Privacy policy

ARTBOX.GROUPS GmbH Schmidgasse 4 6300 Zug Switzerland

For any data protection questions, write to us at office@thomsongallery.com.

We comply with the Swiss Data Protection Act (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

We do not use advertising tools or tracking cookies. For visitor statistics we use cookieless analytics that cannot recognise individuals. We only collect the data we need to reply to you or send you our newsletter. We never sell data.

This website is hosted by Vercel Inc. (USA). When you visit it, the server processes technically necessary data such as your IP address, date and time, the page requested and your browser, to keep the site secure and running (Art. 6(1)(f) GDPR). Vercel is certified under the EU US Data Privacy Framework; the EU Standard Contractual Clauses also apply.

Our database and uploaded files are stored with Supabase in a data centre in Zurich (Switzerland).

The fonts of this website are served from our own server. No connection to Google is made.

To understand which pages are read and where visitors come from, we use Vercel Web Analytics and our own statistics based on the same principles, stored with Supabase in Zurich. No cookies are set and no profiles are created. It records the page visited, the referring page, country, device type, browser and operating system, as well as certain actions such as submitting a form, without their content and without names or e-mail addresses. Visitors are only distinguished by an anonymous value that is regenerated daily, so nobody can be recognised across days. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR).

We only set one technically necessary cookie (NEXT_LOCALE), which remembers your chosen language. No consent is required for this. Our team additionally uses a login cookie in the protected admin area.

When you write to us, we store your name, e-mail address, subject and message in order to reply (Art. 6(1)(b) and (f) GDPR). We delete the data once it is no longer needed and no legal retention obligations apply.

For the newsletter we store your e-mail address, optionally your name, your language and the time of your sign up and confirmation. You only receive the newsletter after clicking the link in our confirmation e-mail (double opt in). The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every e-mail.

Exhibition places are awarded, among other ways, through contests on ARTBOXY, a platform of ARTBOX.GROUPS GmbH. From winners we take over name, e-mail address, country, language and the title, image and details of the artwork in order to organise the exhibition and shipping (Art. 6(1)(b) GDPR). Name, artwork and image are shown on the website. Anyone who declines participation is not shown on the website.

We send our e-mails via Resend (Resend Inc., USA, delivered from servers in the EU), safeguarded by the EU Standard Contractual Clauses.

Copies of e-mails to artists are filed in our customer management system Zoho CRM (Zoho Corporation B.V., Netherlands, EU data centre) so our team can follow the communication (Art. 6(1)(f) GDPR).

You have the right at any time to:

• access the data we hold about you
• have incorrect data corrected
• have your data deleted or its processing restricted
• data portability
• object to the processing
• withdraw your consent with effect for the future

Simply write to us at office@thomsongallery.com. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch) or, in the EU, with the supervisory authority of your country of residence.