As of: 25.05.2026

1. Controller

The controller for processing personal data in connection with this website and the Carigiet GEO service is:

Carigiet Solutions
Alte Landstrasse 237
8708 Männedorf, Switzerland

Email: info@carigiet.com
Phone: +41 44 798 18 54

"Carigiet GEO" is the designation of the service provided by Carigiet Solutions. The controller within the meaning of the Swiss Federal Act on Data Protection is Carigiet Solutions.

2. Scope and Principles

This Privacy Policy applies to the website [DOMAIN] as well as to the AI visibility analysis tool operated by Carigiet GEO (hereinafter referred to as "Analysis Tool", accessible at audit.carigiet.com [to be confirmed]).

We process personal data in accordance with the revised Swiss Federal Act on Data Protection (FADP, in force since September 1, 2023) and the corresponding ordinance. Insofar as we process data of individuals in the EU or EEA or provide services with an EU connection, we additionally comply with the EU General Data Protection Regulation (GDPR).

We process personal data in accordance with the principles of lawfulness, good faith, and proportionality. Processing is carried out solely for the purposes specified in this policy or purposes compatible therewith. We process as little data as possible and retain it only for as long as required by the purpose or applicable law.

3. What Data We Process

3.1 Website Visits

When you visit our website, technical data transmitted by your device is processed: IP address, date and time of access, pages accessed, volume of data transferred, browser and operating system used, and the previously visited page (referrer). This data serves the secure and stable operation of the website. The website is hosted via the provider Framer (see Section 5).

3.2 Cookies and Reach Measurement

The website may use cookies and similar technologies. Technically necessary cookies are required for operation. For cookies and services used for reach measurement or analysis, we obtain your consent where required; you can withdraw this consent at any time with future effect. [To be confirmed: analytical tool used, e.g., Google Analytics or Framer Analytics, and whether a cookie banner is active.]

3.3 Contact Inquiries and Appointment Bookings

When you contact us or book a consultation, we process the data provided, in particular your name, company, email address, phone number (if applicable), as well as the content of your inquiry and the appointment details. The purpose is to respond to the inquiry and conduct the meeting. A third-party provider may be used for appointment booking (see Section 5).

3.4 Newsletter

If you subscribe to our newsletter, we process your email address to send information about Carigiet GEO and related topics. Subscription is subject to a confirmation process (double opt-in) [to be confirmed]. You can unsubscribe at any time via the opt-out link or by sending a message to [EMAIL].

3.5 AI Visibility Analysis (Analysis Tool)

If you use the Analysis Tool, we process the data you provide (such as company or domain) as well as your name, business email address, optionally your phone number, and details of your request to deliver the results and for further contact. To generate the analysis, we evaluate publicly available information about the requested company, specifically its website as well as responses from AI systems such as ChatGPT, Perplexity, Gemini, and Copilot.

3.6 Acquisition of Data from Third-Party Sources (Data Enrichment)

In business-to-business (B2B) contacts, corporate contact details may be supplemented. In this context, data (a) can be derived from the name and company using standard patterns (e.g., the business email address) or (b) can be obtained from providers of business contact data and publicly accessible sources (including company websites, public registers, industry and membership directories, professional networks).

The purpose is to contact business decision-makers regarding services relevant to their company. We process exclusively business-related data and no sensitive personal data.

You may object to the processing of your data for this purpose at any time and without giving reasons. A message to [EMAIL] is sufficient; we will then cease processing and delete the respective data, provided that no statutory retention obligation prevents this. [To be reviewed by legal counsel: structure of this section as well as fulfilling the information obligation pursuant to Art. 19 FADP if the first contact is made by phone.]

3.7 Data within the Scope of a Mandate

If a company commissions us, we process the data provided within the scope of our cooperation to perform our services. Insofar as we process personal data on behalf of our client, we act as a processor; in this case, we conclude a separate data processing agreement pursuant to Art. 9 FADP.

4. Purposes of Processing

We process personal data for the following purposes: operation, security, and improvement of the website and the Analysis Tool; responding to inquiries and conducting appointments; creating and delivering the AI visibility analysis; initiating, concluding, and executing mandates; invoicing and accounting; sending the newsletter; business contact in the B2B sector; and fulfilling statutory obligations.

Insofar as the GDPR is applicable, we base the processing on the performance of a contract or pre-contractual measures, our legitimate interests in business communication and the improvement of our services, your consent (in particular regarding the newsletter and analytical cookies), and compliance with legal obligations.

5. Disclosure to Third Parties and Processors

We share personal data with carefully selected service providers who assist us in providing our services. These partners are contractually obligated to process personal data solely in accordance with our instructions and in compliance with data protection laws.

Disclosure to other third parties is only made if you have consented, if it is legally required, or if it is necessary to enforce our rights.

6. International Transfers

Some of the standard service providers mentioned are established abroad. Disclosure only takes place to countries with an adequate level of data protection or under appropriate safeguards.

The EU and EEA member states as well as the United Kingdom are deemed to have an adequate level of data protection. For the USA, adequacy has been established since September 15, 2024, for companies certified under the Swiss-U.S. Data Privacy Framework. For disclosures to non-certified recipients in the USA or in other countries without an adequate level of data protection, we base the transfer on appropriate safeguards, namely the Standard Contractual Clauses approved by the EU with the adjustments required for Switzerland, or on a statutory exception pursuant to Art. 17 FADP. [To be confirmed: certification status of individual providers.]

7. Retention and Deletion

We retain personal data for as long as necessary to fulfill the stated purposes. Business and accounting records are retained for the statutory period (generally ten years in accordance with Art. 958f of the Swiss Code of Obligations). Thereafter, the data is deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, and misuse. Data transmission on our website is encrypted (TLS). Absolute protection during transmission over the Internet cannot be guaranteed.

9. Your Rights

Under applicable law, you have the right to access personal data processed about you (Art. 25 FADP), the right to rectify incorrect data, the right to deletion or destruction, the right to restrict processing, and the right to receive or transfer your data (Art. 28 FADP). You may object to processing and withdraw any consent granted at any time with future effect.

To exercise your rights, please send an inquiry to [EMAIL]. We may request proof of identity to verify your request.

You also have the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland. Insofar as the GDPR is applicable, the rights under the GDPR apply to you, and you may lodge a complaint with a supervisory authority in the EU.

10. Automated Individual Decisions and Profiling

The AI visibility analysis evaluates publicly available data and generates an assessment of a company's visibility in AI systems. No automated individual decision with legal effects or similarly significant adverse effects on a data subject within the meaning of Art. 21 FADP occurs. [To be reviewed by legal counsel: classification as profiling as well as any notification obligations.]

11. Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time. The version currently published on [DOMAIN] shall apply.