Privacy notice

Who is responsible?

Elena Kutcalova provides services under the name ED Studio and is the sole controller for the processing of personal data on studio-ed.ch.

ED Studio provides services to clients in Switzerland and the European Union.

For general studio enquiries, you can also use hello@studio-ed.ch.

Messages sent to the Yahoo-hosted privacy contact address are retained only for as long as needed to deal with your request or meet legal obligations.

When you visit the site

Our hosting provider, Infomaniak, processes technical connection data needed to provide and protect the site. This includes your IP address, requested page, time of access and browser information. We use this data for operation, security and troubleshooting.

The web server keeps access and error logs. They are rotated daily, and older archives are removed after 14 rotations. Where the GDPR applies, this processing is based on our legitimate interest in operating the site securely.

When you contact us

When you contact us by email, phone or the contact form, we process the details you provide to answer your enquiry and, where relevant, prepare a possible engagement. Form enquiries include your name, email address and message, plus any optional company, phone number, project type, timing and attachment (PDF, DOCX, PNG or JPEG, up to 10 MB). Your name, email address and message are required for us to receive and answer an enquiry through the form. Please do not send sensitive information.

The form is delivered through Basin. Basin retains submissions and attachments for 30 days, then deletes them, including attachments. Basin automatically checks submitted text for spam. Training Basin’s spam classifier on form content and storage of submission metadata are disabled. Basin still receives IP and request metadata where needed for spam protection. Basin’s optional AI lead scoring is disabled.

On pages with an enabled form, Cloudflare Turnstile uses technical signals such as IP address and browser details to identify abusive use. This security check operates independently of your analytics choice. Where the GDPR applies, project enquiries are processed as steps requested before entering into a contract; other enquiries are based on our legitimate interest in responding to them; and form protection is based on our legitimate interest in protecting the site and form from abuse.

We retain email enquiries in the studio mailbox only for as long as needed to answer the enquiry, perform a contract or meet legal obligations, and delete them afterwards.

Optional analytics

We load Google Analytics 4 only after you agree to analytics. Google may receive information such as pages visited, interactions, coarse location, device and browser details, and cookie identifiers. We have disabled automatic collection of contact-form interactions, Google signals and ads personalisation, and do not intentionally send form content to Analytics.

Google Analytics user and event data is retained for two months and is not reset on new activity. The _ga and _ga_<ID> analytics cookies have a fixed 60-day lifetime. Your analytics choice is stored locally in your browser until you change it or clear your browser data. You can refuse analytics or change your choice at any time through “Analytics settings” in the footer. Withdrawing consent stops future activation but cannot undo processing that has already occurred. Where the GDPR applies, analytics is based on your consent.

Recipients and international processing

Depending on how you use the site, personal data may be received by Infomaniak for hosting and the shared studio mailbox, Basin for form enquiries, Yahoo for the privacy contact address, Cloudflare for form protection and Google for optional analytics.

Infomaniak provides the website and studio mailbox in Switzerland. Form details are sent to Basin in Canada; according to Basin’s vendor list, it uses further providers in Canada, the United States and the EU. Cloudflare Turnstile, Yahoo and — with your consent — Google Analytics may process data in the United States and other countries.

Transfers to countries without a recognised adequate level of data protection require additional safeguards. Cloudflare, Google and Yahoo describe their transfer mechanisms in the linked notices. Please contact the controller above if you have questions about a particular transfer.

Your rights

You may ask for information about your personal data and, where applicable, request correction or deletion. If the GDPR applies to the processing, you may also request restriction, object to processing, request data portability and withdraw consent for the future. To exercise these rights, contact elenakutcalova@yahoo.com. You may also complain to the relevant data-protection authority.

Changes to this notice

We will update this notice when the site or our processing of personal data changes. The published version will show its date.