Privacy policy

1. Controller

Smart Swiss Brands GmbH
Eggmattweg 12, 4312 Magden, Switzerland
Represented by Susanne Albiez
Email: susanne.albiez@proton.me
Telephone: +41 77 484 68 42

2. Scope and legal basis

This privacy policy applies to the website and the contact and self-check functions offered by KLARO. Processing takes place under the Swiss Federal Act on Data Protection and, where applicable, the EU General Data Protection Regulation. We process only data needed for operation, security, communication and the service you request.

3. Visiting the website

Technically necessary connection data is processed when a website is accessed. This may include IP address, date and time, requested address, amount of data transferred, browser information and referrer. This data is used to deliver the website securely and reliably and to prevent misuse. The website is operated via Cloudflare.

4. Plan B Check

The seven answers and the resulting profile are processed exclusively in your browser using predefined rules. The KLARO website does not transmit them to an AI model or to its server. If you use the print function, your device processes the print or PDF output locally.

Before the profile is displayed, your first name and email address are requested. These two contact details are stored separately from your answers in the Cloudflare D1 database, together with the language, source and time of consent. They are used to associate use of the tool and for possible contact relating to the Plan B Check. Technical storage is cleared after no more than 365 days; you may request earlier deletion at any time.

5. Personal fit request

When you submit the form, we process the information you provide: decision situation, time frame, current blocker, most important desired outcome, possible engagement route, optional context, optional role or company information, name, email address and time of consent. This information is used solely to assess and process your request and to contact you.

An unsubmitted draft is stored only in your browser's session storage and is removed when the session closes or after successful submission. Please do not provide health data or unnecessary information about third parties.

6. Storage, notification and protection against misuse

Valid fit requests are stored in a Cloudflare D1 database for no more than 90 days and removed during the next cleanup routine. Resend is used to notify Su Albiez by email about a new fit request. The content of the request is transmitted by email for this purpose.

To protect the forms against automated bulk requests, a SHA-256 check value is created from the technical IP address for a time-limited rate limit. The IP address itself is not stored in the KLARO database for this purpose; the check value is removed after the protection window expires.

7. External services and links

• Cloudflare: hosting, delivery, technical security and database operation. Provider: Cloudflare, Inc.
• Resend: notification about a new fit request. Provider: Resend, Inc.
• Calendly: after a successful request, you may choose to load the scheduler. Calendly is activated only when you click; your name and email address are transferred to prefill the booking. Alternatively, you can open the calendar in a new window. Provider: Calendly, LLC.
• LinkedIn and YouTube: the website does not embed social plugins or videos. You leave KLARO only when you select a link, after which the respective provider's privacy terms apply.

International service providers may process data outside Switzerland. We select providers carefully and base transfers on the safeguards required by applicable law.

8. Cookies and audience measurement

KLARO uses no external marketing trackers and performs no personal audience measurement. To improve the fit form, only daily totals are stored for page view, start, completed step, successful submission, calendar view and completed booking. These totals contain no form answers, free text, names, contact details, IP addresses, browser identifiers, referrers or session IDs and are removed after no more than 180 days.

Your browser's session storage only records which of these events have already been counted during the current session, reducing duplicate counts. The entry is removed at the end of the browser session. Technically necessary hosting or browser mechanisms are unaffected.

9. Retention

Personal data is retained only for as long as needed for its purpose or required by law. Fit requests are technically stored for no more than 90 days; the separate Plan B contact details for no more than 365 days. If an engagement is formed, separate statutory retention duties may apply.

10. Your rights

Within the scope of applicable law, you may request access to, correction, deletion, restriction or disclosure of your personal data and withdraw consent for the future. Contact the address above. You may also contact the competent data protection supervisory authority.

11. Data security and changes

KLARO uses appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse. This policy is updated when processing, services or legal requirements change. The version published on this page applies.