Privacy Policy
1. Who is responsible
House of Beats, Andreas Kyburz, Kreuzlingerstrasse 55, 8570 Weinfelden, Switzerland ("the school") is responsible for the data processing described here. Processing follows the Swiss Federal Act on Data Protection (FADP). For any privacy request, write to info@house-of-beats.academy.
2. What data we process
Account and contact data: names, e-mail,
phone, address of the account holder; for each student
their name, birthdate (used to determine student type and
pricing) and the link to the paying parent or guardian.
Contract and payment data: orders,
enrollments, lesson credits, invoices and payment status.
Card and payment details are handled by the payment
provider; the school never sees full card numbers.
Lesson data: bookings, attendance,
progress through the curriculum, and materials exchanged
for lessons.
Student works: tracks a student uploads
to their studio, their chosen artist name, and the
publication status of each track.
Technical data: server logs (IP address,
time, requested page) kept briefly for security and
troubleshooting, and the cookies described in section 6.
3. Why we process it
To deliver what you booked (contract performance): running lessons, tracking credits, invoicing. To meet legal duties: Swiss law requires business records to be kept for ten years. To run the school safely (legitimate interest): security logs, defending claims. And, only ever with consent: publishing a student's music and artist profile on the public website.
4. Children's data
Most of our students are minors, so restraint is built into the website rather than promised in fine print. Public pages never show a minor's legal name: students appear only under a self-chosen artist name, and only after their profile is set public, which for minors requires parental consent. Publishing a track requires the same consent and can be revoked at any time, upon which the track is removed. We collect no more data about a child than the lessons need, and we never use children's data for advertising.
5. Who else sees data
No data is sold or shared for advertising. Data reaches third parties only where the provision of our services requires it: the hosting provider (runs the website and database), the payment provider (processes payments), the video-call service (carries online lessons), and e-mail delivery. These providers process data on our behalf. Where a provider processes data outside Switzerland or the EEA, we rely on the safeguards provided for by the FADP (such as recognised standard contractual clauses).
6. Cookies
This website uses only cookies that are technically necessary: keeping you signed in to the portal and your cart working. There are no advertising or cross-site tracking cookies. Because of that, there is no cookie banner to click away.
7. How long we keep data
Personal data is kept only as long as its purpose requires, and beyond that only where a statutory retention duty applies: contract and accounting records for ten years; account data for the life of the account; published tracks until consent is revoked or the account closes; server logs a few weeks. Data no longer needed is deleted or anonymised.
8. Security
Connections to this website are encrypted (TLS). Access to personal data is limited to the people who need it to run the school, and passwords are stored only in hashed form.
9. Your rights
You may request access to the data we hold about you, have inaccurate data corrected, ask for deletion where no legal duty requires keeping it, and revoke any consent, in particular publishing consent, at any time with effect for the future. Parents exercise these rights for their minor children. Contact us as described in section 1; you may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).
10. Changes
If the website gains new tools or processors, this policy will be updated first. The version published here applies.