Privacy policy

1. Data controller

ARTBOX.GROUPS GmbH
Schmidgasse 4
6300 Zug
Switzerland

Email: office@swissartexpo.com
Phone: +41 41 539 19 22

For questions about data protection or to exercise your rights, you can contact the address above at any time.

2. Principles

We process personal data in good faith, lawfully and proportionately. We collect only the data required for the respective purposes and keep it only as long as necessary for those purposes or by legal obligation.

3. What data we process and for what purpose

3.1 Visiting the website (server log files)

When you visit our website, our hosting provider automatically records technical data transmitted by your browser (in particular IP address, date and time of access, page requested, browser type and operating system). This data serves the secure and stable operation of the website and the prevention of abuse. We do not combine this data with other sources to identify individual persons.

3.2 Contact form and email contact

If you contact us via the contact form or by email, we process the data you provide (e.g. name, email address, message) in order to answer your enquiry. This data is processed through our email service (Microsoft 365).

3.3 Exhibitor registration and exhibitor area

In connection with applying as an exhibitor and using the exhibitor area, we process the data you provide (e.g. name, contact details, address, submitted works and their images, booking details). This data serves to carry out the application and participation process.

3.4 Events and tickets

For registration to events (e.g. artists' apéro, ART PARTY, Meet the Artist) and the issuing of tickets we process the necessary details, where applicable also about registered accompanying persons.

3.5 Payments

Payments are handled by the payment service provider Stripe. You enter the payment data (e.g. card details) directly with Stripe; we do not store complete payment means data ourselves. Stripe's privacy policy applies in addition.

3.6 Newsletter

If you subscribe to our newsletter, we process your email address in order to send you information about SWISSARTEXPO. Dispatch takes place via Mailchimp. You can unsubscribe at any time using the link in every newsletter email or by informing us; we will then delete your address from the distribution list.

4. Embedded third-party services

On individual pages we embed third-party content. In doing so, data (e.g. your IP address) may be transmitted to the respective providers, in some cases abroad:

• Google Maps (Google Ireland Ltd. / Google LLC) — map display on the home page
• Matterport — virtual 360° tours on the “Virtual Tour” page
• Instagram / Meta (Meta Platforms Ireland Ltd.) — linking and display of social media content

The privacy policies of the respective providers apply in addition to these services.

5. Cookies and consent

Our website uses technically necessary cookies which are required for operation and in particular for logged-in areas (session management) and which do not require consent.

For elements that are not strictly necessary — in particular the embedded third-party services named in section 4 — we use a cookie banner and obtain your consent before the corresponding content is loaded. You can adjust or withdraw your consent at any time with effect for the future, and manage and delete cookies in your browser.

We currently do not use any third-party analytics or tracking tools.

6. Processors and service providers

To provide our services we use carefully selected service providers who process data on our behalf:

• Vercel — hosting/operation of the website
• Supabase — database, authentication and file storage
• Stripe — payment processing
• Microsoft (Microsoft 365) — email communication
• Mailchimp — newsletter dispatch

7. Disclosure of data abroad

Some of the service providers named have their seat or server locations abroad, including in the USA. Where data is transferred to countries without an equivalent level of data protection, we ensure appropriate protection through suitable safeguards (e.g. standard contractual clauses).

8. Retention period

We keep personal data only as long as necessary for the respective purposes or as required by statutory retention periods. The data is then deleted or anonymised.

9. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. However, transmission over the internet can never be completely secure.

10. Your rights

Within the framework of the applicable laws you have the right to:

• information about the data processed about you
• rectification of incorrect data
• erasure of your data
• restriction of processing and objection to processing
• data portability (where applicable)
• withdrawal of a consent given, with effect for the future

To exercise these rights, a message to the contact address given in section 1 is sufficient. You also have the right to complain to the competent supervisory authority — in Switzerland to the Federal Data Protection and Information Commissioner (FDPIC), within the scope of the GDPR to the respective competent data protection authority.

11. Amendments

We may amend this privacy policy at any time. The version published on this website at the relevant time applies.