Privacy
policy

1. Who we are

VYBE Studios ("VYBE Studios", "we", "us", "our") is a Swiss creative business providing video and content creation, storytelling, social media management and paid advertising services.

Controller / responsible party:

Cheryl Sprecher, sole proprietor, trading as VYBE Studios

3512 Walkringen, Switzerland

Email: agency@vybe-studios.com

Phone: +41 76 480 04 07

VYBE Studios is operated as a sole proprietorship and is not entered in the commercial register. Our full postal address is available free of charge on request by email or telephone; we provide it to any data subject, authority or court that asks.

We are the controller within the meaning of the Swiss Federal Act on Data Protection (FADP/revDSG) and, where the EU General Data Protection Regulation (GDPR) applies, within the meaning of Art. 4(7) GDPR.

If you have any questions about this policy or about how we handle your personal data, contact us at agency@vybe-studios.com.

Representative in the EU/EEA. We are established in Switzerland and have no establishment in the European Union. We have not appointed a representative under Art. 27 GDPR, because our processing of data relating to individuals in the EU is occasional, does not involve large-scale processing of special categories of personal data or of data relating to criminal convictions, and is unlikely to result in a risk to the rights and freedoms of natural persons. This falls within the exemption in Art. 27(2)(a) GDPR. Should the nature or scale of our processing change, we will appoint a representative and update this policy accordingly. In the meantime, you can reach us directly using the contact details above.

2. Scope of this policy

This policy applies to:

• our website at www.vybe-studios.com and all subdomains;
• our offer / quote tool, through which you can request a proposal;
• Studio Hub, our client platform (in preparation);
• any mobile or web applications we may publish in future under the VYBE Studios name;
• our business communications with clients, prospects and partners, including email and social media messages.

Where a specific product has additional or different terms, we will say so within that product.

3. Legal framework

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and its Ordinance. Where we offer services to, or monitor the behaviour of, individuals in the European Economic Area, we also comply with the EU GDPR.

4. What personal data we collect and why

4.1 Visiting our website

When you visit our website, our hosting provider automatically collects technical data in server log files. This includes your IP address, the date and time of access, the pages requested, the referring URL, and your browser type, version, operating system and language settings.

• Purpose: delivering the website, ensuring security and stability, detecting and preventing abuse, and diagnosing technical faults.
• Legal basis (GDPR): Art. 6(1)(f), our legitimate interest in operating a secure and functioning website.
• Legal basis (FADP): overriding private interest in secure operation; the processing is necessary for the provision of the website.
• Retention: log data is deleted or anonymised within 90 days, unless a specific incident requires longer retention.

4.2 Contact form and email enquiries

If you use our contact form or write to us, we process the data you provide, typically your first name, last name, email address and the content of your message, plus any further information you choose to include.

• Purpose: responding to your enquiry, and managing the resulting business relationship.
• Legal basis (GDPR): Art. 6(1)(b) where the contact relates to a contract or pre-contractual steps; otherwise Art. 6(1)(f), our legitimate interest in answering enquiries.
• Retention: for the duration of the exchange and for as long as needed afterwards for follow-up; enquiries that do not lead to a business relationship are deleted after 24 months. Where the correspondence is part of an accounting-relevant transaction, we retain it for 10 years under Art. 958f of the Swiss Code of Obligations.

4.3 Offer tool

Our offer tool allows you to request a proposal for our services. In this process we collect your name and email address, together with the answers you give about your project (for example your budget range, the services you are interested in, and your timeline).

• Purpose: producing and sending you a proposal, and following up on it.
• Legal basis (GDPR): Art. 6(1)(b), pre-contractual measures taken at your request.
• Retention: proposals and the underlying data are kept for 24 months from your last interaction, so that we can follow up and understand our own pipeline. If the proposal leads to a contract, the applicable retention is that described in section 4.4.
• No automated decision-making with legal effect takes place in the offer tool. Any pricing indication it produces is reviewed by a person before it becomes binding.

4.4 Studio Hub (client platform)

Studio Hub is our client platform. It is in preparation; the following describes the processing that will apply once it is available to you. If you hold a Studio Hub account, we process:

Account data. Your name, email address, password (stored only as a cryptographic hash, never in plain text), your organisation, your role and permissions, and account settings.

Purpose: creating and securing your account and authenticating you. Legal basis: Art. 6(1)(b) GDPR, performance of our contract with you.

Content and campaign data. Files, images, videos, briefs, copy and other material you or we upload; project and task information; comments and messages exchanged within the platform; and campaign performance data such as reach, impressions, engagement, clicks, spend and conversion metrics drawn from the advertising and social platforms we operate on your behalf.

Purpose: delivering the services you have engaged us for, reporting on results, and collaborating with you. Legal basis: Art. 6(1)(b) GDPR.

Billing data. Your billing address, VAT/UID number, contact person for invoicing, invoices issued, payment status and payment history.

Purpose: invoicing, collecting payment, and meeting our bookkeeping obligations. Legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR (statutory retention duties).

Usage and log data. Login timestamps, IP address, device and browser information, and a record of actions taken in the platform.

Purpose: security, abuse prevention, troubleshooting and improving the platform. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and reliable service.

Retention: account and content data is retained for the duration of your contract with us. After the contract ends, we delete or anonymise it within 12 months, except where a longer period is required, in particular billing and accounting records, which we retain for 10 years under Art. 958f of the Swiss Code of Obligations. You may request earlier deletion of content data at any time; we will comply unless a statutory duty prevents us.

Data you upload about other people. If you upload material containing personal data of third parties, for example images of your employees, customers or models, or customer lists for advertising audiences, you act as the controller for that data and we act as your processor. You are responsible for having a valid legal basis and the necessary consents and releases. We process such data only on your documented instructions. Where required, we will conclude a data processing agreement with you.

4.5 Advertising services we run for clients

As part of our paid advertising services, we operate advertising accounts on platforms such as Meta (Facebook, Instagram), TikTok and Google on behalf of our clients. In doing so we may handle audience data, conversion data and campaign analytics. Where this concerns our clients' data, the client is the controller and we act as processor on their instructions. The advertising platform is generally an independent or joint controller for its own processing; the platform's own privacy terms apply in addition to ours.

4.6 Future VYBE Studios applications

If we release a mobile or web application, the processing described in this policy applies by analogy. Any additional data an application requires, for example device identifiers, push-notification tokens, or crash and diagnostic reports, will be disclosed in the application's own privacy notice or store listing before you use it. We will not use an application to collect personal data for purposes that are unrelated to the ones described here without informing you first.

4.7 Social media presence

We maintain profiles on Instagram (@vybe.ofc), TikTok (@vybe.agency) and other platforms. When you interact with us there, the platform processes your data under its own privacy policy and largely outside our control. We process the content of messages and comments you send us in order to respond. Where a platform provides us with aggregated statistics about our page's audience, we and the platform may be joint controllers for that specific processing.

5. Cookies and similar technologies

We use cookies and comparable technologies (such as local storage and tracking pixels) on our website.

Strictly necessary cookies are required for the website and for Studio Hub to function, for example to keep you logged in, to maintain session state and to protect against fraud. These are set without consent, on the basis of our legitimate interest.

Analytics and marketing cookies, including Google Analytics, Google Ads, the Meta Pixel and the TikTok Pixel, are only set after you give consent via our cookie banner. They help us understand how the site is used and measure the performance of our advertising.

You can withdraw or change your consent at any time via the cookie settings link in our website footer, with effect for the future. You can also block or delete cookies in your browser settings; if you block strictly necessary cookies, parts of the site may stop working.

Legal basis (GDPR): Art. 6(1)(a), consent, for all non-essential cookies; Art. 6(1)(f) for strictly necessary ones.

6. Service providers and recipients

We use carefully selected service providers who process personal data on our behalf as processors, bound by data processing agreements. We do not sell your personal data.

In addition, we may disclose personal data to our accountant, auditors, lawyers, insurers and banks where necessary, and to public authorities or courts where we are legally obliged to do so.

7. Transfers abroad

Some of the providers above process personal data outside Switzerland and the EEA, in particular in the United States.

Where a destination country does not offer an adequate level of data protection as recognised by the Swiss Federal Council or the European Commission, we ensure appropriate safeguards, normally the EU Standard Contractual Clauses, supplemented by the Swiss addendum recognised by the FDPIC, together with additional technical and organisational measures. Where a provider is certified under the Swiss–U.S. Data Privacy Framework or the EU–U.S. Data Privacy Framework, transfers may also be based on that certification.

You may request a copy of the relevant safeguards by writing to agency@vybe-studios.com.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse and alteration. These include TLS encryption of data in transit, encryption of data at rest with our platform providers, role-based access control, hashed password storage, multi-factor authentication on administrative accounts, and regular backups.

No transmission over the internet can be guaranteed to be completely secure. We ask you to keep your Studio Hub credentials confidential and to notify us immediately if you suspect your account has been compromised.

If a data security breach is likely to result in a high risk to your rights, we will notify the FDPIC as soon as possible (Art. 24 FADP) and, where the GDPR applies, the competent supervisory authority within 72 hours, and we will inform you where required.

9. Your rights

Subject to the conditions and exceptions in the applicable law, you have the right to:

• Access, obtain confirmation of whether we process your personal data and receive a copy of it;
• Rectification, have inaccurate or incomplete data corrected;
• Erasure, have your data deleted, where we have no overriding reason or legal duty to retain it;
• Restriction, request that we limit processing in certain circumstances;
• Data portability, receive the data you provided in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible;
• Object, object to processing based on legitimate interests, and object at any time to direct marketing;
• Withdraw consent, where processing is based on consent, withdraw it at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal;
• Not be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, contact agency@vybe-studios.com. We may need to verify your identity before responding. We will reply within 30 days; if a request is complex we may extend this period and will tell you why.

Exercising these rights is free of charge. We may charge a reasonable fee, or decline to act, only where a request is manifestly unfounded or excessive.

Right to complain. If you believe we are processing your data unlawfully, you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. If you are in the EEA, you may lodge a complaint with the supervisory authority of your country of residence, place of work or the place of the alleged infringement.

10. Is providing data mandatory?

Providing personal data is generally voluntary. However, some data is necessary in order for us to act: without a name and email address we cannot respond to an enquiry, produce an offer or create a Studio Hub account, and without billing data we cannot issue a valid invoice. If you choose not to provide such data, we may be unable to enter into or perform a contract with you.

11. Children

Our services are directed at businesses and are not intended for children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Links to other websites

Our website and platform may link to third-party sites. We are not responsible for the content or privacy practices of those sites. We encourage you to read their privacy policies before providing them with personal data.

13. Changes to this policy

We may update this privacy policy to reflect changes in our services, our providers, or the law. The current version is always available at www.vybe-studios.com/privacy-policy, with the date of the last update at the top. For material changes affecting Studio Hub users, we will notify account holders by email or in-app notice before the change takes effect.

14. Contact

VYBE Studios

Cheryl Sprecher, sole proprietor

3512 Walkringen, Switzerland

agency@vybe-studios.com

+41 76 480 04 07

Our full postal address is available on request.