Privacy Policy

1. Privacy Policy
With this Privacy Policy, we inform you about the processing of personal data in connection with our website and our other online services.
For individual or additional offers and services, special, supplementary or further privacy policies as well as other legal documents, such as Terms and Conditions or Terms of Use, may apply.
1. Controller
The controller responsible for data processing is:
Creative Studio Tinner
Chressbrunnen 2047
9200 Gossau SG
Switzerland
Phone: +41 79 725 08 53
Email: info@harlowmcfly.com
1. Collection and Processing of Personal Data
We primarily process personal data that we receive from our clients and other business partners, as well as from other persons involved, within the scope of our business relationships. We also process personal data that we collect from users when operating our website and other online services.
In particular, we process the following categories of personal data:
Technical data, such as IP address, device information, browser type, operating system, date and time of access, pages visited and referrer URL.
Communication data, such as name, email address, phone number and message content when contacting us.
Newsletter data, such as email address, time of registration, opening and click behaviour, if you subscribe to our newsletter.
1. Purposes of Data Processing
We process personal data for the following purposes:
Providing and optimising our website.
Ensuring IT security.
Communicating with users and responding to enquiries.
Sending our newsletter, if subscribed to.
Analysing user behaviour to improve our offers.
Fulfilling legal obligations.
1. Legal Basis
We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection and the Ordinance to the Federal Act on Data Protection.
1. Cookies and Tracking Technologies
We use cookies and similar technologies on our website. Cookies are small text files that are stored on your device and contain certain information.
Some cookies are technically necessary for our website to function properly. These cookies cannot be disabled.
We may also use third-party tools such as Google Tag Manager to manage website tags through one interface. Google Tag Manager itself does not store cookies and does not collect personal data. However, it enables the activation of other tags, which may collect data themselves.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Further information: https://policies.google.com/privacy
1. Newsletter
If you subscribe to our newsletter, we process your email address and, optionally, any additional data you voluntarily provide for the purpose of sending the newsletter.
You can unsubscribe from the newsletter at any time. A corresponding unsubscribe link can be found in every newsletter. After unsubscribing, your data will be deleted, unless statutory retention obligations apply.
1. Contacting Us
If you contact us, for example by contact form, email or phone, we process the data you provide in order to handle your enquiry and any follow-up questions.
This data will be deleted as soon as it is no longer required for the purpose for which it was collected and provided that there are no statutory retention obligations.
1. Disclosure of Data to Third Parties
We only disclose personal data to third parties if you have given your explicit consent, if this is necessary for the performance of a contract, if this is necessary to fulfil a legal obligation or if this is necessary to safeguard legitimate interests.
As part of our business activities, we may use the following categories of recipients:
IT service providers and hosting providers.
Analytics and tracking services.
1. Transfer of Data Abroad
As a general rule, we process personal data in Switzerland. When using third-party services such as Google Tag Manager or other online tools, data may be transferred abroad, including to the USA.
Where required, we rely on appropriate safeguards such as standard contractual clauses and additional security measures.
1. Retention Period
We only store personal data for as long as required for the respective processing purposes or for as long as statutory retention periods apply.
Specific retention periods may include:
Server log files: 30 days.
Newsletter data: until unsubscribed.
Contact enquiries: 2 years after completion of the enquiry.
Business correspondence: 10 years, according to statutory retention obligations.
1. Data Security
We take appropriate technical and organisational security measures to protect your personal data against unauthorised access and misuse.
These measures include, in particular, encrypted data transmission via SSL/TLS, access restrictions, regular security updates, firewalls and virus protection.
1. Your Rights
Within the scope of applicable data protection law, you have the following rights:
You have the right to request information about whether and which personal data we process about you.
You have the right to have inaccurate personal data corrected.
You have the right to request the deletion of your personal data, provided that there are no statutory retention obligations.
You have the right to receive your personal data in a commonly used electronic format.
You have the right to object to the processing of your personal data.
You have the right to withdraw any consent you have given at any time.
To exercise these rights, please contact us using the contact details provided above.
You also have the right to lodge a complaint with the competent data protection authority:
Federal Data Protection and Information Commissioner
Feldeggweg 1
3003 Bern
Switzerland
www.edoeb.admin.ch
1. Changes to this Privacy Policy
We may amend this Privacy Policy at any time without prior notice. The current version published on our website shall apply.
Version: July 2026
Creative Studio Tinner