Privacy Policy

This privacy policy provides information about the personal data I collect, the purpose of collecting it, and to whom I disclose it.

1. Services I Use

  • Adobe Fonts
  • Hostpoint
  • Independent Analytics

2. Contact Information

For questions or concerns about the protection of your data, you can reach me via email. Responsible for data processing through this website:

Luca Suriano
info@lucasuriano.art

3. General Principles

3.1 What data do I collect and from whom?

I primarily process personal data that you provide to me or that I collect while operating my website. I may also receive personal data about you from third parties, including the following categories:

  • Personal master data (name, address, date of birth, etc.);
  • Contact information (phone number, email address, etc.);
  • Financial data (e.g., account details);
  • Online identifiers (e.g., cookie ID, IP addresses);
  • Location data;
  • Audio and visual recordings.

3.2 Under what conditions do I process your data?

I treat your data confidentially and in accordance with the purposes outlined in this privacy policy. I ensure transparent and proportionate processing.

If, in exceptional cases, I cannot adhere to these principles, data processing may still be lawful due to a justification. Possible justifications include:

  • Your consent;
  • Performance of a contract or pre-contractual measures;
  • My legitimate interests, provided they do not override your interests.

3.3 How can you withdraw your consent?

If you have given me consent to process your personal data for specific purposes, I will process your data within the scope of that consent, unless another justification exists. You can withdraw your consent at any time by sending an email to the address provided in the imprint. Withdrawal does not affect prior data processing.

3.4 In what cases can I share your data with third parties?

a. Principle

I may rely on third-party services or affiliated companies to process your data (so-called data processors). Recipients may include:

  • Accounting, trustee, and auditing companies;
  • Consulting firms (legal advice, taxes, etc.);
  • IT service providers (web hosting, support, cloud services, website design, etc.);
  • Payment service providers;
  • Providers of tracking, conversion, and advertising services.

I ensure that these third parties and my affiliated companies comply with data protection requirements and treat your personal data confidentially. In some cases, I may be obligated to disclose your personal data to authorities.

b. Visiting my social media channels

I have embedded links to my social media channels on my website, indicated by corresponding symbols. Clicking on these symbols will redirect you to my social media channels.

In this case, social media providers become aware that you are accessing their platform from my website. These providers may use the data collected for their own purposes. I note that I have no knowledge of the content of the transmitted data or its use by the operators.

c. International Transfers

As part of order processing, your personal data may be transferred to companies abroad. These companies are obligated to data protection to the same extent as I am. The transfer may take place worldwide.

If the level of data protection does not correspond to that of Switzerland, I conduct a prior risk assessment and contractually ensure that the same level of protection is guaranteed (e.g., using the new standard contractual clauses of the EU Commission or other legally mandated measures). If my risk assessment is negative, I take additional technical measures to protect your data. You can access the EU Commission’s standard contractual clauses at the following link: commission.europa.eu

3.5 How long do I retain your data?

I only store personal data for as long as necessary to fulfill the purposes for which the data was collected.

Data stored during your visit to my website is retained for twelve months. An exception applies to analysis and tracking data, which may be kept for a longer period.

I retain contract data for a longer period as required by legal regulations. This includes business communication, closed contracts, and booking receipts, which must be kept for up to 10 years. If I no longer need such data from you for the provision of services, the data is blocked and used only for invoicing and tax purposes.

3.6 How do I protect your data?

I will securely store your data and take all reasonable measures to protect it from loss, unauthorized access, misuse, or alteration.

My contractual partners with access to your data are obligated to comply with data protection regulations. In some cases, I may need to forward your inquiries to affiliated companies, and even in those cases, your data will be treated confidentially.

Within my website, I use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.

3.7 What rights do you have?

a. Right to information

You can request information at any time about the data I have stored about you. Please send your request along with proof of identity to info@lucasuriano.art.

You also have the right to receive your data in a common file format if I process your data automatically and if:

  • You have given your consent to the processing of this data, or
  • You have disclosed data in connection with the conclusion or performance of a contract.

I may restrict or refuse information or data disclosure if it conflicts with my legal obligations, legitimate interests, or the interests of a third party.

The processing of your request is subject to the statutory processing period of 30 days. However, I may extend this period due to a high volume of requests, legal or technical reasons, or if I need further information from you. You will be informed of any extension in a timely manner, at least in writing.

b. Deletion and correction

You have the option to request the deletion or correction of your data at any time. I may reject the request if legal regulations require me to retain the data for a longer or unchanged period, or if there is a legal justification against your request.

Please note that exercising your rights may, in some cases, conflict with contractual agreements and may have corresponding effects on contract performance (e.g., early termination of the contract or cost consequences).

c. Legal recourse

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the relevant supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: www.edoeb.admin.ch

3.8 Changes to the privacy policy

I reserve the right to change this privacy policy at any time. Changes will be published, and you will not be separately informed.

4. Individual Data Processing Operations

4.1 Providing the website and creating logfiles

What information do I receive and how do I use it?

By visiting my website, certain data is automatically stored on the server or servers of services and products I obtain and/or install, for purposes of system administration, statistical analysis, or backup and tracking purposes. This includes:

  • The name of your internet service provider
  • Your IP address (in some cases)
  • The version of your browser software
  • The operating system of the computer accessing the URL
  • The date and time of access
  • The website from which you visit the URL
  • The search terms you used to find the URL

Why am I allowed to process this data?

This data cannot be attributed to a specific person, and there is no merging of this data with other data sources. Logfile storage is necessary to ensure the functionality of the website and to secure the IT systems. This constitutes my legitimate interest.

How can you prevent data collection?

The data is only stored for as long as necessary to achieve the purpose of its collection. Accordingly, the data is deleted after the end of each session. The storage of logfiles is mandatory for the operation of the website, and therefore, you have no option to object.

4.2 Adobe Fonts

Adobe Fonts is a service provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA. Adobe Fonts is an online service that allows users to integrate high-quality fonts into their websites.

I use Adobe Fonts to integrate specific fonts into my website, ensuring a consistent and appealing design to enhance user experience.

To provide the fonts, Adobe Fonts may use cookies or other tracking technologies to collect information such as the visitor’s IP address, browser type and version, and other information about the website visit.

4.3 Hostpoint

My website is hosted by Hostpoint AG. Privacy information can be found in their Privacy Policy.

4.4 Independent Analytics

I use the “Independent Analytics” service on my website, provided by Compete Themes LLC, 1901 S 9th St, Philadelphia, PA 19148, USA. Independent Analytics is a plugin that enables detailed web analytics, prioritizing user privacy.

With Independent Analytics, I can analyze the behavior of my visitors to continuously improve the user experience and content of my website. This includes information about which website a visitor comes from, which areas of my site they visit, and how often and how long they view these areas.

All data is stored on my webserver (Hostpoint) and not shared with third parties. IP addresses are anonymized before storage.