Personal Data Privacy Policy

Art4you SAS owns and operates the website: www.art4you.gallery and provides related products, services, newsletters and other offerings to art lovers around the world, including the ability to purchase works offered by the artists registered on the site.

We attach great importance to the protection of your personal data. This privacy policy explains how we collect, use and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) which came into force on May 25, 2018 and the Data Protection Act of January 6, 1978.

Who are we ?

The site address is: https://www.art4you.gallery

The site is called: “ Art4You Gallery ”.

The person responsible for processing personal data collected on the Art4You Gallery site, within the meaning of the European General Data Protection Regulation (GDPR), is the company Art4You , registered in the Paris trade and companies register under SIREN number 851140749, and represented by its president.

Types of data collected

When you use the Art4You Gallery site, we may collect the following categories of data:

  • Personal identification information strictly necessary for the processing: name, email address, postal address, telephone number, IP address, depending on the processing concerned (for example, your postal address will not be collected when it comes to 'a newsletter subscription form)
  • Information about your artistic preferences (artistic styles, favorite works, etc.)
  • Information about your preferences for using our services
  • During a commercial transaction: payment card numbers, name and billing address
  • Login ID for the Art4You Gallery site
  • Consent cookies.

Anonymized data

Other data may be collected, such as age, region, gender, for the purposes of statistics on visits to the Art4You Gallery site and interactions with it.

This data is anonymous or anonymized by default and does not allow people to be identified, directly or indirectly (by cross-referencing).

Privacy by design and default

For any data collection and processing operation, we implement this privacy policy by design and by default.

Processing purposes

We use your personal data for the following purposes:

  • Respond to your inquiries and provide customer service
  • Configure and administer your account
  • Provide and improve the Services, including displaying content based on your previous transactions and preferences,
  • Marketing and advertising our Services, including our newsletters (please see the Your Rights/Opt-Out below to learn how to opt-out of marketing communications)
  • Post reviews about our Services
  • Prevent, discover and investigate fraud and criminal activities
  • Prevent and denounce violations of our general conditions of sale and artist submission
  • Secure our site
  • Manage competitions and sweepstakes in which you may have participated
  • Improving our services and personalizing the user experience
  • Defense of our legitimate interests
  • Compliance with our legal and regulatory obligations.

Minimization

We only collect personal data strictly necessary for the specified processing operations.

Legal Basis of Processing

The processing of your personal data is based on the following legal bases:

  • Your consent for certain processing activities
  • Compliance with a legal obligation to which we are subject
  • The defense of our legitimate interests, for example for the execution of a contract or a transaction.

When the legal basis is consent, this must be clearly communicated and established for each identified processing operation.

Data Security

We implement appropriate security measures to protect your personal data against unauthorized access, misuse, alteration or destruction.

Among the measures applied, we can cite:

  • The use of SSL to ensure the security of communications between users and our site. Data is encrypted when transmitted, enhancing privacy
  • Regular and remote backups of the site, to prevent data loss in the event of an incident
  • Reinforced protection in terms of password management and complexity
  • Protection against brute force attacks

We also implement additional security measures and tools, which we do not disclose in this document, in order to guarantee their effectiveness.

Furthermore, we are part of a technological monitoring process, including in terms of security issues, as well as a process of continuous improvement of our technical and operational processes.

However, the absolute security of your information cannot be guaranteed, and any data transmission involves risk.

Cookies

A cookie is a provider of information that a web server can retrieve from your computer when you visit a website. In general, cookies are used to identify a user's computer, they do not contain information allowing them to be identified by name, with exceptions:

Concerning users connected by username/password: a cookie is generated during the connection, in order to maintain the connection status,

For e-commerce transactions, a cookie is stored on your computer so that the shopping cart retains your products while you continue to browse the site.

You can refuse cookies on your browser. In this case, you will not have access to certain features of our services.

Log files

Your IP address is used to diagnose server problems and to operate our website. Art4you Gallery also uses your IP address to analyze trends and gather broad demographic information for purposes of properly using the Service. Some other data is temporarily stored and processed in a log file, such as your IP addresses, browser types, operating systems, the page recalled or the date and time of the recall. This data is only evaluated for statistical purposes, for example to help us diagnose problems with our servers, to administer our sites or to improve our Services as well as to ensure the security of our systems.

Your rights

You have the following rights over your personal data:

  • Right of access: you can obtain information about the processing of your personal data
  • Right of rectification: you can request the correction of your inaccurate personal data
  • Right to erasure: in certain circumstances, you can request the deletion of your personal data
  • Right to restriction of processing: in certain circumstances, you can request the limitation of the processing of your personal data
  • Right to data portability: you can receive your personal data in a structured, commonly used and machine-readable format
  • Right to object: you can object to the processing of your personal data in certain circumstances, in particular for direct marketing.

To exercise these rights, you can contact us through one of the procedures indicated at the end of this document.

International Data Transfers

Your personal data may be transferred to recipients located outside the European Economic Area (EEA), including to countries that do not offer the same level of data protection as your country of residence. In such cases, we ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable legal requirements.

Information sharing

Ar4you Gallery does not sell or rent your personal data to third parties, nor does it transfer your personal data to third parties for marketing purposes.

Sharing of personal data:

Art4you Gallery may share your personal data with third parties as follows:

  • With service providers to help us provide the Services and assist us with our business operations (such as our direct marketing, payment processing, fraud investigation, bill collection, accounting, affiliate programs and rewards, and means of payment)
  • With logistics operators to make deliveries and collections
  • To comply with lawful operations such as a subpoena or similar legal process, including to meet national security or law enforcement requirements
  • When disclosure of personal data is necessary to protect rights or safety, investigate fraud, or respond to a government request
  • During a merger, acquisition or sale of all or part of the assets of the company Art4You Gallery. In such a case, the buyer will be required to inform you by a clearly visible notice on the site of any change of ownership, or use of your personal data, as well as of any choice you may have regarding your personal data.
  • With other users of the Services with whom you interact to help complete a transaction
  • In other cases where we share your personal data with third parties based on your consent.

Data Hosting

The data collected on the Art4You Gallery site is hosted by O2Switch.

Path of the Pardiaux

63000 Clermont-Ferrand

Telecom Operator declared ARCEP09/2989 – AS50474

Siret 510 909 80700032

Data Retention Period

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Subscriber account data

The retention period of data linked to registration for our newsletter, as well as possible competitions and events, depends on the activity of the account:

  • The data is kept indefinitely as long as the account is active (connections to the site, exchanges of emails or letters)

  • For an inactive account, the retention period is 1 year . At the end of this period, an email may be sent to you to ask you if you want to keep your account active. After acceptance on your part, the duration of 1 year will then be renewed.

Order data

Concerning data linked to orders, the retention period of this data depends on the status of the orders.

  • Pending orders: 3 months
  • Failed or abandoned orders: 3 months
  • Canceled orders: 1 year
  • Completed orders: 5 years

Data leak

In the event of a major incident leading to leaks of personal data, and if the risk of creating a high risk for the rights and freedoms of the individual is proven, we undertake to notify the interested parties, after consulting the security organization. control (CNIL):

  • either directly to the person concerned
  • or by public communication.

Protection of minors

Art4you Gallery reserves the right to delete the information or registration of any person who has not reached the age of majority under current French legislation.

Changes to the Privacy Policy

We reserve the right to modify this privacy policy at any time. Any changes will be posted on this page with an updated revision date.

By using the Art4You Gallery website, you accept the terms of this privacy policy.

If you have any questions regarding our privacy policy or the processing of your personal data, you can contact our Data Protection Officer via a contact form available on the site (for example on the home page, or by us writing to the following address:

Art4You Gallery – Data Protection Officer

142, rue de Rivoli 75001 Paris – FRANCE

In the event of a complaint, the control body for France is the CNIL: https://cnil.fr

Last updated: 03/30/2024.