Privacy policy

ARTBOX.GROUPS GmbH Schmidgasse 4 6300 Zug Switzerland

with its permanent establishment ARTBOX GROUPS SPAIN, Costa d'en Brossa 2, 07001 Palma, Spain (CIF N0247983J)

For any data protection questions, write to us at art@casadelartepalma.com.

We comply with the EU General Data Protection Regulation (GDPR), the Spanish data protection law (LOPDGDD) and the Swiss Data Protection Act (FADP).

We do not use advertising tools or tracking cookies. For visitor statistics we use cookieless analytics that cannot recognise individuals. We only collect the data we need to reply to you, handle your booking or send you our newsletter. We never sell data.

This website is hosted by Vercel Inc. (USA). When you visit it, the server processes technically necessary data such as your IP address, date and time, the page requested and your browser, to keep the site secure and running (Art. 6(1)(f) GDPR). Vercel is certified under the EU US Data Privacy Framework; the EU Standard Contractual Clauses also apply.

Our database and uploaded files are stored with Supabase in a data centre in Ireland (EU).

The fonts of this website are served from our own server. No connection to Google is made.

To understand which pages are read and where visitors come from, we use Vercel Web Analytics and our own statistics based on the same principles, stored with Supabase in Ireland. No cookies are set and no profiles are created. It records the page visited, the referring page, country, device type, browser and operating system, as well as certain actions such as submitting a form, without their content and without names or e-mail addresses. Visitors are only distinguished by an anonymous value that is regenerated daily, so nobody can be recognised across days. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR).

We only set one technically necessary cookie (NEXT_LOCALE), which remembers your chosen language. No consent is required for this. Our team additionally uses a login cookie in the protected admin area.

When you write to us, we store your name, e-mail address, subject and message in order to reply (Art. 6(1)(b) and (f) GDPR). We delete the data once it is no longer needed and no legal retention obligations apply.

For the newsletter we store your e-mail address, optionally your name, your language and the time of your sign up and confirmation. You only receive the newsletter after clicking the link in our confirmation e-mail (double opt in). The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every e-mail.

For a booking we store your name, e-mail address, optionally phone, website, artistic discipline and message, and the weeks booked. We need this to carry out the booking (Art. 6(1)(b) GDPR). Booking data is kept as long as tax and commercial law require.

Payment is handled by SumUp (SumUp Limited, Ireland). You enter your payment details directly on SumUp's payment page; we never see or store them. SumUp is itself responsible for processing the payment.

If you agree, we show your name and discipline on the Open Atelier page among the current and upcoming stays. The occupancy calendar never shows names, only “booked”.

Exhibitions and Open Atelier stays are awarded through contests on ARTBOXY, a platform of ARTBOX.GROUPS GmbH. From winners we take over name, e-mail address, country, language and the title, image and details of the artwork in order to organise the exhibition, shipping and stay (Art. 6(1)(b) GDPR). Name, artwork and image are shown on the website. Anyone who declines participation is not shown on the website.

We send our e-mails via Resend (Resend Inc., USA, delivered from servers in the EU), safeguarded by the EU Standard Contractual Clauses.

Copies of e-mails to artists and guests are filed in our customer management system Zoho CRM (Zoho Corporation B.V., Netherlands, EU data centre) so our team can follow the communication (Art. 6(1)(f) GDPR).

On the Open Atelier page we show videos from Instagram. They are only loaded when you click on a video. Only then is data such as your IP address transferred to Meta Platforms Ireland Ltd. The preview images are stored on our own server.

You have the right at any time to:

• access the data we hold about you
• have incorrect data corrected
• have your data deleted or its processing restricted
• data portability
• object to the processing
• withdraw your consent with effect for the future

Simply write to us at art@casadelartepalma.com. You can also lodge a complaint with a supervisory authority: in Spain the Agencia Española de Protección de Datos (aepd.es), in Switzerland the Federal Data Protection and Information Commissioner (edoeb.admin.ch).