Last updated: October 31, 2026
This Privacy Policy explains which personal data we collect when you visit invinoveritasart.com, why we collect it and what rights you have. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Who we are (controller)
The controller responsible for this website is Judit Nagy L. (LNJ), artist – In Vino Veritas Art. Website: https://invinoveritasart.com. You can contact us at any time via our Contact page.
2. Server log files
When you visit the website, our hosting provider automatically records technical information such as your IP address, date and time of access, the page requested, referrer URL, browser type and operating system. This data is required to deliver the website securely and to detect and prevent attacks. Log files are deleted after a short period, unless they are needed to investigate a security incident. Legal basis: our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).
3. Contact form
If you send us a message via the contact form, we process the data you enter (name, email address, subject, message) in order to answer your enquiry. Messages are stored in our website database so that we can follow up on them, and are deleted once they are no longer needed, unless statutory retention obligations apply. Legal basis: your enquiry and our legitimate interest in responding to it (Art. 6(1)(b) and (f) GDPR).
4. Comments
When you leave a comment, we store the data shown in the comment form (name, email address, website, comment) as well as your IP address and browser user agent string to help detect spam. Your email address is not published.
An anonymised string created from your email address (a hash) may be sent to the Gravatar service (Automattic Inc.) to check whether you use a Gravatar profile picture. The Gravatar privacy policy is available at https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public together with your comment.
Comments and their metadata are stored indefinitely so that follow-up comments can be recognised and approved automatically. You can ask us to delete your comments at any time.
5. Newsletter
If you subscribe to our newsletter, we process your email address (and your name, if provided) to send you news about artworks, exhibitions and events. The newsletter is managed with the AcyMailing plugin directly on our own website; your data is stored in our website database and is not sold or passed on to third parties for advertising purposes. We may record whether newsletters are opened and which links are clicked in order to improve our content.
You can unsubscribe at any time using the unsubscribe link in every newsletter or by contacting us. Your data is then deleted from the mailing list. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
6. Cookies
Cookies are small text files stored on your device. We use cookies that are necessary for the website to function, for example:
- if you leave a comment, you can opt in to saving your name, email address and website in cookies so you do not have to enter them again (stored for one year);
- if you log in, temporary cookies store login information and screen options (login cookies last two days, screen options cookies one year; “Remember me” keeps the login for two weeks);
- cookies used to control pop-ups so that the same pop-up is not shown repeatedly.
You can delete cookies or block them in your browser settings. Some functions of the website may then no longer work properly.
7. Analytics
Burst Statistics: we use Burst Statistics, a privacy-friendly analytics tool that runs on our own server. It collects anonymised usage data (e.g. pages visited, visit duration, referrer, device type) to help us understand how the website is used. The data is not shared with third parties.
Google Analytics: we may use Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse how visitors use the website. The information generated may be transferred to and stored on Google servers, including in the USA. IP addresses are anonymised. Legal basis: your consent (Art. 6(1)(a) GDPR) or our legitimate interest in analysing website usage. You can prevent data collection by Google by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout. More information: https://policies.google.com/privacy.
8. Embedded content from other websites
Articles on this site may include embedded content (e.g. YouTube videos, images, articles). Embedded content behaves in exactly the same way as if you had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with the embedded content. YouTube is operated by Google; see Google’s Privacy Policy.
9. Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images on the website.
10. Who we share your data with
We do not sell your personal data. Data is only passed on to service providers who help us operate the website (e.g. our hosting provider) and who are bound to confidentiality, to the third-party services described above, or where we are legally obliged to do so. Some providers may process data outside Switzerland or the EU/EEA (e.g. in the USA); in such cases we rely on appropriate safeguards such as the EU Standard Contractual Clauses or adequacy decisions.
11. How long we retain your data
We keep personal data only for as long as necessary for the purposes described above, or as long as required by law. Newsletter data is kept until you unsubscribe; contact messages are deleted once your enquiry has been fully handled.
12. Your rights
Under the applicable data protection laws you have the right to:
- request access to the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted or its processing restricted;
- object to processing based on legitimate interests;
- withdraw your consent at any time with effect for the future;
- receive your data in a structured, commonly used format (data portability);
- lodge a complaint with a supervisory authority – in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority of your country of residence.
If you have an account on this site or have left comments, you can also request an exported file of the personal data we hold about you, or ask us to erase it. To exercise your rights, please contact us via our Contact page.
13. Security
We use appropriate technical and organisational measures, including encrypted transmission (HTTPS) and security plugins, to protect your data against loss, misuse and unauthorised access.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example when we add new features or services. The current version is always available on this page. Please also see our Terms of Use.
