Privacy policy
Last updated 09.11.2026
This policy explains which personal data we process on selnau.xyz, for what purpose and for how long. It follows the Swiss Federal Act on Data Protection (FADP).
Controller
Verein Haus im Haus
Selnaustrasse 25
8001 Zurich
info@selnau.xyz
Visiting the website
When you open the website, our hosting provider processes technical data such as IP address, time, page requested and browser details in server logs. This is necessary for secure operation (legal basis: overriding interest). The logs are kept briefly and not linked to other data.
For reach measurement we use Vercel Analytics (Vercel Inc., USA): it counts page views anonymously and without cookies, does not store IP addresses permanently and builds no profiles. The figures are aggregated and cannot be traced back to individual persons.
Applying to an open call
When you apply through the form, you give us your name, email address, a portfolio link and/or a PDF, a statement and the language of your application. We also store the time of your consent.
Purpose: assessing the application and contacting you about it. Legal basis: your consent given in the form. Access is limited to the team members handling the call. A confirmation and the internal notification are sent by email.
Retention: until the call has been decided and for 6 months afterwards; the application and the PDF are then deleted. You can request earlier deletion at any time.
Registering for the open show
When you register a work for the unjuried open show, you give us your last name, first name, email address, date of birth, place of residence and phone number, optionally a website and a social media profile, your answers about helping out (looking after the show, setup, tours), the details of the work including its price and one to three photos of it. We also store the language of the registration and the time of your consent.
Purpose: organising the open show — planning the exhibition, contacting you about the handover, helping out and tours, and on request putting buyers in touch. Legal basis: your consent given in the form. Access is limited to the team members organising the show. A confirmation and the internal notification are sent by email. Messages from the team to all registrants, such as the confirmation of your participation, go out through Postmark’s newsletter sending; as with the newsletter, we measure whether the mail is opened and which links are clicked.
Retention: until the end of the open show and for 6 months afterwards; the registration and the photos are then deleted. You can request earlier deletion at any time.
Newsletter
When you sign up we store your email address, the chosen language and the time of signup as the record of your consent. You can unsubscribe anytime via the link in every issue; the address then stays on file as unsubscribed so that we do not write to it again.
Optionally, first name, last name and organisation can be added — for example when you give them to us at an event; we use them to address you personally. We use this data solely for the Selnau newsletter and do not pass it on.
The newsletter is sent through Postmark. We measure whether an issue is opened and which links in it are clicked (tracking pixel and redirect links) to see what interests you; the analysis stays with us and Postmark.
Unsubscribe any time via the link in every issue or by email to info@selnau.xyz. After unsubscribing we send nothing more; the address is only kept as blocked so that it is not mailed again by mistake. On request we delete it completely.
Abuse protection
To protect the forms against automated submissions we store, for 24 hours, a salted hash (never the plain text) of the IP address a form was sent from. It is deleted automatically afterwards.
Service providers
To run the website we work with providers that process data on our behalf:
Vercel Inc., USA — hosting, delivery of the website, file storage and reach measurement (Vercel Analytics). Uploaded portfolio PDFs are stored there under random, unlisted addresses.
Neon Inc., USA — database; the data is held on servers in Frankfurt (EU).
Postmark (ActiveCampaign LLC), USA — sending of confirmation and notification emails and of the newsletter (including open and click tracking).
Data may be transferred to the USA in the process. The providers commit contractually to adequate data protection (standard contractual clauses or the Swiss-U.S. Data Privacy Framework).
Cookies and local storage
The website sets a single cookie ("selnau-locale", one year) that remembers the chosen language, plus one entry in the browser’s local storage ("selnau-theme") for light/dark mode. Both are technically necessary and contain no personal data. There are no advertising or tracking cookies.
Your rights
You have the right to information about your data, to rectification, deletion and data portability, and to withdraw consent at any time. Write to info@selnau.xyz. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
Changes
We update this policy when the website or the law changes. The version published here applies; the date of the last change is shown at the top.