Privacy Policy
In force from 11 November 2026
Contents
This policy explains what personal data we collect when you use historianlugano.com, why we do so and what your rights are. It applies under the Swiss Federal Act on Data Protection (FADP) and, for people in the European Union, under the General Data Protection Regulation (GDPR).
1. Who processes your data
The controller is Historian Sagl, Quartiere Maghetti, 6900 Lugano, Switzerland.
For any question about privacy: info@historianlugano.com.
2. What data we collect
- Browsing: IP address, type of browser and device, pages visited, date and time. They are needed to run the site and to protect it.
- Orders: first name and surname, email, telephone, delivery and billing addresses, items purchased, amounts, payment method chosen. For card payments we only receive the outcome and the last digits of the card. When we ship, a telephone number is required: it is used for delivery and we pass it to the carrier. For collection in the shop it is optional.
- Account: the account details, saved addresses, orders, favourites and requests. If you sign in with “Continue with Google”, Google passes us your name and email.
- Requests and forms: what you write to us through the site’s forms (Contact, Sell with us, Valuations and appraisals, Restoration and repairs, Decorate with art, request for information about an item), including the photos you upload.
- Newsletter: your email and the date you subscribed.
- Communications: the messages you send us by email, by telephone or on WhatsApp.
- Statistics: cookie-free visit counts that do not identify you.
3. Why we use them
| Purpose | Legal basis |
|---|---|
| Managing orders, payments, shipments, returns and the legal guarantee | performance of the contract |
| Replying to requests and forms | pre-contractual measures; legitimate interest in replying to those who write to us |
| Managing your account | performance of the contract |
| Sending the newsletter | consent |
| Counting visits and seeing which pages work best, without identifying you | legitimate interest in improving the site |
| Security of the site, protection against spam and fraud | legitimate interest in protecting the site, customers and payments |
| Accounting, invoices and customs and tax obligations | legal obligation |
We do not sell your data. We do not take automated decisions; if you choose Klarna, Klarna may assess automatically whether to offer you payment in instalments.
4. How long we keep them
- Orders, invoices and accounting documents: 10 years, as required by Swiss law.
- Account: until you delete your account.
- Requests and messages: 2 years from the last contact.
- Newsletter: until you unsubscribe.
- Browsing and security data: 30 days at most.
5. Who we entrust them to
We rely on carefully chosen providers. Cloudflare, Google for email and MailerLite process the data on our behalf, under appropriate contracts. Stripe, Klarna, Google for “Continue with Google”, Adobe, the carriers and WhatsApp also process them as independent controllers, under their own policies.
| Service | What it is for | Where |
|---|---|---|
| Cloudflare | hosting of the site, database, photos, form protection (Turnstile), cookie-free visit statistics, sending order and request emails | United States and the countries of Cloudflare’s data centres (list) |
| Stripe | online payments: cards, Apple Pay, Google Pay, TWINT, Klarna and the other methods shown at checkout | Ireland and United States |
| Google Workspace | the shop’s email | United States and the countries of Google’s data centres |
| Google (“Continue with Google”) | signing in to your account with your Google account, only if you choose to | Ireland and United States |
| Adobe Fonts | the site’s typefaces: receives the visitor’s IP address | United States |
| MailerLite | newsletter | European Union |
| Swiss Post, DHL, UPS and FedEx | shipping, customs clearance, tracking | Switzerland and country of destination |
For shipments abroad we pass the necessary data to the carrier and to customs: name, address, telephone, email, contents and value of the parcel.
We also disclose data to our fiduciary for accounting and to the authorities, when the law requires it.
If you write to us on WhatsApp, the messages also pass through WhatsApp (Meta), under its terms.
6. Data transferred abroad
Some providers process data outside Switzerland and the EU, in particular in the United States. In these cases transfers are made to providers certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework, or on the basis of the standard contractual clauses approved by the European Commission and recognised in Switzerland.
7. Your rights
You can ask us at any time to:
- know what data we hold about you and receive a copy;
- correct or complete them;
- erase them, except those we must keep by law;
- restrict their use or object to their processing;
- receive the data you have given us in a machine-readable format;
- withdraw a consent you have given: the withdrawal applies from that moment.
If you have an account, you can edit your details and delete your account directly from there. For anything else write to info@historianlugano.com: we reply within 30 days.
You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, with the supervisory authority of your country.
8. Newsletter
You subscribe only by ticking the dedicated checkbox, which is never pre-selected. Every email contains the link to unsubscribe with one click.
9. Security
The site uses an encrypted connection (HTTPS). Access to the data is limited to the people at Historian who need it for their work, with protected access.
10. Minors
The site is not directed at minors under 18.
11. Cookies
How we use cookies and similar technologies is explained in the Cookie Policy.
12. Changes
We may update this policy. The date at the top shows the version in force.