Table of Contents
Jaff Studio is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, in accordance with the Swiss Federal Act on Data Protection (nFADP).
1. CONTROLLER / VERANTWORTLICHER
2. DATA WE COLLECT
We collect the following types of personal data:
2.1 Information You Provide
Name and contact details (email)
Company name and business information
Payment and billing information
Website and marketing project details
Communication history and correspondence
2.2 Automatically Collected Data
IP address and device information
Browser type and operating system
Pages visited and time spent on our website
Cookies and similar tracking technologies
Usage data and analytics
2.3 Client Customer Data
When we provide services, we may process your customers' data as a data processor on your behalf, including:
Customer contact information
Marketing analytics data
Website visitor behavior data
Email marketing metrics
3. HOW WE USE YOUR DATA
3.1 Service Delivery
Providing AI-powered website and marketing solutions
Processing payments and managing billing
Communicating about projects and services
Providing customer support
3.2 Business Operations
Improving our services and AI models
Analyzing website usage and performance
Marketing our services (with your consent)
Complying with legal obligations
3.3 AI Processing
We use artificial intelligence tools (including OpenAI API) to deliver our services
Your data may be processed by AI systems to generate marketing content, website code, and analysis
AI processing occurs on secure servers, primarily in the EU and Switzerland
We implement technical measures to ensure AI processing respects your privacy
4. LEGAL BASIS FOR PROCESSING (nFADP)
We process your data based on:
Contract performance (Article 31 para. 1 nFADP)
Legitimate interests (Article 31 para. 1 nFADP)
Your consent (Article 31 para. 1 nFADP)
Legal obligations (Article 31 para. 2 lit. a nFADP)
5. DATA SHARING AND TRANSFERS
5.1 Third-Party Service Providers
We share data with:
AI service providers (OpenAI, Anthropic)
Cloud hosting providers
Payment processors (Stripe, PayPal)
Analytics services (Google Analytics)
Email service providers
5.2 International Transfers
Some of our service providers are located outside Switzerland. We ensure adequate protection through:
EU-Swiss adequacy decisions
Standard Contractual Clauses (SCCs)
Privacy Shield Framework (where applicable)
5.3 Legal Disclosure
We may disclose data when required by Swiss law or court order.
6. DATA SECURITY
We implement appropriate technical and organizational measures including:
Encryption of data in transit and at rest
Access controls and authentication
Regular security assessments
Employee confidentiality obligations
Secure data backup procedures
However, no internet transmission is 100% secure. You transmit data at your own risk.
7. DATA RETENTION
We retain personal data for:
Active clients: Duration of business relationship + 10 years (Swiss law requirement)Marketing data: Until consent withdrawal or 3 years of inactivityFinancial records: 10 years (Swiss accounting law)Website analytics: 26 months
8. YOUR RIGHTS UNDER SWISS LAW
You have the right to:
8.1 Access (Article 25 nFADP)
Request a copy of your personal data we hold
8.2 Rectification (Article 32 para. 1 nFADP)
Correct inaccurate or incomplete data
8.3 Deletion (Article 32 para. 2 lit. a nFADP)
Request deletion of your data (subject to legal retention requirements)
8.4 Restriction (Article 32 para. 2 lit. b nFADP)
Limit how we process your data
8.5 Data Portability (Article 28 nFADP)
Receive your data in a structured, machine-readable format
8.6 Object to Processing (Article 30 para. 2 lit. b nFADP)
Object to processing based on legitimate interests
8.7 Withdraw Consent
Withdraw consent at any time (does not affect prior processing)
To exercise these rights, contact us at: contact@jaffstudio.com
9. COOKIES AND TRACKING
We use cookies and similar technologies:
9.1 Essential Cookies
Required for website functionality (no consent needed)
9.2 Analytics Cookies
Google Analytics tracks website usage (requires consent)
9.3 Marketing Cookies
Track advertising effectiveness (requires consent)
You can manage cookie preferences via our cookie banner or browser settings. See our Cookie Policy for more details.
10. CHILDREN'S PRIVACY
Our services are not directed to individuals under 16. We do not knowingly collect data from children.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy. Changes will be posted on this page with an updated revision date.
12. COMPLAINTS
If you believe we have violated Swiss data protection law, you may file a complaint with: