Studio Woestenburg logo: monogram W with a golden dotStudio Woestenburg logo: monogram W with a golden dotStudioWoestenburg
← Back to home

Privacy policy

Protecting your personal data matters to me. This policy explains which data I process, why, on what legal basis, who receives it and what rights you have. It is based on the Swiss Federal Act on Data Protection (FADP). For people in the EU, the General Data Protection Regulation (GDPR) also applies, and for people in the United Kingdom, the UK GDPR.

1. Controller

Studio Woestenburg
Jada Woestenburg
Sunneblick 7
6343 Rotkreuz
Switzerland
Email: jada@studio-woestenburg.com
Phone: +41 76 468 27 07

Studio Woestenburg is a sole proprietorship with no employees. I process personal data myself and only share it with the service providers listed below.

Representative in the EU and UK: I have not appointed a representative in the EU (Art. 27 GDPR) or in the United Kingdom (Art. 27 UK GDPR). Data of people in the EU and UK is processed only occasionally, does not include special categories of personal data and is unlikely to result in a risk to the rights and freedoms of the people concerned (Art. 27(2)(a) GDPR and UK GDPR). You can reach me directly at the address above for any request.

2. What data I process

I do not collect sensitive personal data (e.g. health data). The website is not aimed at children.

3. Purposes and legal bases

4. Hosting (Wix)

The website is hosted by Wix.com Ltd. (40 Namal Tel Aviv St., Tel Aviv 6350671, Israel). Wix processes the data needed to run the website, in particular server and access data, on my behalf as a processor. The data may be stored on servers in Israel, the EU and the USA. Switzerland and the EU have recognised Israel as providing adequate data protection; for other transfers, Wix uses standard contractual clauses.

5. Contact by email and phone

If you contact me by email or phone, I only use your details to handle your enquiry and any follow-up questions.

6. Booking calls (Calendly)

To book a free call, I link to Calendly (Calendly LLC, USA). You are only taken to Calendly once you click a booking link. There you enter your name, email address, preferred time and any answers to questions; Calendly stores this information on my behalf and passes it on to me. Calendly’s privacy policy also applies. Transfers to the USA are based on the Data Privacy Framework (where Calendly is certified) or standard contractual clauses.

7. Payments (Stripe)

I use Stripe for invoices, payment links and monthly subscriptions for website care (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland, together with group companies such as Stripe, Inc., USA). When you pay an invoice or start a subscription, you enter your payment details directly with Stripe. For this, Stripe processes in particular your name, email address, billing address, amount, payment method (e.g. card or TWINT) and payment details, as well as technical information to prevent fraud.

I never receive full card details – only what I need for bookkeeping and billing (e.g. payment status, amount, payment method and the last four digits of a card). In Stripe’s customer portal you can view invoices, change your payment method and manage a subscription.

The legal basis is the performance of our contract and my legal obligation to keep records (Art. 6(1)(b) and (c) GDPR). Stripe processes the data on my behalf and partly as an independent controller, for example to prevent fraud and to meet its own legal obligations. Data may be transferred to the USA; Stripe is certified under the Data Privacy Framework and also uses standard contractual clauses. Stripe’s privacy policy also applies.

8. Cookies, tracking and ad measurement

On your first visit, a cookie banner asks which services you agree to. Without your consent, no statistics or marketing services are loaded. You can change or withdraw your choice at any time via “Cookie settings” in the footer.

Necessary

Your cookie choice (entry “sw-consent”) and your choice between light and dark mode (entry “sw-theme”) are only stored in your browser’s storage and are not sent to me or to third parties. No consent is needed for this.

Statistics: Google Tag Manager and Google Analytics

With your consent, I use Google Tag Manager and Google Analytics 4 from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA). Tag Manager loads the other services; Google Analytics records which pages are viewed, for how long and from which device. Google Analytics 4 does not store IP addresses. The cookies are stored for up to 2 years.

Marketing: Google Ads

With your consent, I use conversion tracking and remarketing from Google Ads (Google Ireland Limited and Google LLC). This shows me whether an enquiry came from an ad, and lets me show relevant ads to website visitors later on. The cookies are stored for up to 13 months.

Marketing: Meta Pixel

With your consent, I use the Meta Pixel from Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) and Meta Platforms, Inc. (USA). It lets me measure how well my ads on Facebook and Instagram work and show ads to people who have visited the website. Meta may link the data to your Facebook or Instagram account. Meta and I are joint controllers for collecting the data; any further processing is the sole responsibility of Meta. The cookies are stored for up to 3 months.

Google and Meta are certified under the Data Privacy Framework; standard contractual clauses also apply. You can find more information and ways to object in the privacy policies of Google and Meta and in the ad settings of your Google or Meta account.

Fonts are loaded locally from this website, so no data is sent to third parties for them.

9. Sharing with third parties

I do not sell personal data. Data is only shared with the service providers named in this policy where this is necessary for the service, where I am legally required to do so, or where you have given your consent.

10. Transfers abroad

Some service providers process data outside Switzerland, in particular in the EU, Israel and the USA. For countries without an adequate level of data protection, I protect transfers with recognised safeguards: in Switzerland under Art. 16 f. FADP (Swiss-US Data Privacy Framework or standard contractual clauses), in the EU under Art. 44 ff. GDPR (EU-US Data Privacy Framework or standard contractual clauses).

11. Retention

I only keep personal data for as long as it is needed for its purpose or required by law – in particular 10 years for business and accounting records under the Swiss Code of Obligations. I delete enquiries that do not lead to a project once they have been dealt with and there is no obligation to keep them.

12. Data security

I take appropriate technical and organisational measures to protect your data from loss, misuse and unauthorised access, including HTTPS encryption, secure passwords with two-factor authentication and restricted access. In the event of a data breach with a high risk, I will inform the competent authority and, where required by law, the people affected.

13. Your rights

Depending on the applicable law, you have the right to access, rectification, erasure, restriction of processing, objection, data portability and to withdraw your consent with effect for the future. A message to jada@studio-woestenburg.com is all it takes. No automated individual decision-making takes place.

Right to complain: Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Bern. EU: the data protection authority in your country of residence. UK: Information Commissioner’s Office (ICO).

14. Changes

I may update this privacy policy if the law or my services change. The version published on this page applies.

Last updated: 15 October 2026

This is a translation of the German privacy policy. If there are any differences, the German version applies.