Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

2. General information on data processing

Personal data is processed on this website only to the extent necessary to provide the website, ensure secure technical operation, or handle contact enquiries. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection provisions.

No external font services are called to display this website. The fonts used are rendered exclusively via locally available system fonts on the respective device; therefore, no personal data is transmitted to external font providers.

3. Hosting by ALL-INKL.COM

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When the website is accessed, the hosting provider processes technically necessary connection and access data. This may include, in particular, the IP address, date and time of access, the page or file accessed, the amount of data transferred, the referrer URL, and information about the browser and operating system.

Processing takes place to provide the website and to ensure the stability, functionality, and security of the technical systems. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable operation of this website. Where the hosting provider processes personal data on our behalf, this is based on a data processing agreement pursuant to Art. 28 GDPR.

4. Contact form and contact by email

When you contact us via the contact form, the information entered there is processed. This includes, in particular, your name, email address, any selected reason for the enquiry, and the content of your message. The contact form can only be submitted after confirmation of the privacy notice.

The information is used to process and respond to the enquiry. After successful submission, an automatic confirmation of receipt is sent to the email address provided.

If the contact is aimed at entering into or performing a contract, in particular where there is interest in an artwork, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on the consent given pursuant to Art. 6(1)(a) GDPR and, where applicable, on the legitimate interest in handling incoming enquiries pursuant to Art. 6(1)(f) GDPR.

The data is deleted as soon as it is no longer required to process the enquiry and there are no statutory retention obligations or other legal reasons requiring further storage. Consent that has been given may be withdrawn at any time with effect for the future.

5. External links

This website contains links to external websites, in particular Swiss Art Expo and ARTBOXY. Merely visiting this website does not transmit data to the respective providers through these links. Only when an external link is clicked is the third-party provider's website opened. The respective provider is responsible for the processing of personal data there.

6. Cookies, analytics and tracking services

According to the current technical configuration of this website, no analytics or tracking services such as Google Analytics are used. No first-party cookies are set for advertising, analytics, or tracking purposes.

7. Recipients of personal data

Personal data is disclosed to recipients only where this is necessary to provide and operate the website, process an enquiry, comply with legal obligations, or where another legal permission applies. This may include, in particular, the hosting and email service provider used.

8. Rights of data subjects

Subject to the statutory requirements, data subjects have, in particular, the following rights:

• right of access pursuant to Art. 15 GDPR,
• right to rectification pursuant to Art. 16 GDPR,
• right to erasure pursuant to Art. 17 GDPR,
• right to restriction of processing pursuant to Art. 18 GDPR,
• right to data portability pursuant to Art. 20 GDPR,
• right to object pursuant to Art. 21 GDPR.

Where processing is based on consent, that consent may be withdrawn at any time with effect for the future pursuant to Art. 7(3) GDPR.

9. Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data infringes the GDPR.

10. Data security

Appropriate technical and organisational measures are used to protect personal data against loss, manipulation, and unauthorised access. The security measures are reviewed and adapted in line with technical developments.

11. Currency and amendments to this Privacy Policy

This Privacy Policy reflects the current status of the website. Changes to the website, the services used, or legal requirements may make it necessary to amend this Privacy Policy.

Last updated: August 2026