A. Who we are and what this Privacy Notice covers

Albatross.AI AG "Albatross" is the data controller responsible for processing your personal data through this website. We are a Swiss company subject to Switzerland's revised Federal Act on Data Protection (revFADP), which came into force on 1 September 2023. This Privacy Notice explains how we collect, use, share, and protect your personal data when you visit our website. Because our website is accessible worldwide, we also align with key principles of the EU General Data Protection Regulation (GDPR) for visitors in the European Economic Area and the United Kingdom.

B. What personal data we collect

We collect only what we need to run the site, respond to you, and improve our services.

"Personal data" means any information that can identify you as an individual. We collect the following categories of personal data:

• Identity and contact information: your name, email address, and phone number (if you provide it to us through contact forms or communications)
• Technical and usage information: IP address, browser type and version, operating system, pages you view on our website, time and date of your visit, time spent on pages, and event logs (records of your interactions with our website)
• Preferences and interaction data: information you provide through forms, surveys, beta program sign-ups, or other interactive features, including your communication preferences and feedback

For detailed information about cookies and similar technologies we use, please see our separate Cookies and Similar Technologies Policy.

C. Why we process your personal data and our legal bases for doing so

• To provide and secure the website and services: This includes operating the website, debugging technical issues, and preventing abuse and security threats.

  Legal basis: Our legitimate interests in operating our business and protecting our systems and users. These interests are not overridden by your interests or fundamental rights (Art. 6(2) revFADP; GDPR Art. 6(1)(f) for EEA/UK visitors).

• To communicate with you: This includes responding to your inquiries, providing customer support, and sending you updates or information you have requested.

  Legal basis: Performance of a contract with you or taking steps at your request before entering into a contract (Art. 6(2) revFADP; GDPR Art. 6(1)(b)); or your consent where you have opted in to receive communications (Art. 6(2) revFADP; GDPR Art. 6(1)(a)).

• To improve and personalise your experience on our website: This includes showing you content relevant to your interests and improving our website based on how visitors use it.

  Legal basis: Our legitimate interests in improving our services and user experience, provided these interests are not overridden by your interests or fundamental rights (Art. 6(2) revFADP; GDPR Art. 6(1)(f)); or your consent where the processing involves high-risk profiling or tracking (Art. 6(2) revFADP; GDPR Art. 6(1)(a)).

• To comply with legal obligations: This includes maintaining security measures, keeping records required by law, and responding to valid legal requests.

  Legal basis: Compliance with legal obligations to which we are subject (Art. 6(2) revFADP; GDPR Art. 6(1)(c)).

Important information about consent: Where we rely on your consent as the legal basis for processing, you have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw consent, contact dpo@albatrossai.org.

Our data protection principles: We follow Swiss data protection principles including proportionality (collecting only necessary data), transparency (being clear about our processing), purpose limitation (using data only for stated purposes), and privacy by design and default (building privacy into our systems from the start). These principles are set out in Art. 6 revFADP.

D. AI, algorithms & recommendations (transparency and your choices)

We use algorithms, including artificial intelligence (AI) systems, to operate and improve our services. For example, we use algorithms to:

• Analyse which content our visitors find most useful
• Detect and prevent abuse or security threats
• Recommend relevant product pages or content based on your browsing behaviour

These algorithms process your usage data and may create profiles about your interests and preferences.

• Right not to be subject to automated decision-making: We do not currently make any solely automated decisions about you that produce legal effects or similarly significantly affect you through this website. If we introduce such automated decision-making in the future, we will:

  • Inform you clearly that this processing is taking place
  • Explain the logic and expected outcomes
  • Give you the right to obtain human intervention, express your point of view, and contest the decision

  These rights are protected under GDPR Article 22 (for EEA/UK visitors) and Swiss revFADP Article 21.

• AI model training: We do not use your personal data to train our artificial intelligence models. If we wish to use your data for this purpose in the future, we will first obtain your explicit, separate consent, as required under Art. 6(7) revFADP for high-risk processing activities.

• Additional notice for EU visitors: The EU Artificial Intelligence Act requires providers of certain AI systems to provide specific transparency information to users. If we deploy AI features that trigger these obligations (such as chatbots, emotion recognition systems, or content that is generated or manipulated by AI), we will provide clear notices explaining:

  • That you are interacting with an AI system
  • The capabilities and limitations of the system
  • How the AI-generated or AI-manipulated content should be interpreted

  These obligations are set out in Article 50 of the EU AI Act (Regulation (EU) 2024/1689).

E. Cookies and similar technologies

We use cookies and similar tech for core functionality, analytics and (where applicable) advertising. We follow the Swiss Telecommunications Act (Art. 45c TCA) information/opt‑out rules; where consent is required (e.g., for high‑risk profiling or certain marketing trackers), we will ask before setting them.

See our separate Cookies & Similar Technologies Policy for details and choices.

F. Sharing and international transfers

We share personal data with service providers who help us run the site (hosting, security, analytics). When data leaves Switzerland/EEA, we use appropriate safeguards (e.g., standard contractual clauses).

G. Security

We apply technical and organisational measures appropriate to risk (confidentiality, integrity, availability, traceability) as required by the Swiss Data Protection Ordinance (DPO).

H. How long we keep data

We keep personal data only as long as necessary for the purposes above, then delete or anonymise it.

I. Your rights

Depending on where you live, you may have rights to:

• Access your data and get key information about processing
• Rectify inaccuracies
• Request erasure of your data (right to be forgotten), subject to legal retention requirements
• Object to processing based on legitimate interests or for direct marketing purposes, and request restriction of processing in certain situations (e.g., while we verify accuracy of data you have contested)
• Data portability: receive your data in a structured, commonly used, and machine-readable format (e.g., CSV, JSON) and have it transmitted to another controller where technically feasible, for data processed based on consent or contract
• Rights regarding automated decision-making and profiling: Where we make decisions solely by automated means that produce legal effects or similarly significantly affect you, you have the right to:
  • Request human intervention in the decision-making process
  • Express your point of view regarding the decision
  • Obtain an explanation of the decision
  • Contest the decision and request reconsideration

This applies to our AI-powered personalization and recommendation systems.

To exercise rights, email dpo@albatrossai.org. We will respond to your request without undue delay and in any event within one month of receipt. This period may be extended by two further months where necessary, considering the complexity and number of requests, in which case we will inform you of the extension and reasons within the initial one-month period.

J. Contact and Complaints

If you have questions or concerns about how we process your personal data or this Privacy Notice:

Contact our Data Protection Officer at: dpo@albatrossai.org

Right to lodge a complaint:

You have the right to lodge a complaint with a supervisory authority, in particular in Switzerland or, if you are in the EU, in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

If you are located in the European Union, you may also contact your local data protection authority. A list is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

K. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes:

• We will post the updated Privacy Notice on this webpage
• We will update the "Last Updated" date at the top of this Privacy Notice
• If we make material changes that significantly affect your rights or how we process your personal data, we will provide prominent notice on our website and, where appropriate, notify you by email (if we have your email address) before the changes take effect

We encourage you to review this Privacy Notice periodically to stay informed about how we protect your personal data.

Your continued use of our website after changes become effective constitutes your acceptance of the updated Privacy Notice. If you do not agree with any changes, please discontinue use of our website.