Privacy Policy

Principle

Personal data is processed only where necessary to operate the website, provide the services offered, and initiate or perform an engagement. No personal data is sold. The website is not directed at children under 16.

Where the GDPR applies, processing is based on art. 6(1)(a) GDPR (consent, for example for analytics cookies), (b) (contract and pre-contractual steps, for example a quote request) and (f) (legitimate interest in a secure, functioning service).

Hosting and server logs

The website is hosted by Vercel Inc. and delivered over its global network. Opening a page processes the connection data technically required to serve it: IP address, date and time, the address requested, status code, volume of data transferred, referrer and browser identification. This data is necessary for delivery and for preventing abuse, and is not combined with other sources.

Cookies and consent

On a first visit, a consent banner from Cookiebot (Usercentrics A/S) appears. It sets its own cookie storing the choice made and an anonymised record of consent; that cookie is necessary for the banner to work and is set without consent.

Until consent is given, every Google Consent Mode storage type is set to “denied”. In that state Google Analytics sets no cookies and reads none already set. Analytics is activated only once you accept in the banner.

You can withdraw consent at any time with effect for the future by changing your choice in the banner. This does not affect the lawfulness of processing carried out beforehand.

Google Analytics 4

Once you consent, Google Analytics 4, operated by Google Ireland Ltd., is used to understand how the website is used. It records in particular the pages viewed, time spent, approximate location, device type, browser and the source of the visit.

Google truncates the IP address before storing it, and the provider does not link the data to you personally. Google may process the data in the USA. How long event data is retained follows the setting in the Analytics account.

You can prevent collection by refusing or withdrawing consent, or by installing Google's browser add-on to opt out of Analytics.

Contact, bookings and quote requests

This website has no contact form of its own. It offers an email link, a telephone link and two external services:

• If you write or call directly, your details are processed to answer the enquiry and to perform any resulting engagement.
• “Book a call” leads to Calendly. Your name, email address, chosen slot and answers in the booking form are collected there; Calendly's privacy policy applies in addition.
• “Get your fixed-price offer” leads to Typeform. The answers entered there are used to prepare a quote; Typeform's privacy policy applies in addition.

Enquiries and the related correspondence are kept for as long as needed to deal with them; where an engagement comes about, the ten-year retention period under art. 958f of the Swiss Code of Obligations applies.

AI visibility check

The free check at /en/aeo-score retrieves the address you enter and assesses the publicly available page. The address is used to run the check; your IP address is held briefly in the server's memory to limit how many requests can be made (ten checks per ten minutes). That count is not stored durably and is lost on every restart.

For the full report you provide an email address and, optionally, a name. That does the following:

• The report is sent to your address through Resend Inc.
• An internal notification containing your address, the domain checked and the result is sent to the provider so the enquiry can be followed up.
• If you tick the box for further information, this is recorded with the enquiry. Without that tick you receive no marketing.

The email address is not stored in any database belonging to this website. It exists in the message sent and in the provider's mailbox.

If you share a result using the certificate link, only the domain name, the score, the five category values, the date and the language are stored at Upstash Inc., with no email address and no individual findings. Those entries are deleted automatically after two years. Anyone with the link can open the certificate; it is excluded from search engine indexing.

Newsletter field in the footer

The input field in the footer is not currently connected: the address you type does not leave your browser, is not transmitted anywhere and is not stored. This section will be expanded once a mailing service is connected.

Fonts

Manrope, the typeface used here, is downloaded when the site is built and served from this server. Visiting a page therefore opens no connection to Google Fonts and sends no IP address to Google.

Recipients of personal data

Personal data is passed to the following processors and service providers, in each case only as far as necessary for the stated purpose:

Disclosure abroad

Some of these services process data outside Switzerland, in particular in the USA. Disclosure takes place on the basis of art. 16 f. FADP. For the USA, the Swiss Federal Council has recognised adequate protection for certified companies under the Swiss-U.S. Data Privacy Framework; otherwise the European Commission's standard contractual clauses, as recognised by the Swiss Federal Data Protection and Information Commissioner, are used. Despite these measures, access by US authorities cannot be entirely ruled out.

Retention

Personal data is deleted or anonymised as soon as the purpose of processing ceases and no statutory retention duty stands in the way. Specifically: server logs after the period configured at the host, certificate entries after two years, business correspondence on completed engagements after ten years.

Data security

The website is served over TLS throughout, shown by the “https” in the address bar. The check also verifies before every outbound request that the address given does not point at an internal network. Absolute security of data transmission over the internet cannot, however, be guaranteed.

Your rights

Under the applicable data protection law you have the following rights against the controller:

• Access to whether, and which, personal data concerning you is processed (art. 25 FADP).
• Correction of inaccurate data (art. 32 para. 1 FADP).
• Deletion or destruction of data, and objection to processing (art. 32 para. 2 FADP).
• Release or transfer of your data in a common electronic format (art. 28 FADP).
• Withdrawal of consent at any time, with effect for the future.
• Where the GDPR applies, additionally restriction of processing and the right to lodge a complaint with a supervisory authority.

An email to the address given at the end of this page is enough to exercise them. Proof of identity may be requested to protect your data. You also have the right to contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) in Bern.

Changes

This privacy policy is updated whenever the processing of personal data changes, for instance when a further service is integrated. The version published on this page at the time applies.

Controller

The controller for the processing of personal data on this website within the meaning of art. 5 lit. j FADP is:

Angelin Schobinger, Grows, Breisacherstrasse 1, 4057 Basel, Switzerland. A sole proprietorship under Swiss law, UID CHE-491.694.993. Contact: [email protected], +41 44 688 02 24.

There is no obligation to appoint a data protection adviser. An email to the address given is enough for any data protection matter and to exercise your rights.