Privacy
The controller for data processing is Ebrah Studio, Debora Covic, Langwattstrasse 15, 8125 Zollikerberg, info@ebrahstudio.ch. We process personal data under the Swiss Data Protection Act (FADP) and, where applicable, the GDPR.
What data we process
When you visit the site our hosting provider processes technically necessary data such as IP address, time and page requested. When you book a workshop we record your name, e-mail address, number of places and the amount paid. For a corporate enquiry we additionally record the company and, if provided, phone number, group size and preferred date.
Services we use
Hosting and delivery: Vercel Inc. (USA). Database: Neon (Postgres), on our hosting provider’s infrastructure. Images and video: Vercel Blob. Payments: Stripe - payment data is collected and processed directly by Stripe; we never see or store card details. Sending confirmations: Resend. Access to the internal admin area: Clerk.
These services may process data outside Switzerland and the EU, in particular in the USA. Such transfers are based on standard contractual clauses or corresponding adequacy decisions.
Cookies and analytics
With your consent we use Google Analytics 4 (Google Ireland Ltd. / Google LLC, USA) with IP anonymisation to understand which pages are visited. Google Analytics is only loaded after you accept the cookie notice; consent is voluntary and can be changed at any time at the bottom of this page. We set no advertising cookies. Technically necessary cookies may be set by Stripe during checkout; they serve payment processing and fraud prevention.
Retention
We keep booking and payment records for as long as statutory retention requires (generally ten years). Enquiries that do not lead to a booking are deleted no later than two years after the last contact.
Your rights
You have the right to information, correction, deletion and restriction of processing of your data, and to data portability. An informal e-mail to info@ebrahstudio.ch is enough.
Security
The website is served exclusively over an encrypted connection (TLS). Complete security of data transmission over the internet cannot, however, be guaranteed.