Privacy Policy

This Privacy Policy describes how personal data is collected, used, and protected when you visit www.hre-art.com (the “Site”) or make a purchase on the Site or any other services provided via the Site (together, the "Services"), operated by HRÈ Katarzyna Karlen, Neuwilerstrasse 44, 4104 Oberwil, Switzerland (sole proprietorship).

We are committed to protecting your privacy and processing personal data in accordance with:

Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR),
the Swiss Federal Act on Data Protection (nFADP / nDSG).

DATA CONTROLLER

The data controller responsible for the processing of your personal data is:

HRÈ Katarzyna Karlen(sole proprietorship)

Neuwilerstrasse 44, 4104 Oberwil, Switzerland. Email: contact@hre-art.com

PERSONAL DATA WE COLLECT

We may collect or receive personal information for a number of purposes connected with our business operations when you use our Services, namely:

Full name
Contact details incl. email address
Shipping and billing address
Phone number (if required for delivery)
Payment-related data (processed by third-party payment providers)
Site visitor details incl. IP address, logfiles, terminat ID
Technical and usage data (cookies and analytics)
Geolocation information

There is no obligation to provide your personal data. However, please note that some features provided under the Site cannot be provided if you do not provide the required data strictly necessary for performing the contract between you and us.

COLLECTION OF PERSONAL INFORMATION

We collect information about our users when they use our Services, including taking certain actions within it.

Directly
- Via the Site and electronic communication
- When you use our Services
- When you provide services to us
- When you correspond with us by electronic means using our Services
- When you browse, complete a form or make an inquiry while using our Services
Indirectly
- Through public sources
- From public registers (such as commercial registers), news articles and internet searches
- When our business customers engage us to perform professional services which involve them sharing personal data they control with us as part of that engagement
- From external Service Providers (see section below)

PURPOSES OF PROCESSING

Our legal basis for collecting and using the personal data described in this Privacy Policy depends on the personal data we collect and the specific purposes for which we collect it. Your personal data is processed for the following purposes:

To provide the Services, notably:
- To process and fulfill orders
- To arrange shipping and delivery
- To process payments and accounting obligations
- To communicate with you regarding your order
To comply with legal and tax obligations
To analyze website performance and improve services or develop new services
To send marketing communications, only where explicit consent has been given

LEGAL BASIS FOR PROCESSING

Personal data is processed on the basis of:

Article 6(1)(b) GDPR – performance of a contract
Article 6(1)(c) GDPR – legal obligation
Article 6(1)(a) GDPR – user consent (e.g. newsletter, cookies)
Article 6(1)(f) GDPR – legitimate interest (website security, analytics, improvement and development of new services)

DATA RECIPIENTS

Personal data may be shared only with trusted third parties ("Service Providers") necessary to operate the Site and to facilitate the operation of our Services, assist in analysing the usage of the Services, or perform necessary services, such as payment and the provision of IT services. These third parties have access to your personal data only to the extent necessary to perform these tasks.

Type(s) of Service Providers who might access your personal data:

Professional advisers that we use, such as accountants and lawyers
Third parties that are engaged in the course of your matter, such as counsels, banks and other payment providers, and postal or courier providers
Third parties who provide IT and software services
Third parties who help us with client user insights and marketing

All third parties process personal data under data processing agreements and in accordance with applicable data protection laws.

INTERNATIONAL DATA TRANSFERS

When using Service Providers (e.g., to support us with user insights and our marketing, in accordance with section 5 above), some personal data, may be transferred to and processed in the following countries:

EU and EEA
USA

We may use Service Providers partly located in so-called third countries outside the European Union or the European Economic Area or Switzerland)) or process personal data there, i.e., countries whose level of data protection does not correspond to that of the EU or Switzerland.

We safeguard your personal data per our contractual obligations and applicable data protection legislation when transferring data abroad.

Such safeguards may include:

The transfer to countries that have been deemed to provide an adequate level of protection according to the Federal Council, as well as to countries where there is an adequacy decisions by the European Commission in place
Applying standard data protection model clauses, binding corporate rules or other standard contractual obligations that provide appropriate data protection

If a third country transfer takes place and there is no adequacy decision or appropriate safeguards, it is possible and there is a risk that authorities in the third country (e.g. intelligence services) can gain access to the transferred data and that the enforceability of your data subject's rights cannot be guaranteed.

DATA RETENTION

We retain personal data for so long as it is needed for the purposes for which it was collected and in line with legal and regulatory requirements or contractual arrangements. After this period, we delete or fully anonymize your personal data.

YOUR RIGHTS

You have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Request deletion of your data (“right to be forgotten”)
Restrict processing
Object to processing
Request data portability
Withdraw consent at any time.

Requests may be submitted by contacting us at [contact email].

You also have the right t of appeal to a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch/edoeb/en/home.html).

To stop receiving emails from us, please click on the 'unsubscribe' link in the email you received or contact us at contact@hre-art.com

DATA SECURITY

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

The security of your personal data is important to us but remember that no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. We recommend using antivirus software, a firewall, and other similar software to safeguard your system.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy at any time. The current version will always be available on the Site.

COOKIE POLICY

This website uses cookies and similar technologies provided by Wix.com Ltd. and selected third-party services to ensure the proper operation of the online store, enhance user experience, and analyze website traffic. This website is operated by a company established in Switzerland and complies with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
The Site uses cookies and similar technologies to:
- Ensure proper website functionality
- Analyze traffic and usage
- Support marketing activities (only with consent)
You may manage your cookie preferences at any time through the cookie banner
available on the Site.

CONTACT

If you have any questions regarding this Privacy Policy or data protection matters, please contact us at: contact@hre-art.com