Privacy Policy

Last updated: 16 May 2026

1. Who we are

This website (resonanceart.ch) is operated by Association ResonanceArt, a non-profit association registered in Geneva, Switzerland. In this document, “we”, “us”, “our” or “ResonanceArt” refer to the Association.

If you have any question about this Privacy Policy or about your personal data, you can write to us at: info@resonanceart.ch

2. What this policy covers

This Privacy Policy explains what personal data we collect about you when you visit our website, create an account, publish content, buy or sell a creation, donate, or contact us, and how we use, store and protect that data.

This policy complies with the Swiss Federal Act on Data Protection (revised LPD, in force since 1 September 2023) and, where applicable, the European General Data Protection Regulation (GDPR).

3. What personal data we collect

Depending on how you use the site, we may collect:

• Account data: your name, username, email address, phone number, password (encrypted), profile photo, biography, country, city, languages, social links, artistic domain.
• Content you publish: creations (title, description, images, price, category), events you organise, comments, messages sent through our private messaging system.
• Transaction data: when you sell a creation, we collect the buyer’s name, email address, the item bought, the amount paid, the date and time, and a reference number. We do NOT collect or store credit card details — these are handled directly by our payment provider (Stripe).
• Seller payout data: if you sell creations, you may provide us with your IBAN, bank account holder name, bank name, or a Stripe account ID. This is stored encrypted and only used to route payments to you.
• Technical data: IP address, browser type, device type, operating system, pages visited, time spent on pages, referrer URL. This is collected through our hosting provider’s standard logs and through cookies.

4. Why we collect this data

We use your personal data only for the following purposes:

• To create and manage your account.
• To display your public profile and your creations to other visitors.
• To process purchases and donations, and to route payments to sellers.
• To allow members to communicate with each other through our private messaging system.
• To send you transactional emails (order confirmation, password reset, OTP for phone verification, event reminders).
• To ensure security and prevent fraud.
• To comply with our legal obligations (accounting records, tax reporting if applicable).

We do NOT sell, rent, or trade your personal data to any third party for marketing purposes. Ever.

5. Who has access to your data

Your personal data is only accessed by:

• The ResonanceArt administration team, on a strict need-to-know basis.
• The technical service providers we depend on to operate the platform, including:
  • Infomaniak (Switzerland): hosting provider.
  • Stripe (Ireland / USA): payment processing.
  • Google Firebase (USA): SMS and WhatsApp OTP delivery for phone verification.
• Other members of the platform: your public profile (name, photo, biography, creations, events) is visible to anyone who visits the site. Your email, phone number, IBAN and other private fields are NEVER displayed publicly.

6. International transfers

Some of our service providers (Stripe, Google Firebase) may process your data outside of Switzerland and the European Union, in particular in the United States. These providers are bound by appropriate safeguards (Standard Contractual Clauses, EU-US Data Privacy Framework where applicable).

7. How long we keep your data

• Active account data: as long as your account exists.
• Account closed by you: data deleted within 30 days, except where we must retain it by law (in particular accounting and tax records, kept up to 10 years under Swiss law).
• Transaction logs: 10 years, as required by Swiss commercial law.
• Technical logs (IP, browser): 12 months maximum.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Request deletion of your account and your personal data (right to erasure).
• Object to certain uses of your data.
• Request a copy of your data in a portable format.
• Withdraw your consent at any time, where consent is the legal basis.
• File a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with the data protection authority in your country.

To exercise any of these rights, write to info@resonanceart.ch. We will reply within 30 days.

9. Cookies

Our website uses a small number of cookies, strictly necessary to make the site work (session, login state, language preference, security tokens). We do NOT use advertising or third-party tracking cookies.

10. Security

We take reasonable technical and organisational measures to protect your personal data, including HTTPS encryption, encrypted password storage, secure database hosting at Infomaniak (Switzerland), and access controls. No system is 100% secure, but we do our best to keep your data safe.

11. Children

ResonanceArt is open to adults (18+) and to minors (under 18) only with the consent of a parent or legal guardian. We do not knowingly collect data from children under 13.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the latest revision. Material changes will be communicated to registered users by email.

13. Contact

Association ResonanceArt
Geneva, Switzerland
Email: info@resonanceart.ch