Jako registrovaný autor, který vystavuje a nabízí svá díla v ORIGINAL GALLERY, máte od nás výhodu v podobě 5 % slevy na zakoupené zboží.
1. Who works with your data
The controller of the personal data pursuant to Art. 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is Art of All s.46991654, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 172028, with its registered office at: Háje nad Jizerou, Rybnice 100, Postal Code 51301, Czech Republic (hereinafter referred to as: "Controller") and as the Controller we will process your personal data according to the terms set out below.
The Controller has not appointed a data protection officer.
2. Which personal data we process
We only process personal data that you provide to us in connection with your use of our Original Gallery.shop services. These data are:
Artist (exhibitor, author, seller) and Visitor (buyer, collector).
- e-mail address and telephone number
- name and surname
- street + description number
- city + postcode
- state
- password in encrypted form
3. Why we process personal data
The lawful reason for the processing of personal data is, on the one hand, the performance of the contract between you and the controller pursuant to Article 6(1)(a) of the GDPR. (b) GDPR; on the one hand, the legitimate interest of the controller in providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(f) GDPR. The purpose is to process your order.
4. Who has access to your data
The controller declares that it has taken all appropriate technical and organisational measures to secure your personal data. Only authorised persons have access to your personal data.
The third parties who may have access to your personal data to the extent necessary are:
- Persons who provide technical operation and security of our services for us;
- persons to whom we provide data for the purpose of analysing traffic to our website;
- payment gateways.
All data is stored in the Czech Republic.
The controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller.the controller and the exercise of claims arising from these contractual relationships and (in the case of paid subscriptions) subsequently for a period of 10 years after the termination of the contractual relationship. You may exercise any of your rights described below at any time. After the retention period has expired, the controller will delete the personal data.
5. What are your rights in relation to data protection
You provide personal data to us voluntarily. However, we are not able to deliver our services to you without you providing it.
Under the GDPR, you have the right with our company to:
(a) to request access to the personal data we process about you and you have the right to obtain access to that personal data and other information listed in Article 15 of the GDPR,
b) request the rectification of the personal data we process about you if it is inaccurate,
c) request the erasure of personal data (right to be forgotten) in certain cases,
d) request restriction of data processing,
e) obtain personal data relating to you in a structured, commonly usedin a structured, used and machine-readable format, and have the right to transmit that data to another controller,
f) you have the right to object to or complain about processing in certain cases,
g) the right to be informed of a personal data breach in certain cases,
h) other rights set out in the Data Protection Act and the General Data Protection Regulation 2016/679 once it comes into force.
You can exercise each of these rights by contacting us at the contact details below. If we receive your request, we will inform you of the measures taken without undue delay and in any case within one month of receiving your request. This period may be extended by a further two months if necessary and in view of the complexity and number of requests.
In the event that we do not accept your request, we are obliged to inform you without delay and at the latest within one month of receipt of the reasons for not taking action. In certain cases where your request will be unreasonable or unfounded (in particular where the request is unreasonably repetitive), we are not obliged under the GDPR to comply with all or part of your request. In such cases, we may charge you a reasonable fee taking into account the administrative costs involved in providing the requested information or disclosures or taking the requested action. As a data subject, you always have the right to directly contact the supervisory authority, which is the Data Protection Authority.
If we receive your request but have reasonable doubt about your identity, we may ask you to provide additional information necessary to confirm your identity.
If you believe that our company is processing your personal data unlawfully or otherwise violating your rights, our company hasyou have the right to lodge a complaint with the supervisory authority, which is the Data Protection Authority, or you have the right to seek judicial protection.
6. How can you contact us?
If you have any questions, or if you wish to exercise your legal rights or object to receiving further commercial communications from us, you can contact us by email: info@originalgallery.com. You can also address your request by correspondence: Art of All s.r.o., Háje nad Jizerou, Rybnice 100, Postal Code 51301
If you just want to unsubscribe from our newsletter, you can easily do so using the web link that you will always find at the end of the newsletter.
In order for us to verify your identity, we may ask you to provide us with suitable proof of your identity. This is a precautionary security measure to prevent unauthorised persons from accessing your personal data.