As of: May 31, 2026

1. Controller

The entity responsible for processing personal data in connection with this website and the Carigiet GEO service is:

Carigiet Solutions

Alte Landstrasse 237

8708 Männedorf, Switzerland

Email: info@carigiet.com

Phone: +41 44 798 18 54

"Carigiet GEO" is the designation of the service provided by Carigiet Solutions. The controller within the meaning of the Swiss Federal Act on Data Protection is Carigiet Solutions.

2. Scope and Principles

This privacy policy applies to the website carigiet.com and the AI visibility analysis tool operated by Carigiet GEO (hereinafter "Analysis Tool", accessible at audit.carigiet.com).

We process personal data in accordance with the revised Swiss Federal Act on Data Protection (FADP, in force since September 1, 2023) and the corresponding ordinance. Insofar as we process data of individuals in the EU or the EEA or provide services with a connection to the EU, we additionally comply with the EU General Data Protection Regulation (GDPR).

We process personal data in accordance with the principles of lawfulness, good faith, and proportionality. Processing is carried out only for the purposes specified in this policy or for purposes compatible therewith. We process as little data as possible and retain it only as long as required by the purpose or law.

3. Data We Process

3.1 Website Visits

When the website is accessed, data transmitted by your device is processed for technical reasons: IP address, date and time of access, pages accessed, volume of data transmitted, browser and operating system used, and the previously visited page (referrer). This data serves the secure and stable operation of the website. The website is hosted via the provider Framer (see Section 5).

3.2 Cookies and Audience Measurement

The website may use cookies and similar technologies. Technically necessary cookies are required for the operation of the website and are set without consent. For audience and traffic measurement, we use Google Analytics. Cookies and services used for analysis or audience measurement are only activated after you have given consent via our cookie notice. You can withdraw your consent at any time through the cookie settings with effect for the future.

3.3 Contacting Us and Booking Consultations

If you contact us or book a consultation, we process the data provided, namely name, company, email address, phone number if applicable, as well as the content of your inquiry and the scheduling details. The purpose is responding to the inquiry and conducting the consultation. A third-party provider may be used for scheduling (see Section 5).

3.4 AI Visibility Analysis (Analysis Tool)

If you use the Analysis Tool, we process the data you provide (such as company and domain) as well as your name, business email address, optional phone number, and your request details to deliver the results and for further contact. To generate the analysis, we evaluate publicly available information about the requested company, specifically its website and answers from AI systems such as ChatGPT, Perplexity, Gemini, and Copilot.

3.5 Data Acquisition from Third-Party Sources (Data Enrichment)

In B2B business activities, professional contact details may be supplemented. In this context, data may (a) be derived from the name and company based on common patterns (such as business email addresses) or (b) be obtained from providers of professional business contact data and publicly available sources (including company websites, public registers, industry and membership directories, professional networks).

The purpose is initiating contact with business professionals regarding services relevant to their company. We only process business-related data and no sensitive personal data.

You can object to the processing of your data for this purpose at any time without giving reasons. A message to [INSERT EMAIL ADDRESS] is sufficient; we will then cease processing and delete the relevant data, provided that no statutory retention obligation prevents this.

3.6 Data within the Scope of a Mandate

If a company mandates us, we process the data provided during the collaboration to perform the service. Insofar as we process personal data on behalf of the customer, we act as a processor; in this case, we conclude a separate data processing agreement pursuant to Art. 9 FADP.

4. Purposes of Processing

We process personal data for the following purposes: operation, security, and improvement of the website and the Analysis Tool; responding to inquiries and conducting consultations; generating and delivering the AI visibility analysis; initiation, conclusion, and execution of mandates; invoicing and accounting; B2B business contact; compliance with legal obligations.

Where the GDPR is applicable, we base the processing on the performance of a contract or pre-contractual measures, on our legitimate interests in business communication and the improvement of our services, on your consent (especially regarding analytical cookies), and on legal obligations.

5. Disclosure to Third Parties and Processors

We disclose personal data to carefully selected service providers who assist us in providing our services. These providers are contractually obliged to process personal data only in accordance with our instructions and in compliance with data protection laws.

For US services, depending on the provider, disclosure is based on the Swiss-U.S. Data Privacy Framework or standard contractual clauses (see Section 6).

Disclosure to other third parties only occurs if you have consented, if it is legally required, or if it is necessary to enforce our rights.

6. Disclosure Abroad

Some of the specified service providers have their registered offices abroad. Disclosure only takes place to countries with adequate data protection or under suitable safeguards.

The EU and EEA member states as well as the United Kingdom are deemed to have adequate data protection. For the USA, adequacy has been established since September 15, 2024, for companies certified under the Swiss-U.S. Data Privacy Framework. For disclosures to non-certified recipients in the USA or to other countries without adequate data protection, we rely on appropriate safeguards, in particular standard contractual clauses approved by the EU with the necessary adjustments for Switzerland, or on a legal exception under Art. 17 FADP.

7. Retention and Deletion

We retain personal data as long as necessary to fulfill the specified purposes. Business and booking records are retained for the statutory period (generally ten years under Art. 958f CO). Thereafter, the data is deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, and misuse. Data transmission on the website is encrypted (TLS). Absolute protection during transmission over the internet cannot be guaranteed.

9. Your Rights

Under applicable law, you have the right to access data processed about you (Art. 25 FADP), correction of incorrect data, deletion or destruction, restriction of processing, and handover or transfer of your data (Art. 28 FADP). You can object to processing and withdraw any consent given at any time with effect for the future.

To exercise your rights, a message to [INSERT EMAIL ADDRESS] is sufficient. We may request proof to verify your identity.

You also have the right to contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. Where the GDPR is applicable, you are entitled to the rights under the GDPR and can lodge a complaint with a supervisory authority in the EU.

10. Automated Decisions and Profiling

The AI visibility analysis evaluates publicly available data to generate an assessment of a company's visibility in AI systems. No automated individual decision with legal effect or comparably significant impact on a data subject within the meaning of Art. 21 FADP takes place.

11. Amendments to this Privacy Policy

We may amend this privacy policy at any time. The version currently published on carigiet.com is applicable.