# A Letter to Time ## Auction privacy notice — Switzerland / France

Controller and purposes

Mauro Carraro, 11 rue Joseph-Pasquier, 1203 Genève, Switzerland, is responsible for the auction’s processing of personal information. Contact: info@maurocarraro.com.

Account and contact details, conditions consent, participant-approval records, bids, winner and order details, payment references, delivery arrangements and necessary technical or security records are used to administer the auction, payment and delivery, answer questions and meet applicable recordkeeping obligations. Bidder identities are not publicly disclosed.

Access is limited to Mauro and the technical providers necessary for those purposes. No participant list or personal participant data is planned to be shared with either contemplated charitable recipient. Necessary auction notifications are separate from optional marketing; no marketing consent is inferred from participation.

Services and processing outside Switzerland

WordPress, WooCommerce and Auction Engine support the website and auction records. Aruba provides hosting; Google supports Studio email; Stripe handles payment processing and related fraud prevention. Contact forms use Cloudflare Turnstile for anti-spam protection where it is present. An optional external bespoke-commission questionnaire is a separate activity, not a requirement for auction participation.

Provider information describes hosting in Italy for Aruba and international processing by Google, Stripe and Cloudflare, including the United States; Stripe also identifies India. Their published safeguards describe applicable transfer frameworks and contractual measures. These descriptions do not promise that auction data remains exclusively in Switzerland or establish identical storage periods across all providers.

Retention and review

Accounting and transaction evidence is kept for the applicable legal period. Where the Swiss accounting retention obligation applies, the relevant evidence is retained for ten years from the end of the relevant financial year. This does not mean that every visitor or participant record is an accounting record.

The auction-specific retention plan provides for manual review of non-winning participant data after twelve months and routine technical logs after ninety days. These are planned review points, not automatic deletion deadlines. Data still needed for an unresolved claim, a documented security incident or an applicable obligation may require longer restricted retention. General Studio accounts are distinguished from accounts used only for the auction.

An automatic auction-specific deletion schedule has not been implemented. Provider systems and recovery backups may have different retention arrangements. Immediate or simultaneous deletion from all systems is not guaranteed.

Information requests

You may contact info@maurocarraro.com to request information about the processing of your data and, where applicable, correction or deletion. The Studio may need to establish your identity before responding. Requests are considered against actual applicable obligations; a deletion request does not automatically erase necessary payment, accounting or dispute evidence. Where applicable, you may also request restriction or object to processing, obtain portability, withdraw consent for processing based on consent, and complain to the competent supervisory authority. These rights depend on the processing and applicable law; withdrawal does not invalidate prior lawful processing. Auction participation is not conditional on optional marketing consent.

Grounds for processing

Steps requested by the participant before entering a contract and performance of the contract support processing necessary for admission, bids, payment and collection. Applicable legal obligations support retention of the relevant records. Abuse prevention, security and the defence of claims rely on the Studio’s legitimate interests, subject to proportionality and individuals’ rights. Consent is not presented as the general basis for administering the sale; marketing remains separate and optional.

At the15October2026 inspection, WooCommerce automatic account and order retention fields were blank. The manual review points described above are therefore not an automatic deletion schedule configured in WooCommerce.

### Additional information and provider sources Data necessary for the account, admission and contract is required to participate; without it the Studio cannot manage participation. Marketing consent is not required. Studio admission decisions are not represented as automated decisions producing legal effects. Contact info@maurocarraro.com for requests and relevant transfer information. Stripe may act as processor or controller depending on the activity; providers are not all represented as having the same role. Provider information: https://stripe.com/privacy ; https://www.cloudflare.com/privacypolicy/ . Complaints may be submitted to the FDPIC (https://www.edoeb.admin.ch/en) or CNIL (https://www.cnil.fr/en), as jurisdiction permits. Public provider policies alone do not establish contractual coverage of every Studio configuration.

### Transfer safeguards and tracking in the sale journey Aruba hosting in Italy involves a country recognised by Switzerland as providing adequate protection. Aruba’s processor appointment is included in article23 of its service terms. The Studio accepted Google Workspace’s Cloud Data Processing Addendum on15October2026; section10 provides applicable transfer safeguards, including standard contractual clauses or a recognised alternative transfer solution. Depending on its role, Stripe processing is covered by its Data Processing Agreement and Data Transfers Addendum, including Swiss adaptations of the standard contractual clauses. Cloudflare’s service terms incorporate its Data Processing Addendum; section6 provides transfer safeguards, including Swiss adaptations. The Studio does not rely on a participant’s general acceptance of transfer risks for this routine processing. The artwork and auction pages and the account and payment journeys disable WooCommerce marketing order attribution. Functions necessary for sessions, security, participation and payment remain separate from marketing. Optional analytics or advertising services are not a condition of participation. Safeguard texts: https://workspace.google.com/terms/dpa_terms.html ; https://stripe.com/legal/dpa ; https://stripe.com/legal/dta ; https://www.cloudflare.com/cloudflare-customer-dpa/ . Information or a copy of relevant safeguards may be requested at info@maurocarraro.com.