Privacy Policy

Controller

The controller for data processing on this website is: Limbi GmbH, Turnerstrasse 27, 8006 Zurich, Switzerland, email: hello@limbi.net.

For any privacy questions or to exercise your rights, contact us anytime at this email address.

Scope and legal bases

We are a Swiss company. Our data processing is governed by the Swiss Data Protection Act (FADP). Because our services also address visitors in the EU, we additionally apply the EU General Data Protection Regulation (GDPR).

We process personal data only to the extent needed for a working website and our content and services. Depending on the case, the legal basis is your consent (Art. 6(1)(a) GDPR), performance of a contract / pre-contractual steps (b), or our legitimate interest in a secure, functioning service (f). No automated decision-making with legal effect takes place.

Hosting (Vercel)

This website is hosted by Vercel Inc. (USA). When you visit, technically necessary server logs are processed (incl. IP address, timestamp, requested resource) to deliver and secure the site (Art. 6(1)(f) GDPR). For transfers to the USA see "Data transfers to other countries" below.

Cookies and consent

Without consent we set only strictly necessary cookies: your cookie choice (limbi_consent), your language preference (limbi_lang), and the newsletter unlock status for articles (limbi_gate). All non-essential services, currently the Cal.com booking calendar (below), load only after your consent via the cookie banner.

Your consent is stored with the timestamp and your choices. You can change or withdraw it anytime via the "Cookie settings" link in the footer. The legal basis for non-essential cookies is your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG).

Audience measurement (Vercel Web Analytics)

For audience measurement we use Vercel Web Analytics, a cookieless service from Vercel Inc. (USA). It sets no cookies and builds no cross-device profiles. From aggregated request data (incl. page viewed, referrer, approximate region, device type) it derives a daily anonymous hash that does not allow identification of individuals. The legal basis is our legitimate interest in privacy-friendly statistics about which content is used (Art. 6(1)(f) GDPR); no consent is required as no cookies are set and no device information is accessed. You can object to this processing at any time (see "Your rights").

Newsletter and article unlock (Beehiiv)

We use Beehiiv Inc. (USA) as a processor to send our newsletter. On signup we process your email address based on your consent (Art. 6(1)(a) GDPR). You confirm the signup via email (double opt-in); we log the timestamp and confirmation as proof of your consent.

If you enter your email address on an article page to unlock the full text, this also subscribes you to the newsletter. You can unsubscribe anytime via the link in each email.

Booking (Cal.com)

For booking calls we embed the Cal.com, Inc. (USA) calendar on the "/call" page. The calendar loads only after your functional consent and then sets its own cookies. The data you enter (name, email, preferred time) is processed to arrange the call (Art. 6(1)(b) GDPR). Without consent you can open the calendar directly on cal.com instead.

We store your booking-form answers in our internal work environments (incl. GitHub Inc., USA) to prepare the call.

GEO check (AI visibility check)

If you use the GEO check, we process your inputs (brand, website, market, search language, optional competitors) and your email address if you provide it to unlock results. The analysis runs via our own service and the AI answer services of OpenAI, Perplexity, Google and Anthropic (all USA) as processors. Results and inputs are stored with Supabase (EU region). Your IP address is anonymised before storage (the last octet is zeroed). The legal basis is performance of the service you requested (Art. 6(1)(b) GDPR).

Research brief

If you request a research brief via the "/brief" page (when the desk is open), we process your request details (ask, company, targets) and your email address to prepare and deliver the brief. For the research we use the services Exa and OpenAI (both USA). The legal basis is performance of the service you requested (Art. 6(1)(b) GDPR).

Contact and booking forms

When you contact us via a form, we process the data you provide to handle your request. Storage is with Supabase (EU region). Legal basis: Art. 6(1)(b) or (f) GDPR.

Data transfers to other countries

Some of our service providers are based in the USA (Vercel, Beehiiv, Cal.com, GitHub, OpenAI, Perplexity, Google, Anthropic, Exa). Transfers rely on the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework where the provider is certified, and additionally on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) with the Swiss addendum. Other data is processed in the EU (Supabase, EU region).

Retention

We keep personal data only as long as needed for the respective purpose or as required by statutory retention duties. Newsletter data is kept until you unsubscribe; consent records are kept beyond that for as long as they are needed as proof. Form and inquiry data is deleted once handling is complete and no retention duties apply.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. You can withdraw any consent at any time with future effect.

You also have the right to lodge a complaint: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the data protection supervisory authority of your place of residence.

To exercise your rights, contact hello@limbi.net.

Cookie settings