WhatsApp
FR · DE · EN · IT
📅 Check my date

Privacy Policy

Protection of personal data in accordance with the FADP and the GDPR

1. Data controller

The data controller within the meaning of the Federal Act on Data Protection (FADP; SR 235.1) and the General Data Protection Regulation (GDPR; EU 2016/679) is:

KUBI Photobooth

Chemin de Pierrefleur 86

1004 Lausanne, Switzerland

Email: hello@kubibooth.ch

Phone: +41 76 766 00 02

The data protection officer may be contacted at: hello@kubibooth.ch

2. Personal data collected

In the context of the use of the website kubibooth.ch and our services, we collect the following categories of personal data:

2.1 Data provided directly by the user

  • Reservation form: surname, first name, email address, phone number, event date, city/venue, event type, additional message;
  • Contact form: surname, first name, email address, phone number, subject, and content of the message;
  • Contractual data: postal address, billing information, order history.

2.2 Data collected automatically

  • Browsing data: IP address, browser type and version, operating system, pages visited, visit duration, referring URL;
  • Cookies and similar technologies: see section 8 below.

2.3 Event-related data

  • Photos: images taken during the use of the photo booth;
  • Online gallery: photos temporarily hosted for participant access.

3. Purposes of processing

Your personal data is processed for the following purposes:

  • Performance of the contract (Art. 6(1)(b) GDPR / Art. 31(1) FADP): processing of reservations, customer relationship management, billing, provision of the service;
  • Legitimate interest (Art. 6(1)(f) GDPR / Art. 31(1) FADP): improvement of our services, statistical analysis of the website, fraud prevention, commercial prospecting;
  • Consent (Art. 6(1)(a) GDPR / Art. 31(1) FADP): sending of newsletters and marketing communications, use of non-essential cookies;
  • Legal obligation (Art. 6(1)(c) GDPR): compliance with Swiss accounting and tax obligations.

4. Data retention period

Personal data is retained for the following periods:

  • Reservation and contractual data: 10 years after the end of the contractual relationship (in accordance with the retention obligations under Art. 958f CO);
  • Contact data (enquiries): 2 years after the last exchange;
  • Photos and online gallery: 30 days after the event, unless the Client requests an extension;
  • Browsing data and cookies: 13 months maximum;
  • Marketing data (newsletter): until withdrawal of consent.

Upon expiry of these periods, data is deleted or irreversibly anonymised.

5. Recipients and processors

Your personal data may be disclosed to the following categories of recipients, in strict compliance with the principle of data minimisation:

  • Website host: OVH SAS, France — website data hosting;
  • Payment service: Stripe Payments Europe Ltd. (Ireland) - for online payments — secure transaction processing;
  • Gallery hosting: Self-hosted on OVH SAS server (no external cloud provider) — temporary storage of photos;
  • Analytics tool: Google Analytics 4 — anonymised statistical analysis;
  • Email service: Hostinger International Ltd. (Cyprus) — sending of confirmations and communications.

Each processor is bound by a data processing agreement in compliance with Art. 9 FADP and Art. 28 GDPR, ensuring an adequate level of data protection.

6. International data transfers

Some of our processors may be located outside Switzerland and/or the European Economic Area (EEA).

In such cases, transfers are carried out in accordance with Art. 16 et seq. FADP and Art. 44 et seq. GDPR, on the basis of:

  • an adequacy decision by the Federal Council (Annex 1 DPO) or the European Commission;
  • standard contractual clauses (SCCs) approved by the European Commission;
  • or other appropriate safeguards within the meaning of Art. 16(2) FADP.

7. Rights of data subjects

In accordance with the FADP (Art. 25 et seq.) and the GDPR (Art. 15 to 22), you have the following rights:

  • Right of access: to obtain confirmation that your data is being processed and to receive a copy thereof (Art. 25 FADP / Art. 15 GDPR);
  • Right to rectification: to request the correction of inaccurate or incomplete data (Art. 32(1) FADP / Art. 16 GDPR);
  • Right to erasure: to request the deletion of your data, subject to legal retention obligations (Art. 17 GDPR);
  • Right to restriction: to request the restriction of processing in certain circumstances (Art. 18 GDPR);
  • Right to data portability: to receive your data in a structured, commonly used, and machine-readable format (Art. 28 FADP / Art. 20 GDPR);
  • Right to object: to object to the processing of your data for direct marketing purposes (Art. 21 GDPR);
  • Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.

To exercise your rights, please send your request accompanied by a copy of your identity document to: hello@kubibooth.ch

We undertake to respond to your request within 30 days in accordance with Art. 25(6) FADP (or without undue delay and in any event within one month in accordance with Art. 12(3) GDPR).

8. Cookies and similar technologies

8.1 What is a cookie?

A cookie is a small text file placed on your device (computer, tablet, smartphone) when visiting a website. It enables the website to store information about your visit.

8.2 Types of cookies used

  • Strictly necessary cookies: essential for the operation of the website (session, language preferences). These cookies do not require your consent;
  • Analytical cookies: used to measure website traffic and analyse browsing behaviour. Activated only with your consent;
  • Marketing cookies: used to provide you with relevant advertisements. Activated only with your consent.

8.3 Cookie management

You may manage your cookie preferences at any time through your browser settings or via our cookie management banner. Disabling certain cookies may limit access to certain features of the website.

9. Data security

KUBI Photobooth implements appropriate technical and organisational measures to protect your personal data against any unauthorised or unlawful processing, against loss, destruction, or accidental damage, in accordance with Art. 8 FADP and Art. 32 GDPR.

These measures include, in particular:

  • encryption of data in transit (SSL/TLS);
  • restricted access to personal data to authorised persons only;
  • regular data backups;
  • logging of access to systems containing personal data.

10. Right of recourse

If you believe that the processing of your personal data does not comply with applicable legislation, you have the right to lodge a complaint with:

In Switzerland:

Federal Data Protection and Information Commissioner (FDPIC)

Feldeggweg 1, 3003 Berne

www.edoeb.admin.ch

In the EU/EEA:

The competent supervisory authority in your country of residence

(list available on the website of the European Data Protection Board: edpb.europa.eu)

11. Amendments to this policy

KUBI Photobooth reserves the right to amend this Privacy Policy at any time. Any material change shall be communicated by means of a notice visible on the website or by email.

The version in force is that accessible on the website kubibooth.ch. The date of last update is indicated below.

12. Contact

For any questions regarding this Privacy Policy or the exercise of your rights, you may contact us:

KUBI Photobooth — Data Protection

Email: hello@kubibooth.ch

Address: Chemin de Pierrefleur 86, 1004 Lausanne, Switzerland

Last updated: March 2026