Privacy policy

Last updated: 21 October 2026

1. Who we are

This privacy policy explains how NextGenStudio, Zermatt, Switzerland ("we", "us") processes personal data when you visit nextgenstudio.ch, send us a request or work with us.

For all questions about data protection, contact: info@nextgenstudio.ch · +41 78 322 48 12.

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

2. Visiting our website

When you visit our website, our hosting provider automatically records technical data in server log files: IP address, date and time of access, page visited, browser and operating system, and the referring website.

• Purpose: to deliver the website, keep it secure and detect misuse.
• Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
• Retention: log files are deleted automatically after a short period set by the hosting provider, unless they are needed to investigate a security incident.

3. Booking requests

When you use the "Book a Project" form, we process the details you enter: the selected service, preferred date and time, your name, e-mail address, phone number, company or property, and your message. No payment is taken online.

• Purpose: to review and answer your request, prepare a first call and send you a quote.
• Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR).
• Retention: up to 24 months after our last contact if no contract is concluded. Records required for accounting are kept for 10 years, as required by Swiss law.

4. Contact by e-mail, phone or messaging

If you contact us by e-mail, phone, WhatsApp or social media, we process the data you give us (for example name, contact details and the content of your message) to answer you. Legal basis and retention as in section 3. Messaging services and social networks process your data under their own privacy policies.

5. Clients and projects

If you become a client, we process your contact and billing details, project information and our correspondence to deliver the project, invoice it and keep the records required by law (Art. 6(1)(b) and (c) GDPR). Accounting records are kept for 10 years.

6. AI assistant on our website

Our website offers an AI assistant that answers questions about our services. It is an automated system, not a person. We process the content of your messages, the time of the conversation and technical data, and – if you provide them – your name and contact details so that we can follow up. Please do not enter sensitive data in the chat.

• How it works: the assistant runs on our website (hosted by Hostinger, data stored with Supabase on servers in the EU). To generate answers, your messages are sent to OpenAI through its API. According to OpenAI, data sent through its API is not used to train its models and is kept for a maximum of 30 days to detect abuse.
• Legal basis: our legitimate interest in answering questions quickly (Art. 6(1)(f) GDPR) and, where you make a request, steps before a contract (Art. 6(1)(b) GDPR).
• Retention: chat logs are deleted automatically after 12 months.

7. Fonts

This website uses fonts provided by Google (Google Ireland Limited, Ireland, and Google LLC, USA). When a page loads, your browser connects to Google's servers and your IP address is transmitted to Google.

• Purpose: consistent display of text.
• Legal basis: our legitimate interest in a uniform presentation of the website (Art. 6(1)(f) GDPR).
• More information: https://policies.google.com/privacy

8. Cookies and analytics

We do not use analytics, advertising or tracking cookies. Only technically necessary storage is used, for example to keep an authorised user signed in to the Studio login. Because no tracking takes place, we do not show a cookie banner.

9. Service providers

We work with the following providers, who process data on our behalf and only according to our instructions:

10. Transfers abroad

We process data mainly in Switzerland and the EU, which Switzerland recognises as providing adequate data protection. Where a provider is based in the USA or may access data from there, the transfer is protected by the Swiss–U.S. Data Privacy Framework (for certified companies) or by the European Commission's standard contractual clauses, which are recognised in Switzerland.

11. Photos, videos and 360° tours we produce

When we film or photograph for clients, people may be recognisable in the recordings. Our clients are responsible for informing guests, staff and visitors at their premises and for obtaining any consent needed; we support them with release forms. Recognisable persons who do not want to appear in a recording can tell us on site or write to info@nextgenstudio.ch, and we will remove or blur them where possible.

12. Services where we act for our clients

When we set up chatbots, newsletters or other digital tools for clients, the client is the controller of their guests' data. We act only as a processor on the client's instructions, under a data processing agreement. Questions about such data should be sent to the respective client.

13. Data security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access restrictions and two-factor authentication where available. No transmission over the internet is completely secure; we cannot guarantee absolute security.

14. Your rights

You have the right to:

• request information about the personal data we hold about you,
• have incorrect data corrected,
• have your data deleted or its processing restricted,
• object to processing based on our legitimate interests,
• receive your data in a common electronic format,
• withdraw any consent you have given, with effect for the future.

To exercise your rights, write to info@nextgenstudio.ch. We may ask for proof of identity. You may also lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch; in the EU, the authority in your country of residence.

15. Changes

We may update this privacy policy when our website or services change. The version published on this page applies.