Privacy statement
thirty3 AG, Zürich, is responsible for the personal data processed through this site and through Clarytt. We work to the revised Swiss Federal Act on Data Protection and, where it applies, the GDPR.
What we process on this website
- ·Technical data your browser sends when you load a page, such as IP address, user agent and time of request, used to serve and secure the site.
- ·The details you enter when you book a call, such as name, company, email address and any note you write.
- ·Anonymous, aggregated usage measurement, only where you have accepted it.
We do not sell personal data and we do not use it for advertising profiles.
Candidate data inside Clarytt
When a client uses Clarytt for a role, the client remains the controller of the applicant data and we act as processor on their instructions, under a written data processing agreement.
- ·Candidate data is kept to the role it was submitted for and is visible only to the people the client authorises.
- ·Scores are generated to rank and explain. A human makes the hiring decision.
- ·Client criteria and candidate data are not used to train models shared with other clients.
- ·Data is deleted or returned at the end of the engagement, or on the client's instruction, subject to statutory retention duties.
Legal bases
We process data to perform a contract, to pursue our legitimate interest in running and securing our services and in speaking to prospective clients, to comply with legal duties, or on your consent where consent is required. Consent can be withdrawn at any time.
Service providers
We use a small number of providers for hosting, email, meeting scheduling and analytics. They act on our instructions and are bound to confidentiality. Where data reaches a country without an adequacy decision, we rely on standard contractual clauses and additional safeguards.
Retention
We keep data for as long as we need it for the purpose it was collected, then delete it, unless a statutory retention period applies.
Your rights
- ·Access to the data we hold about you.
- ·Correction of inaccurate data and deletion where we have no legal ground to keep it.
- ·Restriction of, or objection to, certain processing.
- ·A copy of the data you provided, in a portable format.
- ·Withdrawal of consent, and the right to lodge a complaint with the competent supervisory authority.
To exercise a right, write to thirty3 AG, Zürich. If the request concerns a candidate profile held for a client, we will pass it to that client as the controller and support them in answering it.
Security
Access is restricted by role, transfers are encrypted in transit, and stored data is encrypted at rest. We log access to candidate records so a decision can be reconstructed later.
This statement is an interim version pending final review by our legal counsel. Last updated August 2026.