Privacy Policy

The controller for data processing within the meaning of the DPA and GDPR is:

Rudari Labs (Arifi AI Services)

Sole proprietorship

Address

Grüssenweg 4, 4133 Pratteln, Switzerland

Email

team@rudari.ch

We process personal data fairly, proportionately, and for specified purposes. We collect only data we actually need to operate this website and conduct our business.

Wherever possible, we anonymize or pseudonymize data, and we share it with third parties only as required to deliver our services or where legally obliged.

This website is hosted by Vercel Inc. (650 California St, San Francisco, CA 94108, USA) on servers located in Frankfurt, Germany. When you visit the site, technical data is recorded in server logs:

• IP address (truncated after 30 days)
• Date, time, and time zone of the request
• URL accessed and HTTP status code
• Referrer URL
• User agent (browser, operating system)

This data is processed to ensure operation, defend against attacks, and analyze errors. The legal basis is our legitimate interest in operating the site securely (Art. 31 para. 2 lit. a DPA, Art. 6 para. 1 lit. f GDPR).

When you contact us by email or via the contact form on /contact, we process your details (name, email, company, message) solely to respond to your inquiry and to initiate a possible business relationship.

We retain this data for as long as necessary to respond, but no longer than twelve months if no business relationship is established. The legal basis is the performance of pre-contractual measures and our legitimate interest in the correspondence.

Plausible Analytics (no cookies). To measure our audience we use Plausible Analytics (hosted in the EU), a privacy-friendly tool without tracking cookies. Only aggregated, non-personal usage data is collected:

• Pages viewed
• Referrer domain (where you came from)
• Browser and device class
• Country of origin (based on a hashed IP)

The IP address is hashed immediately and not stored. Plausible sets no cookies, does no cross-site tracking and creates no personal profiles.

Google Analytics 4 (only with your consent). If you agree to the "Analytics" category in the cookie banner, we additionally use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). Google Analytics records, among other things, the pages viewed, time spent, where the visit came from, device, browser and approximate location (derived from the IP address, which Google Analytics 4 does not store). Data may be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. Advertising features and Google Signals are switched off; the data is deleted after 14 months.

The legal basis is your consent (Art. 6(1)(a) GDPR, Art. 31(1) Swiss FADP). You can withdraw it at any time via "Cookie settings" in the menu; the Google Analytics cookies are then deleted. Without your consent Google Analytics is not loaded.

Cookies and stored entries:

• rudari-consent-v1 (local storage, necessary): stores your cookie choice until you change it
• _ga (Google Analytics, only with consent): distinguishes visitors, expires after 2 years
• _ga_<ID> (Google Analytics, only with consent): keeps the session state, expires after 2 years

When you subscribe to our newsletter, we process your email address and, if provided, your name to send you content on AI, agents, and our work.

We use a double opt-in procedure: after signing up, you receive a confirmation email. You are added to the list only after clicking the confirmation link.

You can unsubscribe at any time via the unsubscribe link in every email or by writing to team@rudari.ch.

The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, Art. 31 para. 1 DPA).

We use carefully selected service providers who process personal data on our behalf:

• Vercel Inc. (USA / EU): website hosting and delivery
• Email provider: sending reply emails and newsletters
• Plausible Analytics (EU): anonymized audience measurement without cookies
• Google Ireland Limited / Google LLC (EU / USA): Google Analytics 4, only with your consent

These providers are contractually obliged to process data only on our behalf and according to our instructions. For transfers to third countries (e.g. the USA), we ensure an adequate level of protection, e.g. via EU Standard Contractual Clauses.

You have the right to:

• Access to the data processed about you
• Rectification of inaccurate data
• Erasure or restriction of processing
• Data portability, where applicable
• Withdrawal of consent with effect for the future
• Lodge a complaint with the competent supervisory authority (in Switzerland: FDPIC)

To exercise these rights, an informal message to team@rudari.ch is sufficient. We respond within 30 days.

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, and manipulation, including TLS encryption, access controls, and regular updates.

We may amend this privacy policy at any time. The version published on rudari.ch shall be authoritative. We will actively communicate material changes.