Privacy

Privacy policy.

This page explains what personal data FOLIA MUNDI processes, why it is used, how long it is retained and how you may exercise your rights.

Last updated: 24 August 2026

1. Data controller

FOLIA MUNDI is responsible for the processing described on this website. The website is operated in Switzerland under the FOLIA MUNDI name.

This policy is intended to comply with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the European General Data Protection Regulation (GDPR).

2. Data collected and purposes

SituationData concernedPurpose and legal basis
Enquiry, reservation, offer or appointmentName, email address, telephone number if supplied, country, message, selected item and preferred termsAnswering the request, taking pre-contractual steps and managing the possible sale
Purchase and deliveryBilling and delivery details, transaction references and correspondencePerforming the contract, securing delivery and meeting accounting or legal obligations
Privacy-rights requestIdentity and contact details, type and content of the request, technical anti-duplication fingerprintHandling the request and documenting compliance with a legal obligation
Website security and operationTechnical logs, IP address, date, requested resource, browser and security eventsLegitimate interest in preventing abuse, diagnosing faults and maintaining a secure service

3. Forms and correspondence

Required fields are marked as such. Without them, FOLIA MUNDI may be unable to answer or process the request. Please do not submit identity documents, bank details, medical information or other sensitive data through an ordinary contact form.

Form submissions are protected by basic anti-abuse controls. A short technical fingerprint may be stored to identify duplicate privacy requests. Temporary counters derived from pseudonymised fingerprints of the IP address and email address limit abusive submissions and expire within 24 hours. These inactive counters are deleted automatically on a later visit. These controls are not used for advertising or behavioural profiling.

4. Recipients and service providers

Data is accessed only by FOLIA MUNDI and providers needed to operate the website or complete a transaction, such as hosting, database, email, payment, accounting, packing, insurance and delivery providers. Each recipient receives only the information reasonably necessary for its task.

The site uses ChatGPT Sites infrastructure, Cloudflare D1 for form records and Resend to deliver form alerts to FOLIA MUNDI’s official email address. Resend receives only the information needed for that notification.

Personal data is not sold. It is not shared with third parties for their own advertising. It may nevertheless be disclosed where required by law, a competent authority or the defence of a legal claim.

5. International transfers

Some technical providers may process data outside Switzerland or the European Economic Area. Where necessary, FOLIA MUNDI relies on an adequacy decision, appropriate contractual safeguards or another legally recognised transfer mechanism.

6. Retention periods

  • Unsuccessful enquiries and offers: normally up to 12 months after the last exchange.
  • Customer, order, invoice and accounting records: generally 10 years where Swiss law requires it.
  • Privacy-rights requests: normally 3 years after closure, unless a longer period is needed to establish compliance or manage a dispute.
  • Security logs: only for the period reasonably necessary to investigate incidents and maintain the service.
  • Cookie-notice preferences: 6 months.

A longer retention period may apply where a legal duty, dispute, fraud investigation or cultural-property due-diligence requirement makes it necessary.

7. Your rights

Depending on the applicable law and circumstances, you may request access, correction, deletion, restriction, portability or object to certain processing. You may also withdraw consent for future processing without affecting what was lawfully done before withdrawal.

FOLIA MUNDI may ask for proportionate proof of identity before communicating, changing or deleting personal data. Some information may have to be retained to meet a legal obligation or establish, exercise or defend legal claims.

You may also contact the Swiss Federal Data Protection and Information Commissioner, or another competent supervisory authority where applicable.

8. Cookies and local storage

Strictly necessary storage may be used without optional consent to remember privacy choices, protect forms and maintain essential functions. FOLIA MUNDI currently enables no advertising, social-media or non-essential audience- measurement technology.

You can review or change your choice at any time with the “Cookie settings” control displayed on the website. Browser settings may also be used to delete stored data, although blocking essential storage can affect site operation.

9. Security

FOLIA MUNDI applies reasonable organisational and technical measures suited to the size and nature of the service. No online transmission or storage system is completely risk-free. If an incident is likely to create a material risk, notifications will be made as required by applicable law.

10. Updates to this policy

This policy may be updated when the website, providers or legal requirements change. The date at the top of this page identifies the current version. Material changes will be highlighted where appropriate.

Exercise your rights

Send a privacy request.

Use this form for a data-access, correction, deletion or other privacy request. Do not attach or transcribe identity documents here.

Do not include identity documents, bank details or sensitive data in this form.