What this site collects, why, who receives it, and your rights under the Swiss Federal Act on Data Protection (FADP). Version of 29 September 2026.
Who is responsible
The controller for personal data processed through this site is Argenita Fetahu, Weitblick 10, 6038 Gisikon, Lucerne, Switzerland. For any question about your data, write to info@argenitafetahu.com.
Enquiries
When you use the contact form or write by email, your name, email address and message are processed so that your enquiry can be answered. The contact form is protected against spam by Google reCAPTCHA, described below.
Orders and payment
When you place an order, your name, billing and delivery address, email address, telephone number and the details of the order are processed to conclude and perform the contract: to take payment, to arrange delivery and customs clearance, and to meet accounting obligations. WooCommerce also records how you arrived at the site, for example the referring website or campaign, and stores it with the order.
Card payments are processed by WooPayments, a service of Automattic Inc. (USA), with Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe, Inc., USA) as payment processor. Card details are entered directly with them and are never stored on this site. Stripe screens payments automatically to prevent fraud, and processes some data under its own privacy policy.
Visiting the site
Server logs. The site is hosted by Hetzner Online GmbH in Germany. The web server records technical data about each request, including IP address, date and time, the page requested, the browser and the referring page. These logs are used for security and troubleshooting and are deleted after a short period.
Statistics. Visits are counted with Jetpack Stats and WooCommerce Analytics, services of Automattic Inc. (USA). They record the pages viewed, the referring site, browser, device and IP address, so that the artist can see which works and pages are looked at and how the shop is used.
Images and files. Images and some script files are delivered through Automattic’s content delivery network (addresses ending in wp.com), so your browser connects to Automattic’s servers, which receive your IP address.
Spam protection. Google reCAPTCHA, a service of Google LLC (USA) and Google Ireland Limited, is loaded on the site to keep automated spam out of the contact form. It analyses information such as your IP address, browser and interaction with the page, and sets cookies.
Cookies
The site sets a cookie that remembers whether you prefer to see prices in francs or euros (afz_currency, kept for one year). WooCommerce sets cookies that keep your basket and checkout working, and cookies beginning sbjs_ that record how you arrived at the site. reCAPTCHA and the statistics services described above may set their own.
You can block or delete cookies in your browser settings. The site remains readable without them, but the basket and checkout need WooCommerce’s cookies to work.
Who receives data
Personal data is disclosed only as needed for the purposes above: to the hosting provider (Hetzner, Germany); to Automattic (USA) for WooPayments, Jetpack and its content delivery network; to Stripe for payments; to Google for reCAPTCHA; to the email service that delivers order and contact emails; and to the carrier and, for shipments leaving Switzerland, the customs authorities of the destination country.
Data is not sold, and is not passed to anyone else except where the law requires it.
Data sent abroad
Some of these recipients are outside Switzerland. Germany and the other states of the EU and EEA are recognised by the Federal Council as providing adequate data protection. Data goes to the United States only to companies certified under the Swiss-US Data Privacy Framework, recognised as adequate by the Federal Council since 15 September 2024, or on the basis of standard contractual clauses recognised by the Federal Data Protection and Information Commissioner. Delivery and customs data goes to the destination country of a shipment because that is necessary to perform the contract with you (Art. 17 para. 1 let. b FADP).
How long data is kept
Order records and the correspondence belonging to them are kept for ten years, the period Swiss law requires for accounting records (Art. 958f CO). Enquiries that do not lead to a sale are deleted at the latest two years after the last exchange. Server logs are deleted after a short period, and cookies expire as described above.
Your rights
Under the FADP you can ask what personal data is held about you and how it is processed (Art. 25), have incorrect data corrected, object to processing, have your data deleted, and receive data you provided in a common electronic format (Art. 28). Write to info@argenitafetahu.com. Data that Swiss law requires to be kept, such as order records, is deleted once that period has passed.
If you believe your data is processed unlawfully, you can contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. Where the EU General Data Protection Regulation applies to you, you also have the rights it gives, including the right to complain to the supervisory authority in your country.
Changes to this policy
This policy is updated when the site or its services change. The version published on this page is the one that applies.