Legal

Privacy Policy

99rabbits GmbH — as of September 2026

1. Data Controller

99rabbits GmbH
Maik Puk
Sillerstrasse 7
8700 Küsnacht, Switzerland

Phone: +41 76 56 31 447
Email: info@99rabbits.org
Website: https://www.99rabbits.org

2. General Information

This privacy policy informs you about the collection, processing, and use of personal data by 99rabbits GmbH in accordance with the General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (nFADP), and voluntary transparency provisions under the EU AI Act.

We treat personal data confidentially. Processing only takes place on the basis of a valid legal ground (e.g. consent, contract, legal obligation, or legitimate interest) and exclusively for legitimate purposes.

3. Legal Grounds

  • Consent — Art. 6(1)(a) GDPR / Art. 31 nFADP
  • Contract performance / pre-contractual measures — Art. 6(1)(b) GDPR
  • Legal obligation — Art. 6(1)(c) GDPR
  • Legitimate interest — Art. 6(1)(f) GDPR
  • Transparency on AI use (voluntary) — Art. 50 EU AI Act

4. Contact Form and Getting in Touch

Through the contact form on this page we collect:

  • Name
  • Company
  • Email address
  • optional: approximate number of employees

The purpose of processing is to handle your inquiry about the Launch Partner Program and to contact you to arrange a call. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR); where your inquiry is not aimed at a contract, our legitimate interest in responding to contact requests (Art. 6(1)(f) GDPR).

For the technical delivery of the form we use Formspree (Formspree, Inc., USA). The form contents are processed there briefly and forwarded to us by email. The transfer to the USA is safeguarded by Standard Contractual Clauses (SCCs).

We store your inquiry for as long as necessary to process it and delete it at the latest twelve months after the last contact, unless statutory retention obligations require otherwise.

5. Use of Tools, AI, and Automation

5.1 Generative AI (OpenAI / ChatGPT)

For internal support and efficiency, we use ChatGPT by OpenAI. It is used via secure web interfaces or integrated into automated processes (e.g. Make.com).

  • Purpose: Content support, text generation, research, operational assistance
  • Data types: Inputs (prompts), context data, metadata
  • Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
  • Data transfer: USA — safeguarded by Standard Contractual Clauses (SCCs)

5.2 Notion (CRM and Project Management)

We use Notion to manage client and project information.

  • Data types: Master data, contact details, communication content
  • Legal basis: Contract (Art. 6(1)(b) GDPR)
  • Data transfer: USA — based on SCCs

5.3 Make.com and n8n (Automation Platforms)

We use Make.com and n8n to automate workflows. This may involve automated processing of personal data (e.g. from emails, forms, or CRM systems).

  • Purpose: Efficiency, error prevention, operational automation
  • Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

5.4 Fireflies.ai (Meeting Recording and Transcription)

To log and transcribe online meetings, we use Fireflies.ai. Processing only takes place with consent (e.g. actively agreeing in Zoom or Google Meet).

  • Data types: Audio, video, transcripts, metadata
  • Legal basis: Consent (Art. 6(1)(a) GDPR)
  • Data transfer: USA — based on SCCs

5.5 WhatsApp Business

We use WhatsApp Business for customer communication. Use is voluntary on the part of the data subject. It cannot be ruled out that metadata is processed on servers of Meta Platforms, Inc.

  • Legal basis: Consent or legitimate interest, depending on context
  • Data transfer: USA — safeguarded via SCCs

5.6 LinkedIn / LinkedIn Sales Navigator

For B2B outreach, we use publicly available profile data on LinkedIn via Sales Navigator.

  • Purpose: Business development, contact acquisition
  • Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
  • Note: Data subjects may object to being contacted at any time.

5.7 Google Fonts

This website loads fonts from Google Fonts directly from Google's servers. In doing so, your device's IP address is transmitted to Google.

  • Purpose: Consistent, technically reliable display of the website
  • Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
  • Data transfer: USA — safeguarded by Standard Contractual Clauses (SCCs)

6. Audio and Video Conferencing (Zoom, Google Meet)

For virtual meetings, we use Zoom and Google Meet. This involves processing audio and video data. Fireflies.ai may record sessions where consent has been given.

  • Legal basis: Consent or contract performance

7. Web Analytics and Marketing

7.1 Google Analytics

This website uses Google Analytics to analyze user behavior and optimize the website. The IP address is processed in truncated (anonymized) form. Google Analytics only becomes active once you consent to the "Analytics" category in the cookie banner.

  • Legal basis: Consent (Art. 6(1)(a) GDPR)
  • Data transfer: USA — safeguarded by Standard Contractual Clauses (SCCs)

7.2 Google Ads

We use Google Ads to promote our services and measure the effectiveness of our advertising. Cookies may be used for conversion tracking. Google Ads only becomes active once you consent to the "Marketing" category in the cookie banner.

  • Legal basis: Consent (Art. 6(1)(a) GDPR)
  • Data transfer: USA — safeguarded by Standard Contractual Clauses (SCCs)

8. Cookies and Consent Management

On your first visit to this website, you'll see a cookie banner. Necessary cookies (e.g. for the contact form) always run and require no consent. Analytics and marketing cookies are only set once you actively consent — you can decide individually which categories to allow.

We use Google's Consent Mode technology for this: until you decide, all analytics and marketing services run in a "denied" state and collect no personal data. You can change or withdraw your choice at any time via the "Cookie Settings" link in the footer.

9. Your Rights

You have the right to:

  • Access
  • Rectification
  • Erasure ("right to be forgotten")
  • Restriction of processing
  • Data portability
  • Object to processing
  • Withdraw consent given

To exercise your rights, please contact: info@99rabbits.org

10. Transparency Notice under the EU AI Act (voluntary)

In the spirit of voluntary transparency under Art. 50 of the EU AI Act, we note that generative AI (e.g. ChatGPT by OpenAI) may be used as part of our services. No automated decision-making with legal effect takes place.

11. Changes

This privacy policy may be updated at any time. The version published on our website at any given time applies.

How 99rabbitsAI handles data from culture diagnostics

How results are aggregated and why individual contributions can't be traced back is explained separately:

Data protection with Noa, in detail →