Privacy Policy

This Privacy Policy applies to the website studiorivo.com ("Website") and to all personal data processed in connection with the StudioRivo brand's services. Data Controller: Rapid Dreams, Riedstrasse 7, 6330 Cham, Zug, Switzerland Legal name: Rapid Dreams Registered address: Riedstrasse 7, 6330 Cham, Zug, Switzerland For any data protection queries, please contact us via the contact email shown in the site footer.

We collect the following personal data through the Website's contact/preview-request form: - First and last name; - Business / company name; - Current website (if any); - Phone number / WhatsApp; - E-mail address. We also collect browsing data through Google Analytics 4 (see section 8 — Cookies), including device and browser information, anonymised IP address, pages visited and session duration.

Form data is processed for the following purposes: a) Responding to the preview request and preparing a tailored proposal; b) Follow-up commercial contact to progress the proposal; c) Contract management, should the Client proceed with the services. Browsing data (Google Analytics 4) is processed for statistical purposes and Website improvement (visit counting, aggregated and anonymous behaviour analysis).

The data controller is based in Switzerland, so the primary legal framework is the Swiss Federal Act on Data Protection (nFADP / revDSG, in force since September 2023). The GDPR (Regulation (EU) 2016/679) applies additionally where data subjects are located in the EU (e.g. clients in Portugal). Processing is based on the following grounds: - Consent (Art. 6(1)(a) GDPR / Art. 31 nFADP): for analytics cookies (Google Analytics 4) — always collected via a consent banner before any data collection occurs; - Pre-contractual steps (Art. 6(1)(b) GDPR): for form data processed during the proposal phase; - Legitimate interests (Art. 6(1)(f) GDPR / Art. 31 nFADP): for legitimate follow-up commercial communications related to the request submitted by the data subject.

Form data is retained for as long as necessary to manage the commercial relationship, and for a minimum of 1 (one) year from the last contact, unless a longer retention period is required by law. Browsing data processed via Google Analytics 4 is retained in accordance with Google's policies (14 months by default). After the applicable retention period, data is deleted or irreversibly anonymised.

We rely on the following sub-processors and recipients, with whom appropriate legal instruments are in place: - Vercel, Inc. — Website and database hosting (EU/US servers with adequate safeguards via SCCs); - Google LLC — Google Analytics 4 for traffic analysis (subject to prior consent); - [OTHER SUB-PROCESSORS, IF APPLICABLE]. We do not sell or share personal data with third parties for marketing purposes.

Rapid Dreams is based in Switzerland. Switzerland benefits from an adequacy decision by the European Commission, meaning that data transfers between Switzerland and the EU are permitted without additional safeguards. Some of our sub-processors (notably Vercel and Google) are headquartered in the United States of America. Data transfers to these countries are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognised mechanisms under both the nFADP and the GDPR, ensuring a level of protection equivalent to that required.

The Website uses cookies. When you visit the Website, a consent banner will appear allowing you to accept or decline the use of analytics cookies. Types of cookies used: - Strictly necessary cookies: essential for the Website to function (no personal data collected for tracking purposes); - Analytics cookies (Google Analytics 4): used only after your express consent, for anonymous statistical purposes. You can change your cookie preferences at any time by clearing your browser data or contacting us.

Under the Swiss nFADP and, where applicable, the GDPR, you have the following rights: - Right of access: to know what data we hold about you; - Right to rectification: to correct inaccurate or incomplete data; - Right to erasure: to request deletion of your data, where legally permissible; - Right to object: to object to processing based on legitimate interests; - Right to restriction: to request suspension of processing in certain circumstances; - Right to data portability: to receive your data in a structured, machine-readable format. To exercise any of these rights, contact us via the contact email shown in the site footer. We will respond within 30 days. You also have the right to lodge a complaint with the competent supervisory authority: - FDPIC (Federal Data Protection and Information Commissioner, Switzerland) — www.edoeb.admin.ch; - Where the GDPR applies, your local EU supervisory authority (e.g. CNPD in Portugal — www.cnpd.pt).

This Policy may be updated periodically. The date of the last revision is shown at the top of this document. Material changes will be prominently communicated on the Website.