Privacy Policy

§1. Data Controller

1. The controller of personal data is:

A-Rent Tomasz Arent
address: Osikowa 16, 05-092 Łomianki
NIP: 837-163-66-30
e-mail: europeanmodernart@gmail.com

hereinafter referred to as the “Controller”.

2. The Controller operates the online gallery European Modern Art, available at:

https://europeanmodern.art

§2. Scope of Processed Data

1. In connection with the use of the online gallery offering products for sale, the Controller may process the following personal data:

a) full name,

b) delivery address,

c) e-mail address,

d) telephone number (where required for order fulfilment),

e) payment and transaction-related data,

f) data necessary for shipment fulfilment.

2. The Controller does not process special categories of personal data.

§3. Purposes and Legal Bases for Data Processing

1. Personal data are processed for the following purposes:

a) On the basis of Art. 6 ust. 1 lit. b RODO for the purpose of order fulfilment and performance of the sales contract. This includes, in particular:

• receiving orders,

• payment processing,

• delivery fulfilment,

• communication regarding the order.
  
  

b) On the basis of Art. 6 ust. 1 lit. c RODO for the purpose of fulfilling the Controller’s legal obligations. This concerns obligations arising, inter alia, from:

• tax regulations,

• accounting regulations,

• consumer protection regulations.
  
  

c) On the basis of Art. 6 ust. 1 lit. f RODO for the purpose of pursuing claims or defending against claims.

The Controller may process personal data for the purpose of protecting its rights or pursuing claims arising from the concluded agreement.

§4. Data Recipients

1. Personal data may be disclosed to entities cooperating with the Controller solely to the extent necessary for the provision of services.

In particular, personal data may be disclosed to:

a) Stripe Payments Europe Ltd. for the purpose of processing electronic payments.

b) courier and logistics companies for the purpose of order delivery.

c) hosting and technology service providers for the maintenance and operation of the online store.

2. The Controller uses hosting services and e-commerce tools provided by Hostinger.

§5. Transfer of Data Outside the European Economic Area

1. Certain service providers used by the Controller may process data outside the European Economic Area.

2. In the event of transfers of personal data outside the EEA, the Controller applies appropriate safeguards required under the RODO, including standard contractual clauses approved by the European Commission.

§6. Data Retention Period

Personal data are retained:

• for the duration of contract performance,

• for the period required under tax and accounting regulations,

• until the expiry of limitation periods relating to potential claims arising from the contract.
  
  

§7. Rights of the Data Subject

Every individual has the right to:

• access their personal data,

• rectify personal data,

• erase personal data,

• restrict processing,

• data portability,

• object to processing,

• lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych).
  
  

§8. Voluntary Provision of Data

The provision of personal data is voluntary; however, failure to provide such data may prevent the fulfilment of an order or completion of a payment transaction.

§9. Automated Decision-Making

The Controller does not apply automated decision-making or profiling with respect to users of the online store.

§10. Contact

For matters relating to personal data protection, the Controller may be contacted at:

e-mail: europeanmodernart@gmail.com