1. Controller
The controller for data processing within the meaning of the DPA and GDPR is:
- Rudari Labs (Arifi AI Services)
- Sole proprietorship
- Address
- Grienmattweg 4, 4410 Liestal, Switzerland
- team@rudari.ch
2. Principles
We process personal data fairly, proportionately, and for specified purposes. We collect only data we actually need to operate this website and conduct our business.
Wherever possible, we anonymize or pseudonymize data, and we share it with third parties only as required to deliver our services or where legally obliged.
3. Hosting
This website is hosted by Vercel Inc. (650 California St, San Francisco, CA 94108, USA) on servers located in Frankfurt, Germany. When you visit the site, technical data is recorded in server logs:
- IP address (truncated after 30 days)
- Date, time, and time zone of the request
- URL accessed and HTTP status code
- Referrer URL
- User agent (browser, operating system)
This data is processed to ensure operation, defend against attacks, and analyze errors. The legal basis is our legitimate interest in operating the site securely (Art. 31 para. 2 lit. a DPA, Art. 6 para. 1 lit. f GDPR).
4. Contact
When you contact us by email or via the contact form on /contact, we process your details (name, email, company, message) solely to respond to your inquiry and to initiate a possible business relationship.
We retain this data for as long as necessary to respond, but no longer than twelve months if no business relationship is established. The legal basis is the performance of pre-contractual measures and our legitimate interest in the correspondence.
5. Analytics & Cookies
We use a privacy-friendly web analytics tool (e.g. Plausible Analytics, hosted in the EU) without personal tracking cookies. Only aggregated, non-personal usage data is collected:
- Pages viewed
- Referrer domain (where you came from)
- Browser and device class
- Country of origin (based on a hashed IP)
The IP address is hashed immediately and not stored. No cookies are set, no cross-site tracking occurs, and no personal profiles are created.
Should we deploy additional analytics or marketing tools in the future (e.g. Google Analytics), we will obtain your consent in advance via a cookie banner.
7. Processors
We use carefully selected service providers who process personal data on our behalf:
- Vercel Inc. (USA / EU) — website hosting and delivery
- Email provider — sending reply emails and newsletters
- Plausible Analytics (EU) — anonymized audience measurement
These providers are contractually obliged to process data only on our behalf and according to our instructions. For transfers to third countries (e.g. the USA), we ensure an adequate level of protection, e.g. via EU Standard Contractual Clauses.
8. Your rights
You have the right to:
- Access to the data processed about you
- Rectification of inaccurate data
- Erasure or restriction of processing
- Data portability, where applicable
- Withdrawal of consent with effect for the future
- Lodge a complaint with the competent supervisory authority (in Switzerland: FDPIC)
To exercise these rights, an informal message to team@rudari.ch is sufficient. We respond within 30 days.
9. Security
We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, and manipulation — including TLS encryption, access controls, and regular updates.
10. Changes
We may amend this privacy policy at any time. The version published on rudari.ch shall be authoritative. We will actively communicate material changes.