Privacy policy

This policy explains how AUCH Studio handles personal data on this website, under the Swiss Federal Act on Data Protection (FADP, the revised law in force since 1 September 2023). Where a visitor is in the EU or the EEA, we apply the equivalent standards of the GDPR.

Who is responsible

The controller of any personal data collected here is:

AUCH Studio

Friesstrasse 34, 2nd floor, 8050 Zürich, Switzerland
info@auch.studio · +41 79 872 67 32

We have not appointed a data protection officer, and are not required to. Data questions go to the address above, where one of us reads them and writes back.

What we collect, and why

When you write to us through the form

The contact form asks for your name, your email address, what your message is about, and the message itself. We use them for one thing: answering you, and arranging the class, booking or studio hire you asked about. Nothing on the form is used for advertising, and we do not add you to a newsletter unless you ask us to.

The legal basis is the preparation or performance of a contract with you (FADP Art. 31 para. 2 lit. a; GDPR Art. 6 para. 1 lit. b), and our legitimate interest in replying to people who write to us.

The form also carries one hidden field that visitors never see. If it arrives filled in, the message came from an automated script and is discarded. No personal data is involved.

When you write to us any other way

Email, telephone, WhatsApp and Instagram messages are handled the same way: read, answered, kept while they are relevant. Instagram and WhatsApp are run by Meta, on their own terms and their own servers, and what happens to a message inside their apps is outside our control. If you would rather not involve them, use the form or plain email.

When you simply visit a page

Our web server writes a standard access log entry for each request: the IP address, the date and time, the page requested, the referring page and the browser's user-agent string. We use it to keep the site running and to notice attacks. These entries are deleted automatically after a short retention period and are not combined with anything else or used to build a profile of you. The legal basis is our legitimate interest in operating a secure website.

What we do not do

• No analytics. No Google Analytics, no Meta pixel, no heatmaps, no visitor counting of any kind.
• No advertising, no retargeting, no profiling.
• No cookies. This site sets none at all, which is why you were never asked to accept any.
• We never sell, rent or trade personal data to anyone.
• No fonts, scripts or images loaded from someone else's server. Everything the page needs is served from our own.

One thing the browser stores

If you close the little "free trial class" banner, we save a single value in your browser's local storage so that it stays closed. It holds no personal data, it is never sent anywhere, and it lives only on your device. Clearing your browser data removes it.

Videos and maps

The class pages show video stills that are stored on our own server. Nothing is loaded from YouTube until you press play on one of them. If you do, a player from YouTube (Google Ireland Limited) opens and Google receives your IP address and information about your browser; if you are signed in to Google, it can connect the view to your account. We use YouTube's no-cookie domain, which limits what is stored, but it cannot stop the connection itself. Not pressing play means no data reaches Google. Google's own privacy policy applies from the moment you do.

The map on the contact page is a drawing we made from OpenStreetMap data and is part of our own page: it loads nothing and reports nothing. The "walking directions" button is an ordinary link. Only if you follow it does Google Maps receive a request, and from then on Google's terms apply.

Who else touches this data

As few parties as we can manage, each of them bound to process data only on our instructions:

• Our hosting provider, which runs the server this website is served from and therefore holds the access logs.
• Our email provider, which carries and stores the messages you send us, as any email provider does.
• Nobody else. We do not pass your data to other studios, teachers, event partners or marketing companies.

Some of these providers may store or back up data outside Switzerland, in countries recognised as offering adequate protection or under contractual safeguards to that standard. We disclose data to authorities only where Swiss law obliges us to.

How long we keep things

• Form messages and email: for as long as the conversation is live, and afterwards while they may still matter for the relationship between us. Enquiries that lead nowhere are deleted within twelve months.
• Booking and payment records: kept for ten years where Swiss bookkeeping law requires it.
• Server access logs: a short technical retention, then automatic deletion.

Your rights

Over any personal data we hold about you, you can:

• ask what we hold, and get a copy of it;
• have anything wrong corrected;
• have it deleted, unless a legal retention duty stops us;
• object to a use you did not expect;
• receive it in a portable, machine-readable form;
• withdraw a consent you gave us, at any time, without giving a reason.

One email to info@auch.studio starts any of these. We answer within thirty days and it costs you nothing. So that we do not hand your data to somebody else, we may need to check that you are you.

If you think we have handled your data badly, we would much rather hear it from you first. You are also entitled to go straight to the Federal Data Protection and Information Commissioner (FDPIC) in Bern, or, in the EU, to your national supervisory authority.

Security

The site is served only over an encrypted HTTPS connection, so what you type into the form is encrypted on its way to us. Access to the inbox is limited to the people who run the studio. No system on the internet is perfectly safe, and we will not pretend otherwise, but we keep the amount of data we hold small enough that there is little to lose.

Children

We run kids' and teens' classes, so some of our students are under 16. Bookings for them are made by a parent or guardian, and the data we hold about a child is the minimum needed to run the class safely. Parents can ask what we hold and have it deleted at any time, on the same terms as anyone else.

Changes to this policy

If the site or the law changes, this page changes with it, and the date below changes too. There is no version history to dig through: what stands here is what applies.

Last updated: 15 August 2026.

Company details and the legal notice are on the Impressum page.