Legal
Privacy policy.
Controller: Sundrbi GmbH, under the brand BOXOHO, Muttenzerstrasse 48, 4127 Birsfelden, Schweiz. Contact: info@boxoho.com.
1. Artwork machine
No personal data are collected by us at the machine. Purchase is anonymous by cash or card. Card data may be processed by the on-site payment provider. A voluntary donation via the Stripe QR code at the machine is likewise processed by the payment provider and does not require any personal data from us.
2. Postcards, subscriptions & newsletter
For shipping and contract fulfilment we collect name, postal address (where needed for physical products), email address, and payment status via our payment provider (Stripe). This covers all postcard products (on-site Single Delivery, prepaid Yearly Card Set, and the postcard subscription) and the paid digital newsletter subscription. If you obtain a postcard product, you automatically receive free, time-limited access to the newsletter for the duration of that product; this access ends automatically when the postcard product expires or is cancelled, unless you separately hold a paid newsletter subscription — your email address is used to deliver the newsletter during that time. Data are used for shipping, digital delivery, customer support, renewal reminders where applicable, and billing. To deliver the newsletter, the email addresses of eligible subscribers are transferred to and processed by Brevo (Sendinblue SAS / Brevo SAS, France), our email marketing provider, under a data processing agreement; Brevo may store the email address, first name, and newsletter status for this purpose. Data are not otherwise shared with third parties except as technically necessary with the payment provider and the postal service. Optionally, with your consent at checkout, a blurred location (~100 km radius) and your first name may appear on the public collectors’ map. The exact address is never shown publicly.
3. Artwork registration
Optional registration of a Tiny Art Surprise may include registration number, first name, last name, street and number, postal code, city, country, email address, map consent, an optional “stay anonymous publicly” choice, and an optional home photo. Name, email and full postal address remain private and are used only for administration, support, and — if you opt in — to calculate an approximate map pin. If you choose to stay anonymous publicly, your real first name is not shown on the public Collection page or on the world map; the public label is “Anonymous collector” / “Anonymous”. If you do not choose anonymity, only your first name may appear next to your artwork. Exact address, email, and other contact details are never public.
4. Collection page & world map
The public Collection page shows Tiny Art Surprise images (or placeholders before a piece is published), sorted by month and day, together with a public collector status: “Not registered”, “Collector: [first name]”, or “Collector: Anonymous collector”. The interactive world map may show blurred pins (~100 km accuracy) for artworks and for postcard/newsletter supporters who gave map consent. Map pins never reveal an exact address. Filters may distinguish artworks from postcard & newsletter connections.
5. Website & hosting
Visiting the website may generate technically necessary data (e.g. server logs, IP address, browser type, time of access) from hosting and delivery infrastructure. Checkout success pages and customer-portal links may process session or email identifiers needed to complete payment flows. Embedded services (e.g. payment checkout via Stripe, interactive maps) may process data as described by those providers, to the extent required for the function you use.
6. Cookies & similar technologies
We use cookies and similar technologies in the following categories. (a) Necessary — always active: language preference, storage of your cookie choice (cookie name boxoho_consent), payment checkout (Stripe), and basic site security/function. Without these, core features may not work. (b) Statistics — only with your consent: optional usage measurement to improve the website. We do not use advertising cookies for this category. (c) Marketing — only with your consent: optional marketing technologies, for example embedded social media content, loaded only after you opt in. You can accept all cookies, allow necessary cookies only, or choose categories under “Settings” in the cookie banner. You can change or withdraw your choice at any time via “Cookie settings” in the website footer. You can also manage or delete cookies in your browser settings.
7. Retention
Personal data are stored only as long as needed for contract, shipping, digital delivery, support, collectors’ registry administration, and legal retention duties, then deleted or anonymised. The cookie-consent cookie is typically stored for up to 12 months and is renewed when you update your choice.
8. Your rights
Under applicable Swiss data protection law you may in particular request access, rectification, erasure, restriction of processing, and object to processing — including withdrawal of map consent, a change of your public anonymity preference, or withdrawal of optional cookie consent (statistics/marketing) where technically possible. Optional cookie consent can also be changed via “Cookie settings” in the footer. Contact info@boxoho.com.
9. Contact
For privacy questions: info@boxoho.com, Sundrbi GmbH, Muttenzerstrasse 48, 4127 Birsfelden, Schweiz.