Privacy policy

This policy explains what personal data we collect when you visit museartis.com or buy from us, why we collect it, and what rights you have. It follows the Swiss Federal Act on Data Protection (FADP, revised version in force since 1 September 2023) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Digiboo GmbH, Schiffliweg 9, CH-8700 Küsnacht ZH, Switzerland
Email: info@museartis.com

We have not appointed a data protection officer; the size and nature of our processing does not require one. For any question about your data, write to the address above.

2. What we collect

When you browse. Your IP address, browser and device type, referring page, and the pages you view. Our shop platform records this automatically in server logs and through cookies.

When you order. Your name, billing and delivery address, email address, telephone number if you give it, and the contents of your order. Payment card details are entered directly with our payment provider; we never see or store the full card number.

When you contact us or subscribe. Your email address and whatever you choose to write to us.

3. Why we process it, and on what basis

Purpose	Legal basis
Performing the contract — processing, printing, shipping and invoicing your order	Contract (Art. 6(1)(b) GDPR)
Answering your enquiries	Contract or legitimate interest
Fraud prevention and site security	Legitimate interest (Art. 6(1)(f) GDPR)
Keeping accounting records	Legal obligation (Art. 958f CO: ten years)
Newsletter, if you have subscribed	Consent (Art. 6(1)(a) GDPR), withdrawable at any time
Analytics and reach measurement	Consent, where required

4. Who we share it with

We pass on only what each recipient needs to do its job:

Shopify Inc. (Canada / Ireland) — operates our online shop and hosts this site.
Gelato ASA and its regional printing partners — receive your name, delivery address and order details in order to print and dispatch your prints.
Payment providers (Shopify Payments, and, where offered, PayPal, TWINT and credit card acquirers) — process your payment.
Shipping companies and customs authorities — receive the data needed to deliver your parcel and clear it through customs.
Our accountant and, where legally required, the tax authorities.

We do not sell your personal data, and we do not pass it to third parties for their own advertising.

5. Transfers abroad

Our providers may process data outside Switzerland and the EEA, including in countries whose data protection law is not equivalent to Swiss or European law. In those cases we rely on the European Commission's standard contractual clauses, recognised by the Swiss Federal Data Protection and Information Commissioner, together with any additional safeguards required in the individual case.

6. How long we keep it

Order and invoice data: ten years, as Swiss accounting law requires. Enquiries: as long as needed to deal with them, then up to two years. Newsletter data: until you unsubscribe. Server logs: a few months at most.

7. Cookies

Necessary cookies keep your cart and session working; they are set without consent because the shop cannot function without them. Any analytics or marketing cookies are set only if you agree, and you can change your mind at any time through the cookie settings on this site or by clearing cookies in your browser.

8. Your rights

You may ask us for a copy of the data we hold about you, have inaccurate data corrected, have data deleted, object to processing based on legitimate interest, restrict processing, and receive your data in a portable format. Where processing rests on consent, you may withdraw it at any time with effect for the future.

Write to info@museartis.com. We will answer within thirty days and may ask you to identify yourself first, so that we do not hand your data to someone else.

If you are unhappy with how we handle your data, you may complain to the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch) or, if you are in the EEA, to your national supervisory authority.

9. Security

We use TLS encryption for all traffic on this site, and we choose providers who maintain appropriate technical and organisational security measures. No system is perfect, and we cannot guarantee absolute security.