STUDIO SO

Privacy Policy for Studio So

Last updated: May 2026

1. General Overview and Contact Information

Based on the Swiss Federal Data Protection Act (DPA), Studio So is committed to protecting the privacy of our website visitors and customers. This Privacy Policy describes how we collect, process, and use personal data when you visit our website (www.studioso.ch) or place an order. The responsible controller for data processing activities through this website is: Studio So c/o Vanya Brucker Hallwylstrasse 62 8004 Zürich Switzerland Email: hello@studioso.ch

2. Collection and Processing of Personal Data

2.1. Visiting the Website & Web Analytics When you visit our website, our server automatically collects standard log file data (such as your IP address, date and time of access, browser type, and operating system). Additionally, we use Google Analytics, a web analytics service provided by Google LLC (USA) or Google Ireland Ltd (EU). Google Analytics uses cookies to analyze how visitors interact with our website. 2.2. Contact via Email If you contact us via our provided email address (hello@studioso.ch), we process the personal data you provide (such as your email address, name, and the content of your message) exclusively to handle your inquiry and correspond with you. 2.3. E-Commerce Checkout and Order Processing When you purchase items from Studio So, we collect information necessary to execute the sales contract. Payment Processing: Payment processing is integrated directly via Stripe (Stripe Payments Europe Ltd / Stripe Inc.). During checkout, your payment details (credit card information or Twint data) are securely captured and handled directly by Stripe. Studio So does not store your full credit card or sensitive payment details on our servers; we receive the transaction confirmation and essential customer data from Stripe to fulfill your order. Shipping and Delivery: To deliver your items within Switzerland, we share your name and shipping address with Die Post (Swiss Post). 2.4. Newsletter and Marketing (Resend) If you explicitly subscribe to our newsletter, we collect your email address. We use Resend (Resend Inc.) as our third-party email infrastructure provider to manage our mailing lists and dispatch marketing updates. Your data processed for this purpose is hosted on Resend's infrastructure located in Ireland. You can unsubscribe from our newsletter at any time by clicking the unsubscribe link at the bottom of any email. 2.5. Customer Feedback and Surveys If you choose to provide us with direct feedback or review your experience, we collect this information to improve our services. This feedback data is stored and organized within Google Sheets (Google LLC).

3. Disclosure of Data to Third Parties and International Transfers

We only share your data with the third-party processors explicitly mentioned in this policy (Stripe, Die Post, Resend, Google) to fulfill our legal and contractual duties. Data transfers to infrastructure providers operating servers outside of Switzerland (such as within the European Union/Ireland for Resend, or the United States for Google infrastructure) are conducted in compliance with the Swiss-U.S. Data Privacy Framework (DPF) or using standard contractual clauses approved by the Swiss Federal Data Protection and Information Commissioner (FDPIC), ensuring an adequate and legally recognized level of data protection.

4. Data Retention

We store your personal data only as long as necessary to fulfill the purposes for which it was collected, to meet our contractual obligations (such as order fulfillment), or as required by statutory Swiss business record retention laws.

5. Your Rights

Under the Swiss Data Protection Act, you have the following rights regarding your personal data: Right to Information: You can request confirmation as to whether and how we process your personal data. Right to Correction: You can request that inaccurate or incomplete personal data be corrected. Right to Deletion: You can request the erasure of your data, provided we are not legally obligated to retain it. Right to Restriction and Object: You can object to data processing or request a restriction of processing (e.g., opting out of marketing tracking). To exercise any of these rights, please send an explicit request to our contact email: hello@studioso.ch.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, loss, or misuse within our website infrastructure.

7. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time to reflect updates to our website infrastructure or evolving legal requirements. The version published on our website at the time of your visit applies.