Privacy Policy – Galerie Portraits

At Galerie Portraits, we take your privacy seriously. This Privacy Policy explains how we collect, use, store and protect personal data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and, where applicable, Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).

1. Data Controller

NameSéfora Camazano

Trading asGalerie Portraits

AddressUrbanización Mas Camarena, Sector A, Valencia, España

Emailinfo@galerieportraits.com

Phone+34 652 066 124

2. Data We Collect

We only collect personal data that is strictly necessary for the normal operation of our services and the management of acquisitions, enquiries, communications and contractual relationships, in accordance with the principle of data minimisation established under Article 5 of the GDPR. The Website and services are intended exclusively for individuals over 18 years of age. Galerie Portraits reserves the right to take reasonable measures to verify age where necessary.

We collect the following categories of personal data:

Identification data Name, surname, billing address, delivery address.

Contact data Email address, telephone number, WhatsApp.

Transaction data Works purchased, order history, payment references (we do not store card numbers).

Communication data Content of messages sent through our contact forms or by email.

Navigation data IP address, browser type, pages visited, time spent, via cookies (see our Cookie Policy).

Collector preferences Artistic interests, preferred media, budget ranges — only when voluntarily provided.

3. Purposes of Processing and Legal Basis

Purpose Legal basis

Managing purchases and sales of artworks Execution of a contract (Art. 6.1.b GDPR)

Responding to enquiries and providing collector advisory Legitimate interest / pre-contractual measures (Art. 6.1.b-f GDPR)

Sending our collector newsletter, where requested Consent (Art. 6.1.a GDPR) — withdrawable at any time

Invoicing and tax compliance Legal obligation (Art. 6.1.c GDPR)

Fraud prevention and website security Legitimate interest (Art. 6.1.f GDPR)

Improving our website and services through analytics Consent (Art. 6.1.a GDPR) via cookie settings

4. Data Retention

We retain personal data only for as long as necessary for the purposes described above and, where applicable, for the periods required by legal, tax or accounting obligations.

Purchase and invoicing data: retained for the legally required periods applicable to commercial, tax and accounting obligations.
Contact and enquiry data: retained for as long as necessary to manage the request and any subsequent relationship.
Newsletter subscribers: retained until consent is withdrawn.
Navigation and cookie data: retained according to the Cookies Policy and the preferences selected by the visitor.

5. Data Recipients and Service Providers

Personal data may be processed by carefully selected service providers acting on behalf of Galerie Portraits, exclusively where necessary for the operation of the Website, payment processing, shipping logistics, communications, hosting infrastructure, analytics, or legal compliance.

These providers may include hosting services, payment processors, shipping partners, email and communication platforms, analytics tools, professional advisors, and competent public authorities where required by law.

Where processing or transfers outside the European Economic Area occur, Galerie Portraits will seek to ensure that appropriate safeguards are in place in accordance with applicable data protection regulations.

6. Data Security

Galerie Portraits applies appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures may include encrypted connections (SSL), restricted access protocols, server-level security protections and secure hosting environments.

While no Internet transmission or electronic storage system can be guaranteed as completely secure, every reasonable effort is made to safeguard personal information and preserve its confidentiality.

7. Your Rights

Under the GDPR and the LOPDGDD, you may exercise the following rights in relation to your personal data:

Access To obtain confirmation of whether we process your personal data and request access to it.

Rectification To request correction of inaccurate or incomplete personal data.

Erasure To request deletion of personal data where legally applicable.

Restriction To request restriction of processing in certain circumstances.

Portability To receive your personal data in a structured and machine-readable format.

Objection To object to processing based on legitimate interest or direct marketing.

How to exercise your rights: Send a written request to info@galerieportraits.com, indicating the right you wish to exercise. Where necessary, identification may be requested in order to verify the identity of the applicant.

8. Cookies

The Website uses cookies and similar technologies. Essential cookies are necessary for the Website to function, while analytical, functional or marketing cookies are only used where legally permitted or with the visitor’s consent. Further information is available in the Cookies Policy.

9. Social Media

Galerie Portraits may maintain profiles on social media platforms such as Instagram, Facebook, LinkedIn, Pinterest or similar services. Interactions through these platforms are governed by the privacy policies, terms and settings of each provider.

Messages, comments or interactions sent through social media may be processed for the purpose of responding to enquiries, managing professional relationships, or providing information about gallery activities.

10. Supervisory Authority

If you believe that your data protection rights have not been properly respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es

11. Changes to this Privacy Policy

Galerie Portraits reserves the right to update or modify this Privacy Policy in order to reflect legal, technical or operational changes. Any updates will become effective upon publication on this Website.