Privacy Policy
Last updated: June 2025
1. Introduction
This Privacy Policy explains how Lea Bischofberger Gallery ("we", "us", "our"), registered in Switzerland, collects, uses, and protects your personal data when you visit our website at leabischofberger.com (the "Site").
We are committed to protecting your privacy in accordance with the Swiss Federal Act on Data Protection (revFADP), in force since 1 September 2023, and — where applicable to visitors from the European Economic Area — the EU General Data Protection Regulation (GDPR).
2. Data Controller
LEA BISCHOFBERGER GALLERY
RÄMISTRASSE 23
8001 ZURICH
SWITZERLND
+41 79 824 55 55
office@leabischofberger.com
3. Data We Collect
3.1 Contact Form - When you submit our contact form, we collect:
First and last name
Email address
Subject and message content
Date and time of submission
Purpose: To respond to your enquiry. Legal basis (GDPR): Legitimate interests (Art. 6(1)(f) GDPR) / performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR). Legal basis (revFADP): Legitimate interest or fulfilment of a contractual obligation. Retention: We retain contact form data for up to 2 years, unless a longer retention period is required by law or ongoing correspondence.
3.2 Newsletter - If you subscribe to our newsletter, we collect:
Email address
First name (optional, for personalisation)
Date and time of subscription
IP address at the time of subscription (for proof of consent)
Purpose: To send you updates about exhibitions, events, and news from the gallery. Legal basis (GDPR): Consent (Art. 6(1)(a) GDPR). Legal basis (revFADP): Consent. Retention: We retain your data for as long as your subscription is active. Upon unsubscription, your data is deleted within 30 days, unless we are required to retain proof of consent.
You may unsubscribe at any time by clicking the unsubscribe link in any newsletter email, or by contacting us directly.
4. Cookies and Tracking
Our Site may use the following types of cookies:
Essential cookies: Necessary for the Site to function. No consent required.
Analytics cookies: Used to understand how visitors interact with the Site (e.g. Google Analytics or a privacy-friendly alternative such as Plausible or Matomo). Used only with your consent.
You can manage or withdraw your cookie consent at any time via the cookie banner on our Site or your browser settings.
5. Third-Party Services
We may use the following third-party providers to operate the Site:
Email / newsletter provider (e.g. Mailchimp, Brevo): Processes subscriber data on our behalf. Data may be transferred to servers outside Switzerland or the EEA. Where applicable, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.
Web hosting provider (e.g. Squarespace, Webflow, or similar): Hosts the Site and may process technical log data.
Analytics provider (if used): Processes anonymised or pseudonymised usage data.
We do not sell your personal data to third parties.
6. International Data Transfers
Switzerland is recognised by the EU as providing an adequate level of data protection. Where we transfer data to countries outside Switzerland or the EEA that do not offer an equivalent level of protection, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or the Swiss Federal Data Protection and Information Commissioner (FDPIC).
7. Your Rights
Depending on your location and applicable law, you have the following rights regarding your personal data:
Right of access – Request a copy of the data we hold about you.
Right to rectification – Ask us to correct inaccurate or incomplete data.
Right to erasure – Request deletion of your data ("right to be forgotten").
Right to restriction of processing – Ask us to limit how we use your data.
Right to data portability – Receive your data in a structured, machine-readable format.
Right to object – Object to processing based on legitimate interests.
Right to withdraw consent – Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at privacy@leabischofberger.com. We will respond within 30 days.
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with:
Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — www.edoeb.admin.ch
EU/EEA residents: The supervisory authority in your country of residence.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (SSL/TLS), access controls, and regular security reviews.
No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
9. Children's Privacy
Our Site is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has submitted data to us, please contact us and we will delete it promptly.
10. Links to Third-Party Websites
Our Site may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last updated" date. For material changes, we will notify newsletter subscribers by email.
12. Contact
For any questions about this Privacy Policy or how we handle your data, please contact:
Lea Bischofberger Gallery
office@leabischofberger.com