Privacy policy

Blue Cristal Sagl Via Angelo Frigerio 5 6821 Rovio, Switzerland

For any question about data protection, you can write to giuseppe@cerro.ch.

The website is hosted by Vercel Inc. (United States). Pages are generated in the Frankfurt data centre (Germany) and delivered through an international server network. Each visit automatically records some technical data: IP address, date and time, page requested, browser type and operating system. This data is used only to run the website and protect it from misuse, and it is kept for a limited period.

The photographs are loaded from Cloudinary. To display them, your browser sends your IP address to Cloudinary. Fonts are served directly by our website: there is no connection to Google.

To find out which pages are visited, we use Vercel Web Analytics. It does not use cookies and does not link data to an IP address or to a person: for each page view it records the page, the referring website, the approximate country and location, the device type, operating system and browser. To count visitors without recognising them, it creates a temporary code from the browser request, which is deleted after 24 hours. We only see aggregated data. We do not use advertising or profiling tools.

The website does not use statistics or advertising cookies. It may save a technical cookie to remember the language you have chosen.

The shopping cart is saved in your browser's local storage: it stays on your device and is not sent to us. You can delete it at any time in your browser settings.

On the payment page, Stripe may set its own cookies, which are needed for the payment and to prevent fraud.

If you use the contact form, we process your name, email address, subject and message. The form sends them through the EmailJS service to the mailbox giuseppe@cerro.ch. We use them only to answer your request, including requests for a custom or limited edition print, and keep them as long as needed for this purpose or for any business relationship that follows. The same applies if you write to us directly by email.

To fulfil your order we process your name, email address, delivery address, phone number (for delivery), the prints purchased and the amount paid.

• Payment: handled by Stripe (Stripe Payments Europe, Limited, Ireland, and other Stripe group companies, including in the United States). Card and other payment details are entered directly into Stripe's form and never reach us. Stripe also processes some data under its own responsibility, for example to prevent fraud and to meet legal obligations.
• Printing and shipping: your name, delivery address, phone number and email are sent to our partner print lab, based in Norway, which produces the print in one of its workshops, usually close to the delivery address, and hands it to a courier.
• Switzerland and Liechtenstein: the print first comes to Rovio to be checked; we then ship it to you with Swiss Post or another courier.

We keep data only as long as needed for the purpose for which it was collected. Order data and related business correspondence are kept for 10 years, as Swiss law requires for accounting records. After that they are deleted or anonymised.

For visitors from the European Union, processing is based on: performance of a contract or pre-contractual steps, i.e. orders and requests (Art. 6(1)(b) GDPR); legal obligations, such as keeping accounting records (point c); our legitimate interest in offering a secure, working website, in understanding its use in aggregated form and in answering messages (point f).

Besides the providers listed above, data may be disclosed to the authorities where the law requires it. We do not sell data or pass it on to third parties for advertising purposes.

Data may be processed in Switzerland, the European Union and the European Economic Area (in particular Germany, Ireland and Norway), the United States, Israel, Singapore and, for shipping, the country of delivery. For the United States, adequate protection is ensured for companies certified under the Swiss-U.S. Data Privacy Framework, such as Vercel, Cloudinary and Stripe. For other transfers to countries without adequate protection, the providers commit to standard contractual clauses, or the transfer is necessary to perform the contract with you.

You can ask at any time which data we process about you and request its correction or deletion. You can also object to the processing and receive the data you have provided to us in a common electronic format. Statutory retention obligations remain reserved. Just write to giuseppe@cerro.ch.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, with the data protection authority of your country.

The website uses only encrypted connections (HTTPS). Access to order data is restricted and password-protected.

The links to our Instagram and Facebook profiles are simple links: no data is sent to these platforms until you open them. From then on, their privacy policies apply.

We may update this policy if the website or the services we use change. The version published on this page applies.