The User consents to the collection and processing of their personal data which they have provided to ORIGINAL GALLERY.
The handling of Users' personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and by Act No. CXII/2011 on informational self-determination and freedom of information.
ORIGINAL GALLERY hereby declares that it processes personal data in accordance with the GDPR as the controller of personal data and maintains records of processing activities pursuant to Article 30 of the GDPR.
The User hereby gives their express consent for ORIGINAL GALLERY to use their personal data (or the data provided regarding a legal entity) to contact them for the purpose of sending commercial communications, and to provide such data — to the extent of name, surname/name of the legal entity, residential address/registered office of the legal entity, email address, and possibly date of birth (solely as an identification detail for the purchase contract) — to the Buyer/Seller of a painting presented at www.originalgallery.com.
Personal data is processed by ORIGINAL GALLERY to the following extent: name, surname/name of the legal entity, residential address/registered office of the legal entity, birth number/date and place of birth/company registration number, telephone and email address, nationality, gender, the same data concerning the representative of the legal entity, and credit card and PAYPAL data, namely data provided to ORIGINAL GALLERY voluntarily by the Users themselves. The processing of such data takes place to the stated extent for the purpose of providing the Services of the originalgallery.com Web portal to its Users, in particular the brokering of the sale of paintings exhibited on such portal. ORIGINAL GALLERY processes the aforementioned personal data by automated means for the duration of the Registration of the Registered user and for a period of 5 years after the termination of the Registration.
The processed personal data will be made available only to state administration authorities, should ORIGINAL GALLERY have a statutory obligation to provide them, or, within the framework of a specific brokered transaction, ORIGINAL GALLERY will provide the personal data to the contracting parties of the purchase contract. Every Registered user has the right and the obligation to update their personal data at any time so that it corresponds to reality.
Under the GDPR, every Registered User has the right to request from ORIGINAL GALLERY access to their personal data, its rectification, erasure or restriction of processing, as well as to object to the processing. If the User finds or believes that ORIGINAL GALLERY is carrying out the processing of their personal data in a manner contrary to the protection of their private and personal life or contrary to the GDPR, in particular if the personal data is inaccurate with regard to the purpose of its processing, they have the right to:
a) request an explanation from ORIGINAL GALLERY,
b) request that ORIGINAL GALLERY remedy the situation thus arising. In particular, this may involve blocking, carrying out rectification, supplementing or erasing the personal data.
If the User's request is found to be justified, ORIGINAL GALLERY shall remedy the defective situation without delay. If it does not comply with the User's request, the User has the right to turn directly to the National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság – NAIH).
The controller ORIGINAL GALLERY is obliged to inform, without undue delay, the recipients of the personal data of the User's request referred to above and of the blocking, rectification, supplementing or erasure of the personal data. This shall not apply where informing the recipient is impossible or would require disproportionate effort.