Privacy Policy

Last updated: 29 September 2026

1. Controller

Responsible for the processing of personal data on this website:

Topolska Concept Marta Topolska
Sonnenhof 1
8808 Pfäffikon SZ
Switzerland

Email: contact@topolskaconcept.com
Phone: +41 77 983 23 90
UID: CHE-351.836.996

Please use these contact details for any question about data protection or to exercise your rights.

2. Scope and applicable law

This policy explains which personal data we process when you visit this website, contact us or book a consultation. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to a visitor, we also comply with its requirements.

3. What we process and why

3.1 Visiting the website

When you open this website, our hosting provider automatically records technical data in server log files: IP address, date and time of the request, the page requested, the referring page, and the browser and operating system used. This data is needed to deliver the website and to keep it secure. It is not combined with other data about you. The website is hosted by OVH on servers located in the European Union.

3.2 Contact and inquiry forms

When you use a form on this website, we process the data you enter: your name, email address, your message and, in the design inquiry form, the project location and project type. We use this data only to answer your request and to prepare a possible collaboration. Form messages are delivered by email through Resend (Resend, Inc., USA) to our mailbox, which is hosted by Google Workspace (Google Ireland Limited).

3.3 Booking a consultation

Consultations are booked through Acuity Scheduling (Squarespace, Inc., USA). The booking calendar is embedded on the booking page and is loaded from Acuity's servers when you open that page. Acuity processes the data you enter (such as name, email address, phone number and the chosen appointment) and may set cookies required for the booking process. We use this data to arrange and hold the appointment.

3.4 Newsletter sign-up

If you sign up through the newsletter form, we store your email address in order to send you occasional news from the studio. The form is provided by Flodesk (Flodesk, Inc., USA) and is loaded from Flodesk's servers. You can withdraw your consent at any time by writing to us; we will then delete your address.

3.5 Analytics (only with your consent)

If you agree to analytics cookies, we use Google Analytics 4 (Google Ireland Limited) to understand how the website is used, for example which pages are visited. Google Analytics sets cookies and processes usage data and a shortened IP address. Without your consent Google Analytics is not loaded.

3.6 Marketing (only with your consent)

If you agree to marketing cookies, we use the Meta Pixel (Meta Platforms Ireland Limited) to measure the reach of our campaigns on Facebook and Instagram. The pixel records page views and whether an inquiry was started or sent. Meta may link this information to your Facebook or Instagram account. Without your consent the Meta Pixel is not loaded.

3.7 Google Maps

The map on the homepage is provided by Google Maps (Google Ireland Limited). It is loaded only when you click “Open the map”. From that moment Google receives your IP address and may set cookies.

3.8 Links to other websites

This website links to our profiles on Instagram and LinkedIn and to other external websites. These are plain links: data is transferred to those providers only when you click a link. Their own privacy policies apply.

4. Cookies and local storage

Cookies are small text files stored in your browser. Analytics and marketing cookies are used only if you agree. You can change or withdraw your choice at any time: open cookie settings.

5. Legal bases

Where the GDPR applies, we rely on the following legal bases:

• your consent (Art. 6(1)(a) GDPR) for analytics, marketing and the newsletter;
• steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) for inquiries and consultation bookings;
• our legitimate interest (Art. 6(1)(f) GDPR) in operating a secure and functional website.

6. Recipients and transfers abroad

We share personal data only with the service providers named in this policy, who process it on our behalf. We do not sell personal data. Some of these providers are located in the United States or may process data there. Such transfers are based on the provider's certification under the Swiss–U.S. or EU–U.S. Data Privacy Framework or on standard contractual clauses.

7. Retention

We keep personal data only for as long as it is needed for the purposes described above. If a collaboration follows from your inquiry, statutory retention obligations apply to business records, usually for ten years.

8. Your rights

You have the right to request information about your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format and to withdraw a consent at any time with effect for the future. To exercise these rights, write to contact@topolskaconcept.com.

You also have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC); in the EU it is the data protection authority of your country.

9. Data security

This website is delivered exclusively over an encrypted connection (HTTPS). We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access.

10. Changes to this policy

We may update this policy when the website or the legal requirements change. The version published on this page applies.