Privacy policy

Thank you for visiting our website. Protecting your privacy is very important to us. Below, we inform you of how personal data is processed on our website. Your personal data is collected and processed in compliance with the valid statutory data protection regulations, in particular the General Data Protection Regulation, GDPR.

You can visit our website and browse through our offerings without providing any personal information.

The controller as per the data protection legislation is:

Artigo GmbH
Seestrasse 489
8038 Zurich, Switzerland
Managing Director: Yves Ton-That
Telephone: +41 (0) 433 21 5555

1. Contact person for data protection matters

In the event of questions concerning data protection, on exercising your rights and on revoking your consent as per Art. 4, No. 7 GDPR, please send us an e-mail or contact our Data Protection Officer directly:

Yves Ton-That
Artigo GmbH
Seestrasse 489, 8038 Zurich, Switzerland


This Privacy Policy was created in German with the activeMind AG privacy policy generator and translated into English.

2. Collection and storage of personal data and the type and purpose of its usage

Access data when visiting the website
When you open our website, information is automatically sent to our website’s server by the browser used on your end device. This information is stored temporarily in a log file. Log data contains the IP address of the device that you use to access the website or a service, the type of browser that you use for this access, the website that you have previously visited, your system configuration and the date and time. We only save IP addresses insofar as this is necessary for us to provide our services. Otherwise, the IP addresses are erased or anonymised. We store your IP address when you visit our website and the IP addresses of the visitors to your websites for a maximum of 7 days, in order to detect attacks and defend against them. The stated data is processed by us for the following purposes: to ensure problem-free connection to the website, to ensure easy use of our website, to analyse the system security and stability and for other administrative purposes.

The legal basis for data processing is Art. 6, Para. 1, S. 1f GDPR. Our legitimate interests arise from the purposes of data collection listed above. On no account do we use the data for the purpose of drawing conclusions about you personally.

We also use cookies and analysis services for visits to our website. More information on this is provided in Points 4 and 5 of this Privacy Policy.

For questions of any kind, we offer you the opportunity to contact us via the information provided in the “Contact” section of the website.

Data processing for the purpose of contacting us complies with Art. 6, Para. 1, S. 1a GDPR, on the basis of your voluntarily granted consent.

User account
On our website, we give users the opportunity to create a customer account. Your personal data, such as your title, first name, last name, address, valid e-mail address and password, are entered on the form as mandatory input; we receive this data and store it. When you visit the website subsequently, you can log on directly with your e-mail address and your password in your customer profile, without having to enter your contact data again.

The data is collected to identify you as our customer, to process, fulfil and complete your order, to correspond with you, to issue invoices, to process any liability claims and assert any claims against you, for the technical administration of our website and to manage our customer data.

Data is processed as a response to your registration and/or order and, in accordance with Art. 6, Para. 1, S. 1b GDPR, is required for the stated purposes to process your order appropriately and for the mutual fulfilment of obligations arising from the contract of purchase.

The data we collect to process your order is stored until the statutory retention period has expired; it is then erased. The data is stored for a longer period if we are obliged to do this in accordance with Art. 6, Para. 1, S. 1c GDPR, due to tax and commercial legislation related to retention and documentation obligations contained in the HGB (German Commercial Code), the StGB (German Criminal Code) or the AO (The Fiscal Code of Germany).

3. Cookies

We use cookies on our website. Cookies are small files automatically created by your browser which are stored on your end device (laptop, tablet, smartphone etc.) when you visit our website. The cookies we use do not damage your end device in any way and do not contain any viruses, Trojans or other malware.

The cookie stores information that is generated in connection with the specific end device used. However, this does not mean that we have direct access to information about your identity.

On the one hand, deploying cookies allows us to make our website more pleasant for you to use. For this purpose, we use session cookies to identify your browser and to link it to the content of the virtual shopping cart when you put items in the cart. The session cookies are automatically erased once you have exited the website.

Furthermore, we also use temporary cookies to optimise user-friendliness. These cookies are stored on your end device for a defined period of time. When you visit our website again, the system is automatically aware that you have already visited us and it knows what entries and settings you made. This ensures that they do not have to be entered again.

On the other hand, we also use cookies to create statistics about the use of our website and for the purpose of evaluating the optimisation of our website on your behalf (see Point 5).

We do not use persistent cookies. The data processed by cookies is required for the stated purposes in order to protect our legitimate interests as well as those of third parties in accordance with Art. 6, Para. 1, S. 1f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your end device or so that a message always appears before a new cookie is created. Deactivating cookies completely could mean that you cannot use all the functions of our website.

4. Analysis tools

Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses what are known as “cookies”, i.e. text files that are stored on your computer and that allow your usage of the website to be analysed. The information generated by the cookie about your usage of this website is generally transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google first shortens your IP address if you are in one of the member states of the European Union or in other signatory states to the Agreement on the European Economic Area. It is only in exceptional cases that the full IP address is transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google uses this information to analyse your usage of the website, to compile reports on website activities and to provide further services to the website operator in relation to the website usage and internet usage. Google does not combine the IP address transferred by your browser within the framework of Google Analytics with other data.

The purposes of data processing are related to analysing the usage of the website and compiling reports on the activities on the website. Additional, associated services are then to be provided on the basis of the usage of the website and of the internet. Processing is based on the legitimate interests of the website operator.

You can use the appropriate setting in your browser software to prevent the storage of cookies; however, please note that in this case you may not be able to use all of the functions of this website to the full extent. Furthermore, you can prevent the data generated by the cookie in relation to your usage of the website (incl. your IP address) from being collected by Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link (

You can prevent collection by Google Analytics by clicking on the following link. It sets an opt-out cookie that prevents your data from being collected when you visit this website in the future: <a href=”javascript:gaOptout()”>Google Analytics deaktivieren</a>

More information on terms of use and data protection is available at or at We hereby point out, that Google Analytics has been enhanced with the code “gat.anonymizeIp();” on this website to ensure anonymised collection of IP addresses (IP masking).

Use of script libraries (Google web fonts)
To display our content correctly and in a visually appealing way across all browsers, we use script libraries and font libraries on this website, e.g. Google web fonts ( Google web fonts are transferred to your browser cache to avoid loading them multiple times. If the browser does not support Google web fonts or it does not allow access, content is display in a standard font.

Opening script libraries or font libraries automatically triggers a connection with the operator of the library. It is thus theoretically possible that operators of libraries such as this collect data, however it is currently unclear whether and for what purposes it is collected.

The privacy policy of the library operator – Google – is available at

5. Social media

Link with Facebook
On our website, we use a Facebook icon that has a link to Facebook. If you click on this Facebook icon a new browser window opens and you are taken to the Facebook website via a link. Please see the Facebook privacy information to find out about the purpose and scope of the data collection, further processing and use of the data by Facebook, as well as the related rights and setting options for protecting your privacy.

On the basis of our legitimate interests (i.e. interests in connection with the analysis, optimisation and economic operation of our online presence as per Art. 6, Para. 1f GDPR), we use social plugins (“plugins”) from the social network, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins may be interactive elements or content (e.g. videos, graphics or text elements) and can be identified by one of the Facebook logos (white “f” on a blue tile, the term “Like” or a “thumbs up” icon) or are marked with “Facebook Social Plugin”. The list of Facebook Social Plugins and their appearance can be viewed here:

Facebook is certified under the Privacy Shield Framework, thus providing a guarantee of compliance with European data protection legislation (

When a user uses a function of this online presence that contains a plugin of this kind, his/her device establishes a direct connection to the Facebook servers. The content of the plugin is transferred directly to the user’s device by Facebook and it is integrated into the online presence from there. Usage profiles of the users can thus be created from the data processed.

By integrating the plugins, Facebook is given the information that a user has opened a relevant page of the online presence. If the user is logged onto Facebook, Facebook can match the visit with his/her Facebook account. When users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transferred directly to Facebook from your device and is stored there.

The Facebook privacy information is available to find out about the purpose and scope of the data collection and further processing and use of the data by Facebook, as well as the related rights and setting options to protect the privacy of the users:

If a user is a member of Facebook and does not want Facebook to collect data about him/her via this online presence and link it to his/her membership data stored with Facebook, he/she must log off Facebook and erase his/her cookies before using our online presence. Other settings for and objections to using data for advertising purposes are possible within the Facebook profile settings: or via the USA site or the EU site The settings are platform-independent, i.e. they are adopted for all devices, such as PCs or mobile devices.

Embedded YouTube videos
We embed YouTube videos into some of our website pages. The operator of the relevant plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This informs YouTube which pages you visit. If you are logged onto your YouTube account YouTube can match your surfing behaviour to you personally. You can prevent this by logging off your YouTube account beforehand.

We use YouTube with the “Privacy-Enhanced Mode” option, which prevents the visitor’s usage data about his/her visit being transferred to YouTube without his/her consent.

Those who have deactivated cookies for the Google Ad programme do not generate this type of cookie when they watch YouTube videos. However, YouTube stores non-personal usage information in other cookies as well. If you would like to prevent this you must block the storage of cookies in your browser.

More information on data protection at “YouTube” is available in the provider’s privacy policy at

6. Passing data on to third parties

We pass your personal data onto third parties solely to the service provision partners involved in processing the contract. This includes, for example, the logistics company commissioned with the delivery and the financial institution commissioned with payment matters. In the event that your personal data is passed onto third parties, the scope of data transferred is limited to the minimum required.

If, for your order, you choose to pay via the online payment service provider PayPal your contact details are transferred to PayPal within the framework of the order activated in this way. PayPal is provided by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal takes on the role of an online payment service provider and a trustee, and provides buyer protection services. Please see the PayPal privacy policy for further information relevant to data protection legislation:

If, for your order, you choose to pay via credit card your contact details are transferred to Stripe, Inc., 185 Berry Street, Suite 550, San Francisco, CA 94107, USA, within the framework of the order activated in this way. Please see the Stripe privacy policy for further information relevant to data protection legislation:

Herold Fulfillment GmbH
If, for your order, you choose to pay in advance your contact details are transferred to Herold Fulfillment GmbH, Raiffeisenallee 10, 82041 Oberhaching, Germany, within the framework of the order activated in this way.

The logistics company commissioned with delivery and invoicing is Herold Fulfillment GmbH, Raiffeisenallee 10, 82041 Oberhaching, Germany. We transfer the data required for processing the order (delivery, payment and invoicing) to Herold Fulfillment GmbH. Herold Fulfillment GmbH uses your data to process the order. This data is erased after expiration of the statutory retention periods in accordance with commercial and tax legislation. (A data processing agreement exists.)

Under certain circumstances, the personal data transferred to PayPal, Stripe and Herold Fulfillment GmbH is transferred to credit agencies by the payment service providers. This data is transferred for the purpose of identification control and credit checking in relation to the order you have placed.

The personal data transferred to PayPal, Stripe and Herold Fulfillment GmbH is mostly the first name, last name, address, telephone number, IP address, e-mail address or other data required to process the order, as well as data related to the order, such as the quantity of items, the item number, the invoice amount, the taxes in percent and invoice information etc.

Within the framework of processing the contract, Herold Fulfillment GmbH transfers the required personal data to the delivery company commissioned with the delivery. Should Herold Fulfillment GmbH cede outstanding purchase price debts to a collection agency, the personal data required for this is also transferred to the collection agency.

Passing data on to third parties in this way is necessary to process your order with the payment method you chose, especially to verify your identity and to manage your payment and the customer relationship.

7. Retention period

If nothing specific has been defined we store personal data only for the period required to fulfil the intended purposes. In some cases, the statutory bodies require storage of personal data, e.g. in tax or commercial legislation. In these cases, we continue to store the data solely for these statutory purposes but we do not process it in any other way. It is erased after the statutory retention period has expired.

8. Rights of the data subject

You have the right:

in accordance with Art. 15 GDPR, to demand information about the personal data processed by us. In particular, you have the right to obtain information about the purposes of processing, the categories of the personal data, the categories of recipients to whom your data has or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the right to lodge a complaint, and the source of the data if it has not been collected by us.

in accordance with Art. 16 GDPR, to demand rectification of inaccurate personal data stored by us or the completion of such data, without undue delay.

in accordance with Art. 17 GDPR, to demand the erasure of your personal data stored by us, if processing it is not required to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or for establishing, exercising or defending legal claims.

in accordance with Art. 18 GDPR, to demand the restriction of processing your personal data if you contest the accuracy of the data, processing is unlawful but you oppose its erasure and we no longer need the data, but you need it for establishing, exercising or defending legal claims or you have objected to processing in accordance with Art. 21 GDPR.

in accordance with Art. 20 GDPR, to demand that you receive your personal data that you have provided us with in a structured, commonly used and machine-readable format or that it is transferred to a different controller.

in accordance with Art. 7, Para. 3 GDPR, to withdraw the consent you previously granted to us at any time. This means that we are no longer permitted to continue data processing that was based on this consent in the future.

in accordance with Art. 77 GDPR, to complain to a supervisory authority. Usually, you can contact the supervisory authority of your habitual residence/your place of work/our corporate location for this purpose.

9. Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6, Para. 1, S. 1f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, as long as there are reasons for this that are related to your particular situation or the objection is related to direct marketing. In the latter case, you have a general right of objection which we will implement without a particular situation being stated.

If you want to exercise your right to cancellation or objection all that is required is an e-mail to:

10. Data security

We make every possible effort to ensure the security of your data within the framework of the valid data protection legislation and the technical possibilities and, for a website visit, we use the prevalent SSL procedure (Secure Socket Layer) in conjunction with the highest encryption level that is supported by your particular browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether an individual page of our internet presence is transmitted in encrypted form by means of the closed key/lock icon shown on your browser’s lower status bar.

Furthermore, we use suitable technical and organisational security measures to protect your data from unintentional or intentional manipulation, partial or complete loss, destruction and unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

11. Updating and changes to this Privacy Policy

This Privacy Policy is currently valid as of July 2018. These General Terms and Conditions have been translated from the German original. The German original is the binding version.

Due to the further development of our website and our offerings and in the event of changed statutory/official stipulations, it may be necessary to change this Privacy Policy. You can view the Privacy Policy valid at the particular point in time on the website at

This Privacy policy has been translated from the German original. The German original is the binding version.