Privacy Policy (Switzerland – nFADP / FADP)

PRIVACY POLICY
Last updated: 13 January 2026

1. CONTROLLER (RESPONSIBLE ENTITY)
The controller responsible for data processing on this website is:

Martin Schgaguler
Kanonengasse 30
4051 Basel
Switzerland
UID/VAT: CHE-368.667.756
Email: [your email address]

This privacy notice is provided in accordance with the Swiss Federal Act on Data Protection (FADP / nFADP), including the duty to inform under Art. 19 FADP. 

2. SCOPE
This Privacy Policy explains how we process personal data when you:

• visit martinschgaguler.com
• contact us
• subscribe to the newsletter
• purchase artworks through our WooCommerce shop

3. PERSONAL DATA WE PROCESS
Depending on how you interact with the website, we may process:

a) Website/technical data
• IP address, device and browser information
• date/time of access, referring URL
• log files and security-related events

b) Contact data
• name, email address, message content (when you email or use a contact form)

c) Shop/order data (WooCommerce)
• billing and shipping address, email address, phone number (if provided)
• ordered products, order notes, invoices/receipts
• payment status and transaction references

d) Payment data (Stripe)
• payments are processed via Stripe
• we receive confirmations/transaction references; payment card data is processed by Stripe (not stored by us in full)

e) Newsletter data (Mailchimp)
• email address and (if provided) name
• subscription metadata (e.g., signup time and confirmation)

f) Analytics data (Google Analytics)
• usage data such as page views, session information, device/browser attributes
• this may involve cookies or similar technologies (see section 8)

4. PURPOSES OF PROCESSING
We process personal data for the following purposes:

• operating, securing, and improving the website and shop
• handling inquiries and communicating with you
• fulfilling contracts (processing orders, production, packaging, shipping, customer support)
• processing payments (Stripe) and preventing fraud
• shipping and delivery logistics
• newsletter communication (only if you subscribe)
• website analytics (Google Analytics) if enabled/accepted

5. DISCLOSURE TO RECIPIENTS (SERVICE PROVIDERS)
We may share personal data with service providers only to the extent necessary:

• Hosting / infrastructure: AWS (Lightsail) and related technical service providers for server hosting/operation
• E-commerce: WordPress + WooCommerce (website/shop functionality)
• Payments: Stripe (payment processing)
• Newsletter: Mailchimp (newsletter distribution and list management)
• Analytics: Google Analytics
• Shipping/logistics partners: carriers used for delivery and tracking (e.g., UPS or other selected carriers)

6. CROSS-BORDER DATA TRANSFERS
Some service providers (e.g., Google, Mailchimp, Stripe) may process personal data outside Switzerland, including in countries that may not provide an equivalent level of data protection. Where required, we rely on appropriate safeguards (e.g., contractual protections) to protect personal data.

7. RETENTION (HOW LONG WE KEEP DATA)
We retain personal data only as long as necessary for the stated purposes and legal obligations, including:
• Accounting and business records: retained for the legally required period (typically 10 years) for accounting records. 
• Order and customer communications: as needed for fulfillment, support, and legal claims
• Newsletter data: until you unsubscribe
• Server/security logs: for a limited period for security and troubleshooting

8. COOKIES, CONSENT, AND ANALYTIC
We use cookies and similar technologies for:

• essential shop functions (cart, checkout, security)
• preferences
• analytics (Google Analytics), if you consent via a cookie banner/consent tool where used
If analytics/marketing cookies are used, you can change your cookie preferences at any time via the cookie settings on the website (if implemented).
The Swiss data protection authority highlights that privacy statements should clearly explain which data is collected and whether it is shared with third parties. 

9. NEWSLETTER (MAILCHIMP)
If you subscribe to the newsletter, we use Mailchimp to manage subscriptions and send emails. You can unsubscribe anytime via the link in each email or by contacting us at [your email address].

10. YOUR RIGHTS (SWITZERLAND)
Under Swiss data protection law, you may request:
• access to your personal data
• correction of inaccurate data
• deletion or restriction of processing (where applicable)
• objection to certain processing (especially marketing-related)

To exercise your rights, contact us viaEmail

11. DATA SECURITY
We take appropriate technical and organizational measures to protect personal data (e.g., access controls, secure transmission where appropriate, backups, and updates).

12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The current version is published on this page with the “Last updated” date.