EU or the EEA or provide services with an EU connection, we additionally comply with the EU General Data Protection Regulation (GDPR).

We process personal data in accordance with the principles of lawfulness, good faith, and proportionality. Processing is carried out solely for the purposes stated in this policy or for purposes compatible therewith. We process as little data as possible and retain it only for as long as required by the purpose or by law.

3. Data We Process

3.1 Website Visit

For technical reasons, when you access the website, data transmitted by your device is processed: IP address, date and time of access, pages accessed, amount of data transferred, browser and operating system used, as well as the previously visited page (referrer). This data serves the secure and stable operation of the website. The website is hosted by the provider Framer (see Section 5).

3.2 Cookies and Traffic Measurement

The website uses cookies and similar technologies. Technically necessary cookies are required for the operation of the website and are set without consent.

We use Google Analytics for traffic and access measurement. The cookies used for this are set as soon as the website loads; a short notice informs you of this on your first visit. You can prevent traffic measurement at any time: by blocking or deleting cookies in your browser settings or with the browser add-on for deactivating Google Analytics.

In the Analysis Tool, we also use Google Ads conversion tracking to measure the effectiveness of our advertising. In this context, hashed email addresses may be transmitted to Google when a request is submitted via the Analysis Tool (Enhanced Conversions). These services are only activated after you have given your consent in the Analysis Tool.

3.3 Contact and Appointment Booking

When you contact us or book a meeting, we process the data provided, specifically your name, company, email address, phone number if applicable, as well as the content of your inquiry and the appointment details. The purpose is to answer the inquiry and conduct the meeting. A third-party provider may be used for booking appointments (see Section 5).

3.4 AI Visibility Analysis (Analysis Tool)

When you use the Analysis Tool, we process the data you provide (such as company or domain) as well as your name, corporate email address, optional phone number, and your specific request in order to deliver the results and for further contact. To generate the analysis, we evaluate publicly available information about the queried company, namely its website and responses from AI systems. The free Analysis Tool evaluates responses from ChatGPT for this purpose. Within the scope of a mandate, we additionally evaluate responses from further AI systems, namely Perplexity, Google AI Overviews, Copilot, and Claude. We do not transmit any personal data of the requesting person to the AI providers; the subject of the queries is the queried company and publicly available information. The generated report is stored and made accessible via a personal link.

3.5 Acquisition of Data from Third-Party Sources (Data Enrichment)

In B2B customer contact, business contact details may be supplemented. In this context, data may (a) be derived from name and company details according to common formats (e.g., corporate email addresses) or (b) be obtained from business contact database providers and publicly available sources (including corporate websites, public registers, industry and membership directories, and professional networks).

The purpose is to establish contact with business decision-makers regarding services relevant to their company. We process only business-related data and no sensitive personal data.

You may object to the processing of your data for this purpose at any time and without giving reasons. A message to info@carigiet.com is sufficient; we will then cease processing and delete the respective data, provided that there are no statutory retention obligations to the contrary.

3.6 Mandate-Related Data

If a company commissions us with a mandate, we process the data provided in the course of the collaboration in order to render the service. To the extent that we process personal data on behalf of the customer, we act as a processor; in this case, we enter into a separate data processing agreement pursuant to Art. 9 FADP.

4. Purposes of Processing

We process personal data for the following purposes: operation, security, and improvement of the website and the Analysis Tool; answering inquiries and managing appointments; generation and delivery of the AI visibility analysis; initiation, conclusion, and execution of mandates; billing and accounting; B2B business development; compliance with legal obligations.

To the extent that the GDPR is applicable, we base the processing on the performance of a contract or pre-contractual measures, on our legitimate interests in business communication, traffic measurement, and the improvement of our services, on your consent (in particular for conversion tracking in the Analysis Tool), and on legal obligations.

5. Disclosure to Third Parties and Processors

We disclose personal data to carefully selected service providers who assist us in rendering our services. These providers are contractually obligated to process personal data solely in accordance with our instructions and in compliance with data protection laws.

Recipient / Category	Purpose	Registered Office
Framer (Website hosting and delivery)	Operation and delivery of the website	Netherlands (EU)
Google (Google Analytics)	Website traffic and access measurement as well as conversion tracking for Google Ads	USA
SavvyCal (Appointment booking)	Scheduling and management of appointments	USA
Attio (CRM)	Management of contact and customer data, enrichment of business contact details	United Kingdom
Microsoft Teams, Google Meet, Zoom (Video conferencing)	Conducting online meetings	USA
Peec AI (AI visibility monitoring)	Dashboard and ongoing visibility monitoring in AI systems	Germany (EU)
OpenAI (ChatGPT, Analysis Tool)	Queries to generate the free analysis	USA
Sidemail (email delivery)	Delivery of the analysis report by email	USA
Authorities, tax advisors, and legal counsel (as required)	Legal obligations, accounting, legal enforcement	Switzerland

For US services, disclosure is based on the Swiss-U.S. Data Privacy Framework or standard contractual clauses, depending on the provider (see Section 6).

Disclosure to other third parties only occurs if you have consented, if required by law, or if necessary to enforce our legal claims.

6. Transfer of Data Abroad

Some of the service providers mentioned are located abroad. Data is only transferred to countries with an adequate level of data protection or under appropriate safeguards.

EU and EEA member states as well as the United Kingdom are considered countries with adequate data protection. As of September 15, 2024, adequacy exists for US companies certified under the Swiss-U.S. Data Privacy Framework. For transfers to non-certified recipients in the USA or to other countries without adequate data protection, we rely on appropriate safeguards, namely standard contractual clauses approved by the EU with the adjustments required for Switzerland, or on a statutory exception pursuant to Art. 17 FADP.

7. Retention and Deletion

We retain personal data for as long as necessary to fulfill the stated purposes. Business and accounting records are retained for the statutory period (typically ten years pursuant to Art. 958f of the Swiss Code of Obligations). Thereafter, the data is deleted or anonymized.

8. Data Security

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, and misuse. Transmission on the website is encrypted (TLS). Complete protection during transmission over the internet cannot be guaranteed.

9. Your Rights

Under applicable law, you have the right to information regarding your processed personal data (Art. 25 FADP), correction of incorrect data, deletion or destruction, restriction of processing, as well as the right to have your data handed over or transferred (Art. 28 FADP). You may object to processing and withdraw any consent granted at any time with future effect.

To exercise your rights, a message to info@carigiet.com is sufficient. We may request proof of your identity in order to verify your request.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. To the extent that the GDPR is applicable, you are entitled to the rights under the GDPR and may lodge a complaint with a supervisory authority in the EU.

10. Automated Individual Decisions and Profiling

The AI visibility analysis evaluates publicly available data and uses it to generate an assessment of a company’s visibility in AI systems. No automated individual decision-making with legal effects or equivalent significant impacts on an affected individual within the meaning of Art. 21 FADP takes place.

11. Changes to this Privacy Policy

We may amend this privacy policy at any time. The version published on carigiet.com at the time of access shall apply.