Privacy policy

This Privacy Policy is to help you understand what information we collect about you, how we use it and what rights you have, we’ve prepared

​

​

1. General

This Privacy Policy applies to the online platform JORVIS (“Website”) and to the associated app (“App”) (the Website and the App are jointly referred to as the “Platform”).

​

The Platform is operated by JORVIS ART BOOKING, having offices at [av tivoli 27 a 1007 lausanne ] Switzerland. The operator is further referred to as “We”, “Us” or “JORVIS”.

​

JORVIS is responsible for processing data about you that is collected or received in the course of our offers or cooperation with you or that is processed for other purposes as defined in this data privacy policy.

We take your privacy extremely seriously. All personal data will be collected, stored and used by us in accordance with Swiss data protection law as well as any applicable foreign data protection legislation such as, in particular, the General Data Protection Regulation (GDPR) of the European Union (EU). The European Commission recognizes that Swiss data protection legislation provides an adequate level of protection.

This Privacy Policy describes which of your data we collect and for what purposes we collect and use it when you use the services offered by us on the Platform. This Privacy Policy also contains important information on the protection of your data, especially the statutory rights you have in connection with it.

Certain services on our Platform are offered by third-party suppliers. When you use these services, the data protection regulations of the third-party suppliers will then apply in addition to this data protection statement. Prior to your use of such services, the third-party suppliers may require you to provide permission under data protection law.

By using the Platform and our services, you enter into a legally binding contract between you and JORVIS, under conditions which are described in our Terms and Conditions. 

​

2. Terminology

​

1) “Personal data" is any information that relates to an identified or identifiable natural person or legal entity, insofar as the latter is protected by the law. This may include, for example, your first and last name, postal address, e-mail address, date of birth, telephone number, as well as data relating to the use of our website and your preferences. These data protection provisions also use the term "your data". Information that cannot be directly or indirectly linked to your person, i.e. your identity, is not in principle personal data.

“Processing" means any operation or set of operations that is performed on personal data, whether or not by means of automated processes, such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction of your data.

Please note that third-party websites that can be accessed via our offers have their own data protection statements to inform you how they handle your data. We assume no responsibility for the data protection compliance of these third parties and recommend that you consult the relevant declarations on the websites of the third parties.

​

​

3. Why and how do we collect and use your personal data?

​

1) To provide our services and allow you to use our Platform

We collect and use your personal data to allow you to use our Platform, to provide our services and to perform a contract with you and especially to undertake commercial transactions via the Platform, to use the electronic payment system or to leave reviews and communicate with other members. To use these services, you need a JORVIS account. For this purpose, you must register as a member on the Website or App.

Part of your data is required to fulfill our legal obligations when you are a member of our Platform. In case you do not provide us with this personal data, we will not be able to comply with legal requirements and provide our services.

This data is also used for the improvement of the Platform in order to make it a better experience for our members.

We collect and use your personal data for these purposes until the deactivation of your JORVIS account or for 5 years of inactivity on your account.

​

1.1)  To enable registration as a user of JORVIS

When you register as a member on the Platform, you must provide the following data in order to carry out the registration procedure and access your JORVIS account:

1. Name

2. User name (necessary when you register without a Facebook or Google account);

3. Email address;

4. Confirmation that you are aged over 18;

5. Password (necessary when you register without a Facebook or Google account).

​

Legal basis for the collection and use of data is the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract.

We also determine your location (country) based on your IP address at the time of registration to show on your profile. You can at any time choose to change your location (country, city or region) and make your city or region not visible to other members under "My settings" in your JORVIS account.

We collect and use your personal data for this purpose until the deactivation of your JORVIS account or for 5 years of inactivity on your account.

​

1.2)  To authenticate you via Google, Facebook or Apple ID 

​

If you register using your Google Ireland Ltd. (Ireland), Google LLC (USA) (“Google”) or Meta Platforms Ireland Ltd. (Ireland), Meta Platforms, Inc. (USA) (“Facebook”), or Apple Inc. (USA) (“Apple”) account or later on decide to connect your Google, Facebook or Apple account to your JORVIS account, you will be transferred from our Platform to the website of Google, Facebook or Apple and asked to enter the log-in details for your Google, Facebook or Apple ID account.

​

If you enter your Google log-in details, JORVIS will receive from Google the following data from your Google account (you may choose not to provide some data):

1. Profile photo;

2. Full name;

3. Google account ID;

4. Email address.

​

If you enter your Facebook log-in details, JORVIS will receive from Facebook the following data from your Facebook account (you may choose not to provide your email address):

1. Profile photo;

2. Full name;

3. Email address;

4. Facebook account ID.

​

If you enter your Apple ID log-in details, JORVIS will receive from Apple the following data from your Apple ID account (you may choose not to provide your email address by using Apple’s Private Email Relay Service):

1. Full name;

2. Email address;

3. Apple ID.

​

The data we obtain from Google, Facebook or Apple will be used to set up your JORVIS account. This means that we will use the member name of your Google, Facebook or Apple ID account as the member name for your JORVIS account so that it will be visible to other visitors to the Website and users of the App. Other data obtained from Google, Facebook or Apple will not be visible to anyone on the Platform.

​

1.3)  To enable you to complete and set up your user profile 

If you decide to add profile details to the account you create on the Platform, we collect and use the following data when you choose to provide it:

1. Full name;

2. Profile photo;

3. Information that you choose to provide in any dedicated field (About: Bio / Profile).

​

Your profile photo, and the information you may provide in the "About You" field are visible to other users of the Platform, but the remainder of the data entered by you is not visible.

​

1.4) To show your activity on the Platform to other users 

• To enable you to list your items or services provided by you

• To enable notifications on the Platform 

• To enable you to communicate with other members

• To enable you to leave reviews to other members 

• To receive reviews from other members

• To enable you to post and discuss with our community

​

1.5) To provide you with customer support service

1.6) To improve your experience when using the Platform

​

We collect and use your personal data in order to improve your experience when using the Platform by enabling you to personalize your feed and search results, providing you relevant suggestions and keeping your previous searches, sending you notifications and otherwise making the use of Platform more pleasant. 

​

1.7 To ensure the security of your account and the Platform

Through your use of the Platform, we may also gather certain information about your use of the Platform that does not identify you individually. Generally, this information is collected through "traffic data." We may collect and store such information automatically whenever you interact with the Platform. For example, we may collect your IP address, the hostname of your computer, browser information and reference site domain name every time you visit the Website. We may also collect information regarding customer traffic patterns and site usage. This information does not, however, contain anything that can personally identify you; it is used to analyze and improve the Website and to provide our customers with a fulfilling Internet experience. Please see the section below regarding cookies for more information about our use of cookies and when we will ask for your consent

This data is used for security purposes, especially the prevention of cyberattacks such as data scraps and denial of service attacks and for preventing impermissible multiple applications.

​

1.8) Password reset

1.9) Account verification in case of suspicious actions

1.10) Compliance with our Terms and Conditions and enforcement

1.11) Detection, suspension or blocking of compromised accounts

​

Depending on your usage of the Platform, and according JORVIS Terms and conditions, your account may be blocked, either temporarily or permanently.

We may set up profiles of harmful users such as fraudsters, sellers listing counterfeited items, based on criteria identified by JORVIS, notably as a result of reporting on harmful users. 

​

1.12) To enable you to pay and receive payments on our Platform

When you purchase a product or use a paid service on JORVIS, you will be required to provide certain information, such as your first and last name, your address (full postal address, postal code, location) and possibly other data (e.g. delivery address, billing address, payment information etc.); this information is necessary for us to be able to execute the contract with you in accordance with the applicable data protection law. 

If you choose an online payment option such as credit card (via STRIPE)  for the purchase of a paid product or service, payment is made via the online payment system of the respective supplier. In this case, the processing of personal and payment data is carried out directly via the provider of the relevant payment system. We do not know or store your payment data. In addition, the data protection regulations of the online payment system provider apply.

Payments on the Platform are carried out via payment service providers that provide payment processing and escrow services.

​

1.13) To carry out marketing activities and to send you marketing emails

You can register for our newsletter and for other marketing emails ("Marketing Emails"). When you register, we will ask you for your permission to use your email address for the purposes of sending you Marketing Emails containing the latest information on our products and services, special offers and marketing campaigns. If you do not give your consent when registering, you can at any time change your mind and agree to receive Marketing Emails by adjusting the settings on your JORVIS account.

We base such collection and use on your consent.Your permission for the sending of Marketing Emails can be given and withdrawn by you at any time with future effect. In your JORVIS account, you can adjust your settings to choose what emails you wish to receive or disable the sending of any further Marketing Emails. Alternatively, you can click "unsubscribe" at the end of the Marketing Email. Withdrawal of permission will not affect the lawfulness of the collection and use carried out prior to the withdrawal of permission.

In order to send Marketing Emails, JORVIS uses service provider Wix Email which is established outside the European Economic Area. In this case the personal data is protected by the service provider entering into the EU standard contractual clauses for the transfer of data as approved by the European Commission.

​

1.14) To enable us to post your content on our social media accounts

If you allow us, we will post your content on our social media accounts for marketing and PR purposes. You can, at any time, give and retract your consent by logging in on the Platform, visiting Privacy Settings and changing relevant settings.

In order to post your content on our social media accounts, we provide data to social media platform operators.

The following social media platform operators are established outside the European Economic Area, which may result in your data being transferred outside the European Economic Area. In these cases the personal data is protected by the operators entering into the EU standard contractual clauses for the transfer of data as approved by the European Commission:

1. Google LLC (USA);

2. Meta Platforms, Inc. (USA) (for Facebook and Instagram)

3. LinkedIn Corporation (USA);

​

1.15) To allow you to see personalized advertisements

Upon your consent, JORVIS will allow advertising service partners to collect your IP address and/or mobile device identifier, and place their cookies on your devices and then use the data to personalize advertisements presented to you. This means that, with your consent, you will receive advertisements based on your interests and your activity on the Platform. 

To the extent it involves personal data, we base such collection and use on your consent. You can, at any time, choose not to receive personalized marketing and advertisements by changing relevant settings on the Platform. Withdrawal of permission will not affect the lawfulness of the collection and use carried out prior to the withdrawal of permission.

Information for this purpose is collected by advertising service partners and not stored by JORVIS.

​

1.16) Managing social media profiles

In order to manage our social media accounts, we receive and provide data to social media platform operators.

The following social media platform operators are established outside the European Economic Area, which may result in your data being transferred outside the European Economic Area. In these cases the personal data is protected by the operators entering into the EU standard contractual clauses for the transfer of data as approved by the European Commission:

1. Google LLC (USA);

2. Meta Platforms, Inc. (USA) (for Facebook and Instagram)

3. LinkedIn Corporation (USA);

Personal data collected and used for this purpose are kept as long as you are registered on a specific social media network.

​

1.17) Joint Controllership with Facebook (''page insights”)

JORVIS operates a page on the social media platform of Facebook. Facebook and JORVIS are only jointly responsible for the processing of data insofar as this data is used for the creation of so-called "page insights" and only for the data collection phases from JORVIS's fan page until its transmission to Facebook. For other data processing, JORVIS and Facebook are separately responsible for data processing.

Within the scope of their joint controllership, JORVIS and Facebook have entered into an agreement (so-called "page insights controller addendum"). The agreement covers the data processing that is collected and used in connection with a visit or interaction with our Facebook page, but only to the extent that this data is also (subsequently) processed for "page insights". "Page insights" includes analysis services that help us to better understand interactions on our site. In this context, we do not receive any personal data from Facebook, but only an anonymous evaluation and illustration. Facebook provides more information on this on its help page for "page insights". The information about data for "page insights" explains how "insights data" is collected and used to create "page insights". This includes the following actions:

The processing of the data of the visitors of our fan page serves the purpose of providing the page as well as the statistical evaluation of the use of our page. This evaluation is made anonymous for JORVIS. Our legitimate interests in the processing of personal data when visiting the JORVIS Facebook page and the creation of the "site insights" consist of presenting the company and the Platform and, for example, contacting members and interested parties and providing information about products and promotions, as well as the collection of data for the creation of anonymous evaluations and illustrations about the use of our fan page.

In accordance with our agreement, Facebook assumes primary responsibility for fulfilling the obligations for the joint processing of "insights data". Facebook provides more details on how to exercise these rights in the "page insights data" information.

​

1.18) To handle your requests related to personal data

​

1.19) To provide information to law enforcement and other official auhorities

If we have reasonable grounds to suspect that you are involved in illegal activities, we will collect and use necessary data of your profile data, data related to your activities on the Platform and data collected and used for security purposes in order to notify the law enforcement and other official authorities. JORVIS also provides the aforementioned data to law enforcement and other official authorities when we receive official requests for information in relation to investigations carried out by these authorities.

​

1.20) To defend our rights against chargebacks

If you have transactions via our payment service providers, we will collect and use your personal data held by JORVIS to the extent necessary to resolve a particular situation.

We base such collection and use of your personal data on a legitimate interest to defend our rights in case a chargeback procedure is initiated against JORVIS. Personal data collected and used for this purpose are kept as long as legally necessary to defend our rights.
 

1.21) To defend the rights and interests of JORVIS

If you get involved in a dispute with JORVIS or we need to carry out enforcement or otherwise defend, enforce, exercise and uphold our rights, we will collect and use all of your personal data held by JORVIS to the extent necessary to resolve a particular situation.

​

2. Duration of personal data storage

​

We process and store your personal data to the extent that it is required to fulfil our contractual and legal obligations or for the purposes pursued by the processing, which means, for example, for the entire duration of the business relationship (from the initiation and performance of a contract to its conclusion) and beyond that in accordance with legal obligations for storage and documentation as described. It is therefore possible that personal data is stored for the period of time when claims can be made against JORVIS and to the extent that we are legally obliged or authorized to do so, legal retention obligations based on bookkeeping or tax laws and regulations or legitimate business interests necessitate this (e.g. for evidence or documentation purposes).

​

​

3. Recipients of personal data

​

Your personal data is neither transferred nor sold or otherwise transmitted to third parties in any form, unless this is required for the purpose of processing a contract or to fulfil our statutory tasks, or if you have expressly consented to this (e.g. to ensure the security of the entry forms on our website). In addition, data may be transmitted to third parties if we are under obligation to do so by law or by an enforceable official or court order.

Some recipients of such data are located in Switzerland but can also be anywhere in the world. If we transmit data to a country that does not have appropriate data protection, we ensure an appropriate level of protection by employing contracts accordingly, or we act on the basis of the following statutory/legal exemptions: consent, performance of the contract, the establishment, execution or enforcement of legal claims, overriding public interests, published personal data, or the need to protect the integrity of the persons in question

Service providers to which your personal data are transferred or shared with for specific purposes are described under Section 3 above.

We constantly conduct and improve technical maintenance of the Platform to protect the security and confidentiality of personal data we process and to perform certain business-related functions that help make our services available and functional. 

The following service providers are established outside the European Economic Area, which may result in your data being transferred outside the European Economic Area. In these cases the personal data is protected by the service providers entering into the EU standard contractual clauses for the transfer of data as approved by the European Commission:

1. Amazon Web Services, Inc. (USA);

2. Google LLC (USA);

3. Apple Inc. (USA);

4. Microsoft Corporation (USA);

JORVIS may share your data with third parties when transferring rights and obligations pertaining to the contractual relationship between you and JORVIS to such third parties in accordance with our Terms & Conditions, in particular in the case of the transfer of a sector of activity, a merger through the foundation of a new company, a merger through absorption, de-merger or any change in control affecting JORVIS. Prior to such an event, JORVIS will inform you separately about the details of sharing your data and will obtain your consent where legally necessary.

​

​

4. Use of cookies- cookie notice

​

We use cookies and other similar techniques which can identify your browser or your device.

A cookie is a small file which is sent to your computer or stored automatically on your computer or mobile device by your web browser when you visit our website. If you visit this website again, we can then recognize you even if we do not know who you are. In addition to cookies which are only used for one session and are deleted after your visit to the website ("session cookies"), permanent cookies can also be used to save your user settings and other information for a specific duration of time (e.g. two years). However, you can adjust your browser settings so that it rejects cookies, only saves them for one session, or deletes them after a set time. Most browsers are pre-set to accept cookies. We use permanent cookies to better understand how you use our offers and content. If you block cookies, it is possible that certain functions (e.g. language options) will no longer work.

To the extent permitted, we sometimes integrate visible and invisible figurative elements into our newsletters and marketing emails which, when retrieved from our servers, allow us to know if and when you have opened the email. In this way, we can also measure and better understand how you use our offers, and can tailor them to you. You can block them in your email program. 

​

4.1) Google Analytics

We sometimes use Google Analytics on our Platform, which is a service by third parties that could be located anywhere in the world (in the case of Google Analytics, it is Google LLC in the USA, www.google.com).

Google Analytics allows us to measure and evaluate the use (non-personal) of the website. For this purpose, permanent cookies are also used, which are set by the service provider. The service provider does not receive any personal data (and does not store any IP addresses) but can track your use of the website, combine this information with data from other websites you have visited and are also tracked by the service provider, and use these insights  for its own purposes (e.g. to tailor advertising). If you have registered yourself with the service provider, then this service provider also can identify you. The processing of your personal data by the service provider is therefore the responsibility of the service provider in accordance with its own data protection provisions. The service provider merely informs us as to how our respective website is used (no personal information about you).

We have activated IP anonymization on this website, which means that the IP addresses of visitors to the IPI website that must be sent to the Google Analytics server are automatically shortened by removing the final digits within a very short time.

For more information, see Google Marketing Platform.

4.2) Pixels and Social Plug-ins

We also use other technologies on our Website which allow us and Third Party Providers to offer you a more personalized and engaged web experience, e.g. by offering you advertisements on your social media channels that are more relevant to you or by allowing you to share your experiences on our Website via social media. We therefore use the following technologies:

- Facebook pixels. Facebook pixels are small pieces of software and are nearly invisible pixel-sized “dots” on our Website which create a link between your visit to our Website and Facebook. This cookie has a lifespan of 90 days. More information on Facebook cookies can be found here: https://www.facebook.com/policies/cookies/. Please note that when the “fr”-cookie is placed, Facebook is able to follow your surfing behavior across other websites which have implemented a Facebook pixel or Facebook social plug-in.

- Pixels. A Pixel is a snippet of HTML code that loads each time you visit our site while logged into the dedicated application. This allows us to better understand how you interact with our site and to optimize our advertising campaigns. 

 - Social plugins. Social plug-ins are small pieces of software which create a link between your visit to our Website and the social media platform of a Third Party Provider. The social plug-in will let the Third Party Provider know that you have visited our Website and may let the Third Party Provider receive cookies he has placed on your computer beforehand. We use social plug-ins of the following Third Party Providers:

- Facebook

- Twitter

- LinkedIn

- Pinterest

- Google

​

Please note that we have no control over how these social plug-ins work, the data that they collect or what the Third Party Provider does with this information. For more information on how these Third Party Providers use your personal data collected via their social plug-ins, you are kindly referred to their respective privacy policies.

​

​

5. Your statutory rights regarding your personal data

​

Within the scope of the applicable data protection law and to the extent required by the law (e.g. in the case of the GDPR), you have the right to information, amendment, deletion, the right to restrict the processing of data and otherwise to refuse permission to our processing of the data as well as the publication of certain personal data for the purpose of transfer to third party (known as data portability). Please note, however, that we reserve the right to enforce the restrictions required by law, for example in cases where we are obliged to store or process certain data, have an overriding interest to do so (to the extent that we may call on it) or require it to assert claims. We will inform you in advance if this incurs any costs for you. Please note that exercising your rights can conflict with contractual agreements, which can have consequences, such as the premature termination of a contract or incurred costs. In such cases, we will inform you in advance where this is not already contractually or legally regulated.

5.1What rights do you have?

Subject to conditions, limitations, and exceptions established by statutory data protection provisions, you have the right at any time:

• to be informed of the data we collect and use and to request access or demand a copy of the data concerned (right to access). All the data that you have actively provided for us on the Platform can also be accessed by you at any time in your JORVIS account;

• to demand the correction of inaccurate data and, subject to the nature of the collection and use, the completion of incomplete data (right to rectification). All the data that you have actively provided us with on the Platform can also be amended by you yourself at any time in your JORVIS account (except sent messages and any forum posts or reviews);

• subject to just cause, to demand the deletion of your data (right to deletion);

• to demand restriction of the collection and use of your data, provided the statutory criteria are met (right to restrict processing);

• subject to the statutory criteria being met, to receive the data you have provided in a structured, current, and machine-readable form and to transfer this data to another data controller or, where technically feasible, to have it transferred by JORVIS (right to data portability);

• to object to the collection and use of data – only where the collection and use is based on a task carried out in the public interest or in the exercise of official authority vested, including profiling, based on the same data collection and use grounds as explained in other sections of this statement (right to object). You also have the right to at any time object to the collection of your personal data for direct marketing purposes;

•  to withdraw at any time any permission you have provided to us. Such withdrawal will not affect the lawfulness of the collection and use carried out prior to withdrawal and based on the permission granted. You can withdraw your permission for the sending of our newsletter by adjusting your JORVIS account settings to block the sending of any further Marketing Emails. Alternatively, you can click "Unsubscribe" at the end of the Marketing Email;

To exercise any of the rights specified in this section, you can contact JORVIS and submit your request using the contact details (provided in Section 9 below).

 Furthermore, every person affected has the right to legally enforce their claims or to submit a complaint with the responsible data protection authority. The responsible data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

5.2 How will we verify your request?

Your request must provide sufficient information that allows us to reasonably verify you are the person or an authorized representative of a person whose personal data we have collected (name, surname, your public profile URL, your e-mail, other information we may request for verification purposes), describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it, provide a confirmation under a penalty that you are the individual whose personal data is the subject of the request.

If your request is submitted by an authorized agent, a written permission and information that verifies the identity of the agent must be enclosed with the request.

We cannot provide you with the information or exercise your other right if we cannot verify your identity or authority to make the request and confirm the information relating to you.

In order to verify your identity, we may request you to provide additional information about yourself. We will only use this information and information provided in the request to verify your identity or authority to make the request. 

​

​

6. Final Provisions

We may modify this Data Privacy Statement at any time. We will inform you about changes and additions in suitable form, in particular by publishing the latest version of the Data Privacy Statement on our website or within our App.

​

​

7. Our contact details

If you have any queries regarding the collection and use of your data as part of your use of the Platform, or regarding your rights, please contact us at hello@jorvisartbooking.com

JORVIS Sàrl:

N° registre commerce: CH-550.1.224.534-4, 1007 Lausanne, Switzerland

​