Privacy Policy

1.Who we are

Lore StudioOperated by Katarzyna MamajZurich, Switzerland

Contact, including anything about your personal data: contact@lorestudio.ch.

We are responsible for the processing described here (the “controller”). We are based in Switzerland, so the Swiss Federal Act on Data Protection (FADP) applies. Where the EU General Data Protection Regulation (GDPR) applies to visitors from the EU or EEA, this policy covers it as well.

2.When you visit the website

Server logs

When you open a page, our hosting provider automatically processes technical data your browser sends: IP address, date and time, the page requested, the referring page, and browser and operating system. This is needed to deliver the site, keep it secure and fix errors. We do not use it to identify you.

Links to Instagram

The site links to our Instagram profile. Nothing is loaded from Instagram until you click a link; after that, Meta’s privacy policy applies.

Legal basis (GDPR): our legitimate interest in a secure, working and consistently presented website, Art. 6(1)(f).

3.Contact form and consultation requests

When you use the contact form, ask for a consultation or email us, we process the details you give us:

• name and email address
• your brand or company and a few words about what you do
• a website or Instagram link, if you add one
• what you need help with and your timeline
• what you tell us about your project
• the language version of the site you wrote from

We use this only to reply, to discuss a possible project and, if we work together, to prepare a proposal and contract. Consultations are arranged individually by email; the site has no booking tool. Nothing is bought or signed through the website.

Form messages are delivered to our inbox by the email service Resend.

Legal basis (GDPR): steps taken at your request before a contract, Art. 6(1)(b); our legitimate interest in answering enquiries, Art. 6(1)(f).

4.Analytics and cookies

With your consent, we use Google Analytics 4 to understand how the site is used, for example which pages are visited and how visitors arrive. It sets cookies and processes data such as device and browser information, approximate location and pages viewed. It does not load until you accept analytics cookies, and you can withdraw consent at any time in Cookie settings.

Legal basis (GDPR): your consent, Art. 6(1)(a).

With your consent, we use the Meta Pixel, a tool from Meta Platforms Ireland Ltd., to measure our advertising on Facebook and Instagram and to reach people who have visited this site. It sets cookies and sends Meta your IP address, browser and device information and the pages you view. It does not load until you accept marketing cookies, and you can withdraw consent at any time in Cookie settings. Meta processes this data under its own privacy policy.

Legal basis (GDPR): your consent, Art. 6(1)(a).

Which cookies are used and for how long is explained in our Cookie Policy.

5.Service providers

We use a small number of providers who process data on our behalf, only for the purposes below:

We do not sell personal data. Apart from the Meta Pixel, which runs only with your consent, we do not share it for advertising. We may disclose data where the law requires it.

6.Data transfers abroad

Some of these providers are based in the United States or process data there. Switzerland and the EU recognise companies certified under the Swiss-US and EU-US Data Privacy Framework as providing adequate protection. Where a provider is not certified, we rely on standard contractual clauses or other safeguards permitted by law.

7.How long we keep data

• Enquiries: as long as needed to handle them. If nothing comes of an enquiry, we delete it once it is no longer needed.
• Project and contract correspondence: for the duration of our work together, then as long as Swiss law requires, generally up to ten years for business records.
• Server logs: for a short period, according to our hosting provider’s retention settings.
• Analytics data, only if you consented: no longer than 14 months.

8.Security

The site is served only over encrypted HTTPS connections. We limit access to personal data to what is needed and choose providers with recognised security standards. No transmission over the internet is completely secure, but we take reasonable technical and organisational measures to protect your data.

9.Your rights

Under the FADP you can ask what data we hold about you, have incorrect data corrected, ask us to delete it or stop processing it, and receive data you gave us in a common format. If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, data portability and objection, and you can withdraw consent at any time with effect for the future.

To use any of these rights, write to contact@lorestudio.ch. We reply within 30 days and may ask you to confirm your identity.

You can also complain to a data protection authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU or EEA the authority where you live or work.

10.Changes

We update this policy when the website or the way we work changes. The date at the top shows the current version.