Skip to content

    Privacy Policy

    Version 2026.3 - Last updated: October 6, 2026.

    1. Data controller

    Tekio Studio, sole proprietorship of Dylan Kaeppeli, Rue du Borgeaud 3b, 1196 Gland (Switzerland), info@tekiostudio.com.

    For any question relating to your data: info@tekiostudio.com.

    2. Roles: controller or processor

    • The tekiostudio.com site and the client relationship: Tekio is the controller.
    • Services provided on behalf of a Client (Fittio, CRM, forms of a client Site): Tekio acts as processor, the Client being the controller. These processing activities are governed by a data processing agreement (DPA, appendix to the GTC).

    3. Data we process

    • Contact and project data: name, company, email, phone, content of requests.
    • Contractual and billing data: orders, quotes, invoices, means of payment (processed by Stripe; we do not store card numbers).
    • Browsing data: IP address, device type, pages viewed, via audience measurement tools (see cookies).
    • Data provided in connection with a service: depending on the service, data of your own clients or Members (processed as a processor).

    4. Purposes and legal bases

    • Responding to requests and providing the Services (performance of the contract).
    • Billing and legal obligations (legal and accounting basis, retention for 10 years).
    • Improvement and security of the site (legitimate interest).
    • Audience measurement and communication (consent, via the cookie banner).

    5. Prospecting data

    To present our services to businesses, we process data that we did not obtain from you. This section informs you about it (art. 14 GDPR and art. 19 FADP).

    • Sources: public commercial registers (Zefix and cantonal registers), the French administration's "Recherche d'entreprises" directory, BODACC, ADEME's RGE open data, Google Maps listings, and websites published by the businesses.
    • Data: business contact details of the company and its executives (name, title, address, phone, email), then the history of our exchanges (date, duration, and outcome of calls, notes from our advisors, appointments).
    • Calls: our calls may be recorded, to train our advisors.
    • Purpose: business-to-business sales prospecting, by phone or by email.
    • Legal basis: our legitimate interest in making our services known to businesses (art. 6 para. 1 let. f GDPR). In Switzerland, an overriding private interest (art. 31 para. 1 FADP).
    • Retention: we automatically delete from our CRM the data of a prospect who did not become a client, 3 years after the last contact (last call, email, appointment, or logged exchange), or 3 years after they were added if there was never any contact; this check runs every night. So that we do not contact you again or re-import your details, a minimal record remains in an anti-duplicate list, with no time limit, for every deleted entry: your email address, the last 9 digits of your phone number, the company's identifiers (SIREN, UID, Google listing), its name and locality, its status, including any objection you have made, and the dates on which we recorded it.
    • Objection: you may object to this prospecting at any time, without giving a reason (art. 21 para. 2 GDPR). Write to info@tekiostudio.com or tell our advisor during the call. We then stop all contact. If you object to the prospecting and are not a client, we remove your personal data from your record by the following night at the latest and keep only the note of your objection and its date, in addition to this minimal record.

    You also have the rights described in section 9 (access, rectification, erasure). To exercise them, write to info@tekiostudio.com.

    6. Sub-processors and recipients

    We use providers who process data on our behalf, with appropriate safeguards:

    • Cloudflare - site hosting (Cloudflare Pages), delivery, security, and DNS.
    • Supabase - database, authentication, and storage of the services (CRM, Fittio), within the EU (Frankfurt).
    • Stripe - payments.
    • Resend - email sending.
    • Ringover - telephony and call recording.
    • Infomaniak - domain names (Switzerland).
    • Google - audience measurement (Analytics 4) and advertising conversion measurement (Google Ads); Microsoft - usage analysis (Clarity, which calls on Bing). These tools are only activated with your consent.
    • Depending on the services activated: Airtable (management), AssemblyAI (voice transcription).

    We do not sell your data. It may be disclosed to an authority if required by law.

    7. International transfers

    Some providers are located in the United States: Stripe, Resend, Google, Microsoft and Cloudflare. For people in Switzerland, an adequate level of protection is recognized for companies certified under the Swiss-U.S. Data Privacy Framework (Annex 1 of the Data Protection Ordinance); for people in the European Union, adequacy decision (EU) 2023/1795 covers companies certified under the EU-U.S. Data Privacy Framework. For a provider that is not certified, the transfer relies on the European Commission's standard contractual clauses, recognized by the FDPIC. Data of Tekio's services (CRM, Fittio) is stored in the European Union (Supabase, Frankfurt, Germany). You can obtain a copy of these safeguards by writing to info@tekiostudio.com.

    8. Retention period

    • Billing data: 10 years (legal obligation).
    • Project and contact data: duration of the relationship then limited archiving.
    • Data processed on behalf of a Client: according to the contract, then deletion or return; in the event a service is stopped for non-payment, retention for 90 days then deletion (see GTC art. 8.5).

    9. Your rights

    In accordance with the FADP and the GDPR, you may request access, rectification, erasure, restriction, objection, and portability of your data, and withdraw your consent at any time. Write to info@tekiostudio.com.

    You may lodge a complaint with the competent authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); if you live in the European Union, the data protection authority of your country (in France, the CNIL, www.cnil.fr).

    10. Cookies

    The site uses technical (necessary) cookies and, subject to your consent, audience measurement and communication cookies. You manage your preferences via the banner and the "Cookies" link in the footer.

    • Necessary, without consent: your cookie choice (12 months), your light or dark theme and your language, kept in your browser's local storage.
    • Audience measurement, with your consent: Google Analytics, _ga and _ga_* cookies (13 months); Microsoft Clarity, _clck (1 year) and _clsk (1 day) cookies. Clarity records clicks, scrolling and mouse movements to show us what helps or gets in the way on a page; input fields are masked.
    • Advertising, with your consent: Google Ads, _gcl_au cookie (90 days), to measure whether our ads lead to a contact request. No ads are shown on this site.
    • The events sent to these tools only say that a form was sent or that a phone, email or WhatsApp link was clicked, never what you typed.

    11. Security

    We implement appropriate technical and organizational measures (encryption in transit, isolation of data by client, access control, logging). In the event of a breach presenting a risk, we inform the persons and authorities concerned as required by law.

    12. Changes

    This policy may change. The version in force is the one published on the site, with its update date.