Privacy policy

1. Controller / Responsible Party

Marco Fischer Art
Marco Fischer
Rietstrasse 52
9443 Widnau
Switzerland

Phone: +41 79 767 95 02
Email: contact@marcofischerart.com

Marco Fischer Art operates this online store and website, including all related information, content, features, tools, products and services (the “Services”), to provide customers with a curated shopping experience.

Marco Fischer Art is based in Switzerland. For the Swiss Federal Act on Data Protection (revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR), Marco Fischer Art is the data controller responsible for the processing of personal data.

Our store is powered by Shopify Inc., which provides the e-commerce platform enabling us to offer the Services.

2. Scope of This Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you:

visit our website,
use our Services,
place an order or carry out a transaction,
communicate with us.

If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail in the processing of personal information.

By accessing or using the Services, you confirm that you have read and understood this Privacy Policy.

3. Personal Information We Collect

“Personal information” refers to any information that identifies or can reasonably be linked to an identifiable individual.

Depending on how you interact with the Services and your place of residence, we may process the following categories of personal information:

Contact details: name, billing and shipping address, email address, phone number
Financial information: payment method, transaction confirmation and related details (payment processing is carried out by third-party providers; we do not store full payment card details)
Account information: login credentials, preferences and settings
Transaction information: products viewed, added to cart, purchased, returned or cancelled
Communications: messages sent to us via email or contact forms
Device and technical data: IP address, browser type, device identifiers
Usage data: interactions with the website, pages visited, timestamps

4. Sources of Personal Information

We collect personal information:

directly from you,
automatically through cookies and similar technologies,
from service providers acting on our behalf,
from partners or third parties where legally permitted.

5. Legal Bases for Processing (GDPR)

For users located in the European Economic Area (EEA) or the United Kingdom, we process personal data based on the following legal bases:

Performance of a contract (Art. 6(1)(b) GDPR): order processing, payment, delivery
Legal obligation (Art. 6(1)(c) GDPR): accounting, tax and regulatory compliance
Legitimate interests (Art. 6(1)(f) GDPR): website security, fraud prevention, service improvement
Consent (Art. 6(1)(a) GDPR): marketing communications and non-essential cookies

Where processing is based on consent, you may withdraw your consent at any time with future effect.

6. How We Use Information

We use personal information in particular to:

provide, operate and improve the Services,
process payments and fulfil orders,
ship products and manage returns,
communicate with you regarding orders and inquiries,
provide customer support,
send marketing communications where permitted,
detect, prevent and investigate fraud or misuse,
comply with legal and regulatory obligations.

You may unsubscribe from marketing communications at any time by using the unsubscribe link included in each email.

7. Cookies and Similar Technologies

Non-essential cookies (analytics and marketing) are only activated after you have provided your explicit consent via the cookie banner.

Cookies may include:

Strictly necessary cookies (required for essential website functions),
Analytics cookies (to analyse website usage and performance),
Marketing cookies (to display relevant advertising, where enabled).

Where required by applicable law (e.g. EU/EEA), cookies are only set after you have provided your consent via a cookie banner.
You may manage or withdraw your consent at any time via the cookie settings on our website or through your browser settings.

8. Disclosure of Personal Information

We may disclose personal information to the following categories of recipients:

Shopify Inc. (hosting, checkout, analytics),
payment service providers,
shipping and fulfilment partners,
IT, hosting and customer support providers,
marketing partners (only where legally permitted),
public authorities where required by law,
parties involved in a business transaction (e.g. merger or restructuring).

All third parties are contractually obligated to process personal data in accordance with applicable data protection laws.

9. Relationship With Shopify

Our online store is hosted by Shopify Inc. Shopify processes personal data to operate and improve the Services.

Depending on the processing activity, Shopify may act as a processor or as an independent controller.
Further information is available in the Shopify Consumer Privacy Policy and via the Shopify Privacy Portal.

10. International Data Transfers

Personal information may be transferred to and processed in countries outside your country of residence, including the United States.

For transfers from the EEA or the United Kingdom, we rely on:

adequacy decisions,
Standard Contractual Clauses (SCCs), or
other legally recognized safeguards.

11. Data Retention

We retain personal information only for as long as necessary to:

perform contractual obligations,
comply with legal retention requirements,
resolve disputes,
enforce agreements.

Retention periods depend on the type of data and applicable legal obligations.

12. Your Rights

Depending on your location, you may have the right to:

access your personal data,
request correction of inaccurate data,
request deletion of personal data,
restrict or object to processing,
receive your data in a portable format,
withdraw consent at any time,
opt out of targeted advertising.

Requests can be submitted using the contact details below. We may need to verify your identity before responding.

13. Children’s Data

Our Services are not intended for children or minors.
We do not knowingly collect personal data from individuals who are not legally capable of entering into binding contracts.

If you believe that a minor has provided us with personal information, please contact us so that we can delete such data.

14. Security

We implement appropriate technical and organisational measures to protect personal information.
However, no data transmission or storage system can be guaranteed to be completely secure.

15. Complaints

If you have concerns about our processing of personal data, please contact us first.

You also have the right to complain with:

the Swiss Federal Data Protection and Information Commissioner (FDPIC), or
your local data protection authority within the EEA or the UK.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Any changes will be published on this page together with an updated revision date.

Last updated: January 2026

17. Contact

For questions, requests, or to exercise your data protection rights, please contact: