Privacy Policy
Last Updated: November 9, 2025
Introduction
Vanyal Agency (the "Company") respects your privacy and is committed to protecting personal data in accordance with Swiss law (the Federal Act on Data Protection, FADP) and, as best practice, the EU General Data Protection Regulation (GDPR). This policy explains what data we collect on our website (hosted on Infomaniak servers in Switzerland) and how we use, store, and protect it. By using our site and services, you agree to the collection and use of information as described here.
Information We Collect and How We Use It
We collect only the data necessary to provide our services, communicate with you, and improve our website. Types of personal data we collect include:
- Contact and profile information: e.g. name, email address, phone number when you fill in our contact form or sign up for an appointment/newsletter.
- Transactional and communications data: e.g. content of your messages, request details, and correspondence when you contact us or schedule via Calendly.
- Technical and usage data: e.g. IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics tools.
We use this data for clear purposes: providing and improving our services (such as answering inquiries and managing appointments), communicating with you (via email or newsletter), and analyzing site usage to enhance the user experience. For example, we use Google Analytics to understand visitor activity on our site. All processing is done under a valid legal basis (such as consent, contract performance, or legitimate interest) as required by Swiss and EU law.
Third-Party Tools and Integrations
To serve you better, we use several third-party services. Each of these processes data on our behalf as a "processor" under contract. Key tools include:
Google Analytics (Web Analytics)
We use Google Analytics to track and analyze anonymous site usage data (e.g. pages viewed, time spent) via cookies. Google Analytics does not collect your name or contact information, and we have enabled IP anonymization so that full IP addresses are never stored. This helps us improve our website and marketing without identifying individual visitors.
MailerLite (Email Newsletter)
When you sign up for our newsletter, MailerLite collects your email and any preferences you provide. MailerLite is GDPR-compliant and hosts data in secure EU data centers (with ISO 27001 certification). We use MailerLite to send periodic newsletters or updates. You can unsubscribe or update your mailing preferences at any time, and MailerLite provides tools to exercise your data rights.
Calendly (Appointment Scheduling)
If you book a meeting or consultation, Calendly collects your name, email, and any information you enter in the scheduling form. Calendly is GDPR compliant and operates under a Data Processing Addendum, ensuring your data is handled securely. Only our staff and you have access to that scheduling information, and it is used solely to coordinate appointments.
Google Workspace (Email and Documents)
We use Google Workspace for business email, calendars, and document storage. Google Workspace provides encrypted, secure data storage and communication. All emails and documents are stored in Google's infrastructure with strong encryption in transit and at rest. Google acts as our processor under strict data processing terms (including Standard Contractual Clauses), and it adheres to EU and Swiss data protection standards.
Additionally, basic site functions like our contact form submit your name and message to our secured inbox, and technical services (like server logs) record your IP, browser, and time of visit for security and troubleshooting. No sensitive personal data is collected without your consent.
Cookies and Tracking Technologies
Our site uses cookies and similar technologies to operate properly and to understand how you use the site. A cookie is a small data file stored by your browser. We use several types of cookies:
Necessary cookies
These are essential for basic site functions (e.g. keeping you logged in or remembering your cookie preferences). They are session-only or short-lived cookies that expire when you close your browser.
Analytical cookies
These cookies (e.g. Google Analytics cookies) collect anonymous statistics about site usage. They help us understand how visitors interact with our site so we can improve it. We only enable these cookies if you consent via our cookie banner. Notably, Google Analytics does not capture personal user data, and your IP is anonymized.
Marketing/Newsletter cookies
Our newsletter service (MailerLite) may use invisible tracking pixels in emails to record opens and link clicks, so we know which content interests you. This helps us tailor communications to your preferences. You may opt out of newsletter tracking by unsubscribing or disabling images in emails.
You can control cookies via our cookie banner (on first visit) or by adjusting your browser settings. Most browsers allow you to decline or delete cookies; however, blocking cookies may affect site functionality.
Data Hosting and Security
We take security seriously. Our website is hosted by Infomaniak, a Swiss hosting provider. Infomaniak's servers and data centers are located exclusively in Switzerland, and they have committed to never transferring your data outside Switzerland. All data stored on our website (including user submissions) resides on these secure Swiss servers.
We use SSL/TLS encryption (HTTPS) on our website to protect data in transit. Any data you submit through the site (e.g. in a form) is encrypted during transfer and cannot be read by third parties. Our staff follows strict confidentiality policies: access to your personal data is limited to authorized personnel under NDA, and our systems have industry-standard technical and organizational safeguards (firewalls, encrypted storage, access controls) to prevent unauthorized access. While no system is 100% immune, we regularly update and audit our security to keep your data safe.
International Data Transfers
Some of our service providers are based outside Switzerland. For example, Google Analytics and Google Workspace involve data transfers to Google servers worldwide (including the US). Google is certified under the EU–US and Swiss–US Data Privacy Frameworks, and uses approved safeguards like Standard Contractual Clauses for personal data transfers. This means Google commits to protecting EU and Swiss personal data to high standards even when data is processed outside Europe. Similarly, other providers (MailerLite, Calendly) comply with GDPR-level protections or have suitable agreements in place. In all cases, we choose partners that ensure your data enjoys equivalent legal protections under Swiss law and GDPR.
Your Rights
You have rights regarding your personal data under Swiss law and the GDPR (for EU data). These include:
- Access: You may request confirmation of whether we hold your personal data and obtain a copy.
- Correction: You can ask us to correct any inaccurate or incomplete data we have about you.
- Deletion: You can request that we erase your personal data when we no longer need it (unless we have a legal reason to keep it).
- Restriction/Object: You may ask us to restrict processing or object to processing of your data (for example, for direct marketing) at any time.
- Portability: Where applicable, you have the right to receive your data in a portable format and transmit it to another provider.
- Consent Withdrawal: If our processing is based on your consent (e.g. newsletter signup), you can withdraw consent at any time by unsubscribing or notifying us; this will not affect data collected while your consent was valid.
- Complaint: If you have concerns about our data handling, you can contact us (below) or lodge a complaint with the Swiss Federal Data Protection and Information Commissioner or your local data protection authority.
We will respond to rights requests in accordance with Swiss law timelines. To exercise any right, please contact us using the details below.
Contact Information
If you have any questions about this privacy policy or wish to exercise your data rights, please contact:
- Data Protection Officer: Vanyal Agency LLC (Wyoming, USA)
- Email: support@vanyalagency.ch
We strive to answer inquiries promptly and no later than required by law.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or the law. When we make material changes, we will revise the "Last Updated" date and notify users via our website. We encourage you to review this page periodically to stay informed about how we protect your data.