This policy explains which personal data we process, why, how long we keep it, and what rights you have. It covers hydemedia.ch and our contact with customers, business partners and property owners.
1. Controller
The controller responsible for processing your personal data is:
- Hyde Media
- Swiss company ID (UID): CHE-357.381.787
- Marktgasse 8, 4051 Basel, Switzerland
- Email: theodor.staal@hydemedia.ch
- Phone: +41 77 233 81 21
If you have questions about this policy or want to exercise your rights, contact us using the details above.
2. Applicable law
We process personal data in accordance with the revised Swiss Federal Act on Data Protection (revDSG) and its ordinance (DSV).
Where the EU General Data Protection Regulation (GDPR) applies to a processing activity, for example because you are in the EU or EEA, we also state the legal basis under Article 6(1) GDPR.
3. What we process and why
When you visit the website. When a page is served, our hosting provider processes technically necessary data such as IP address, browser type, time and the page you visit. The purpose is to deliver the website and protect it against misuse and attacks. This includes briefly using the IP address to limit automated mass submissions to our forms.
- GDPR: our legitimate interest in a secure and stable website, Article 6(1)(f).
- Retention: technical logs are kept briefly and deleted on a rolling basis.
Statistics without cookies. We use Vercel Web Analytics and Vercel Speed Insights to evaluate visitor numbers and page load times in aggregated form. These services set no cookies, store nothing on your device and do not let us identify you.
- GDPR: our legitimate interest in improving the website, Article 6(1)(f).
Google Analytics. Only if you consent to statistics cookies in the cookie banner do we use Google Analytics 4 to understand how the website is used. Until then, Google Analytics is not loaded. You can withdraw your consent at any time via “Cookie settings” at the bottom of every page. See our cookie policy for details.
- Provider: Google Ireland Limited (Ireland) and Google LLC (USA).
- GDPR: your consent, Article 6(1)(a). Withdrawal does not affect the lawfulness of processing before it.
Contact form and enquiries. If you write to us through the contact form, we process your name, email address, company, phone number, message and — if selected — the topic, and, depending on the form, details about the planned campaign or the property. The details are sent by email (SMTP) to Hyde Media, and you receive a confirmation at the email address you gave. The same applies accordingly if you contact us directly by email or phone. The purpose is to answer your enquiry and, where relevant, send you a quote.
- GDPR: steps prior to entering into a contract, Article 6(1)(b), and our legitimate interest in answering enquiries, Article 6(1)(f).
- Retention: as long as needed to handle your enquiry. Where documents form part of our business records or accounting vouchers, such as quotes, orders and invoices, we keep them for the statutory 10 years (Art. 958f of the Swiss Code of Obligations, OR).
Newsletter. If you sign up for our newsletter, we process your email address, where on the website you signed up, your language and your IP address at the time of signup. Your signup is sent to Hyde Media by email; we then add your address to our mailing list by hand and keep the signup as a record of your consent. You can unsubscribe at any time through the link in every newsletter or by writing to us.
- Legal basis: your consent; GDPR: Article 6(1)(a).
- Retention: until you unsubscribe.
Customers and business partners. If an enquiry leads to an order or a partnership, we process the contact details of the people involved and information about the agreement, invoicing and payment, to perform the agreement and meet our legal obligations.
- GDPR: performance of a contract, Article 6(1)(b), and legal obligation, Article 6(1)(c).
- Retention: for the term of the agreement; business records and accounting vouchers for 10 years (Art. 958f OR).
4. Fonts and technical components
The website’s fonts are served from our own server; no requests are sent to Google Fonts when you visit the website. The decoder for the 3D model on the home page is also loaded from our own server.
5. Recipients and processors
We never sell personal data. We use the following providers, who process data on our behalf:
- Vercel Inc. (USA) — website hosting and cookieless statistics (Vercel Web Analytics, Speed Insights). The website’s server functions, for example for the contact form and newsletter signup, run in Frankfurt (EU).
- Google Ireland Limited / Google LLC — Google Analytics, only with your consent.
Data may also be disclosed to advisers such as our fiduciary or lawyers where necessary, and to public authorities where we are legally required to.
6. Transfers abroad
Vercel and Google may process personal data in the United States. To the extent the provider is certified under the Swiss-U.S. Data Privacy Framework or the EU-U.S. Data Privacy Framework, the transfer relies on the finding of adequate data protection by the Swiss Federal Council or the European Commission respectively. Otherwise it relies on standard contractual clauses.
The server functions in Frankfurt are located in the EU, which provides adequate data protection under Swiss law.
7. Your rights
Under the revDSG you have, in particular, the right to:
- information on whether and which personal data we process about you
- correction of inaccurate personal data
- deletion of your personal data, unless a statutory retention obligation applies
- object to processing
- receive or have transferred the personal data you gave us
- withdraw consent with effect for the future
Where the GDPR applies, you additionally have the rights to restriction of processing and to data portability under the GDPR, and the right to lodge a complaint with the data protection authority of the country where you live.
Email theodor.staal@hydemedia.ch. We respond as quickly as possible, as a rule within 30 days. To protect your data, we may ask you to verify your identity. Statutory retention obligations may limit your rights.
9. Automated individual decisions and profiling
We do not make decisions about you based solely on automated processing, and we do not use profiling.
10. Data security
We protect your personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS) and restricted access to our systems.
11. Changes
We update this policy when our processing of personal data changes. The version published here, with the date at the top, is always the one in force.