Privacy Policy

Ribbsaeter Advertising (“we”, “us”, “our”) is the data controller responsible for the personal data we process about you when you use our website, contact us, or engage us for luxury campaign services.

For privacy-related questions or to exercise your rights, contact studio@ribbsaeteradvertising.com.

We collect only the data we genuinely need to deliver our services:

• Contact data — name, email, company, phone, and project description provided through brief forms or email.
• Engagement data — billing details, contracts, communications, campaign briefs, assets, and meeting recordings (only with consent).
• Technical data — IP address, browser, device type, and pages visited, collected through basic analytics.
• Cookies — limited to what is required for the site to work and basic analytics. See our Cookie Policy.

We do not sell, rent, or trade personal data. Ever.

We process personal data to:

• respond to project inquiries and prepare campaign proposals;
• negotiate, perform, and account for contracts and statements of work with you;
• deliver, support, and maintain our campaign services;
• send operational notifications and (with consent) occasional marketing updates;
• understand site usage to improve our presentation;
• comply with legal, tax, and regulatory obligations;
• detect, prevent, and respond to fraud or security abuse.

• Contract — to take steps at your request before entering a contract and to perform a contract with you.
• Legitimate interests — to run, secure, and improve our campaign studio, including responding to inquiries.
• Consent — for non-essential cookies or recording of campaign brief meetings. You may withdraw consent at any time.
• Legal obligation — for accounting, tax, and corporate registry compliance.

Your data stays within our studio and a small set of carefully chosen processors who help us operate:

• cloud, DNS, and hosting providers (e.g. Vercel, Netlify, Cloudflare);
• email and collaboration tools (e.g. Google Workspace);
• analytics providers;
• billing, accounting, and tax advisors in Switzerland;
• legal counsel where strictly necessary.

Each processor is bound by a data processing agreement and processes data only on our documented instructions.

We host our data primarily in Switzerland and the EU/EEA. Where we use processors based outside this region, we ensure adequate protection through Standard Contractual Clauses (SCCs) and appropriate technical safeguards.

• Inquiries that do not lead to contracts: up to 24 months, then deleted.
• Active client records: for the duration of the engagement.
• Closed engagements: 10 years after closure to comply with Swiss statutory bookkeeping requirements.
• Marketing consent: until you unsubscribe.
• Server logs: typically up to 30 days.

Under the GDPR and Swiss DSG, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase data (right to be forgotten) where applicable;
• restrict or object to processing;
• data portability;
• withdraw consent at any time without affecting prior processing;
• lodge a complaint with the supervisory authority (in Switzerland: Federal Data Protection and Information Commissioner · FDPIC).

To exercise any of these rights, email studio@ribbsaeteradvertising.com and we will respond within 30 days.

We protect personal data with industry-standard technical and organisational measures: TLS in transit, encryption at rest where applicable, least-privilege access, MFA on all critical systems, regular backups, and vulnerability monitoring. No system is perfectly secure, but we treat your data with the utmost confidentiality.

We may update this policy when our practices, the law, or our processors change. The “Last updated” date at the top reflects the current version. Material changes will be communicated in advance where required.