Privacy Policy of ArtRare.art

§1 General information

This Privacy Policy describes how personal data of users of ArtRare.art is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national laws.

§2 Data controller

1. The controller of your personal data is the owner of the ArtRare.art website.
2. You can contact the controller via the contact form or the contact details provided on the website.

§3 Scope of processed data

1. Depending on how you use the website, we may process personal data you provide, in particular: name, email address, phone number (if provided), the content of correspondence, and information included in submitted materials (e.g., descriptions and photos of items for estimation or valuation).
2. The website may also process technical data (e.g., IP address, server logs, device and browser information) to the extent necessary to ensure security and proper operation of the service.
3. Providing data is voluntary, but it may be necessary to perform services or respond to inquiries.

§4 Purposes and legal bases

1. We process personal data to provide estimation and valuation services and to communicate with you regarding your request.
2. We may also process data to handle inquiries, complaints, and to establish, pursue, or defend legal claims.
3. The legal bases for processing are: Article 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract), Article 6(1)(c) GDPR (legal obligations), and Article 6(1)(f) GDPR (legitimate interests of the controller, e.g., security and claims handling).

§5 Data recipients

1. We do not sell personal data and we do not share it with third parties for marketing purposes.
2. Data may be entrusted to service providers supporting the operation of the website and service delivery (e.g., hosting, email tools, payment operators) only to the extent necessary to perform the service.
3. If we use providers whose infrastructure may be located outside the European Economic Area, data may be transferred outside the EEA only in accordance with GDPR requirements and appropriate safeguards.

§6 Data retention

1. We store personal data for the time necessary to provide services, communicate with you, and process settlements.
2. Data may be stored longer if required by law (e.g., accounting obligations) or until potential claims become time-barred.

§7 Your rights

1. You have the right to access your data, rectify it, erase it, restrict processing, data portability, and to object to processing in cases provided for by the GDPR.
2. If processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
3. You also have the right to lodge a complaint with the relevant data protection authority.

§8 Cookies

1. The website uses cookies to ensure proper operation, provide security, and compile statistics.
2. Cookies may include necessary (technical) files and analytics/statistical cookies, if such cookies are used in line with your settings (e.g., via a consent banner).
3. You can manage cookies in your browser settings, including deleting or blocking them. Limiting cookies may affect some website functionalities.

§9 Final provisions

1. The controller reserves the right to amend this Privacy Policy.
2. In matters not covered by this Privacy Policy, applicable laws shall apply.
3. This Privacy Policy is effective from the date of publication on the website.