zhakura

Legal

Privacy

Privacy Policy ENDE Last updated:

This policy explains what personal data zhakura studio GmbH (“zhakura studio”, “we”, “us”) collects when you visit zhakura.studio, why we process it, and the rights you have. We process personal data in accordance with the Swiss Federal Act on Data Protection (revised FADP / revDSG, in force since 1 September 2023) and, where our processing falls within its territorial scope, the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website is:

zhakura studio GmbH
Winzerhalde 109, 8049 Zürich, Switzerland
Commercial register: Handelsregisteramt des Kantons Zürich
Company ID (UID): CHE-248.204.588
Represented by: Yilmaz Akarsu, Managing Director
Email: hello@zhakura.studio

We have not appointed a mandatory data protection officer, as one is not required for our activities. For any privacy matter, contact us at the address above.

2. What data we process

We keep data collection to a minimum. Depending on how you interact with us, we may process:

  • Correspondence data. When you email us (e.g. via hello@zhakura.studio), we receive your email address, your name if provided, and the content of your message.
  • Server log data. When you load the site, our hosting provider automatically records technical data required to deliver the page and keep it secure: your IP address, browser and device type (user-agent), the pages requested, referrer, and the date and time of the request.
  • Cookies and analytics. This website uses only cookies that are strictly necessary for it to function; it does not set advertising or cross-site tracking cookies, and we do not profile visitors. Our hosting provider (Cloudflare) may use strictly necessary, cookieless mechanisms to keep the site secure and performant. Should we introduce non-essential analytics in future, we will update this policy and, where required, ask for your consent beforehand.

3. Purposes and legal basis

We process the above data to:

  • respond to your enquiries and manage our correspondence with you;
  • operate, secure, and maintain the website and defend against misuse or attacks;
  • comply with legal obligations to which we are subject.

Under the Swiss FADP, private controllers may process personal data where doing so does not breach data-protection principles; we rely on our legitimate interest in running our business and communicating with you. Where the GDPR applies, our legal bases are Art. 6(1)(b) GDPR (steps taken at your request prior to entering a contract), Art. 6(1)(f) GDPR (our legitimate interest in a secure, functioning website and in answering enquiries), and Art. 6(1)(c) GDPR (legal obligations). Where we rely on consent, it is Art. 6(1)(a) GDPR and you may withdraw it at any time.

4. Disclosure to third parties

We do not sell your personal data. We share it only with service providers who process it on our behalf and under contract (processors), namely:

  • Website hosting, CDN & DNS: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA — serves and secures the site through its global edge network and manages our domain.
  • Email: Proton Mail, operated by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland — handles our email correspondence, with data stored in Switzerland.

We may also disclose data where required by law, court order, or to protect our rights.

5. Data transfers abroad

Our email data is held by Proton AG in Switzerland and is not transferred abroad. Our hosting and CDN provider, Cloudflare, Inc., operates a global network, so technical data such as your IP address may be processed outside Switzerland, including in the United States. Such transfers are safeguarded by the Swiss–U.S. Data Privacy Framework (Cloudflare is certified) and, where applicable, by Standard Contractual Clauses with the Swiss addendum recognised by the FDPIC. We otherwise transfer personal data only to countries offering adequate protection under the Swiss Federal Council’s list, or on the basis of such appropriate safeguards.

6. Retention

We keep personal data only as long as necessary for the purpose it was collected for or as required by law. Correspondence is retained for the duration of our exchange and a reasonable period thereafter; server logs are typically retained for a short period for security and troubleshooting before being deleted or anonymised. Swiss commercial and tax law may require us to retain certain business records for up to ten years.

7. Your rights

Subject to the applicable law, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected and incomplete data completed;
  • have your data deleted, and to restrict or object to its processing;
  • receive your data in a portable format (data portability), where applicable;
  • withdraw any consent you have given, without affecting prior processing.

To exercise any of these rights, email hello@zhakura.studio. We may need to verify your identity first. You also have the right to lodge a complaint: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB, edoeb.admin.ch); in the EU/EEA, with your local supervisory authority.

8. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, including encrypted transport (HTTPS/TLS). No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

9. Visitors from the EU/EEA

Where the GDPR applies to our processing, the additional rights and legal bases set out above apply. We operate from Switzerland and do not specifically direct this website at the EU/EEA market; we have therefore not appointed a representative under Art. 27 GDPR. We keep this position under review and will designate one should our activities require it.

10. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The current version is always available on this page, with the “last updated” date above.

11. Contact

Questions about this policy or your data? Write to hello@zhakura.studio. See also our Terms & Conditions.