Privacy policy

This page explains what personal data we process when you visit our website or contact us, why we do so, and what your rights are.

Contents

Controller

The controller of your personal data is:

ARTIVSPACE s.r.o.
Company ID (IČO): 22067884
Registered office: Školní 301, 257 44 Netvořice, Czech Republic
Registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 410218
Gallery (premises): Benediktská 9, Prague 1

Privacy contact: artivspace@gmail.com, phone +420 737 534 644

We have not appointed a Data Protection Officer because the law does not require us to. Please send any questions to the contact above.

What data we process and why

Artwork enquiries and the contact form

When you send us an enquiry or a message, we process your name, e-mail address, phone number (optional), your message and, where relevant, the artwork you are interested in.

Purpose: to reply to you, send you information about the artwork and, where appropriate, arrange a sale.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Where your message is not about a purchase, our legitimate interest in answering enquiries and communicating with you (Art. 6(1)(f) GDPR).

Visiting the website

When you view the website, our hosting provider processes technical data (e.g. IP address, browser type, time of request) to deliver the site and protect it against misuse. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).

We do not use data from enquiries for newsletters, advertising or profiling – for the newsletter we only use the e-mail address you give us for that purpose.

How long we keep it

Enquiries and messages are kept for 24 months after our last exchange and then deleted. Selling artworks often takes time, and collectors frequently come back to particular works or artists. Two years lets us continue the conversation without keeping data indefinitely.
Newsletter sign-ups (e-mail address) are kept until you withdraw your consent.
If a sale takes place, the data needed for the contract and invoicing are kept for the periods required by law (in particular accounting and tax rules) and for as long as claims may arise from the transaction.
Hosting technical logs are kept by the provider only for a short period under its own policies.

Who we share it with

We never sell your data. The following processors help us handle it:

Netlify, Inc. (USA): website hosting and receipt of form submissions (enquiries, messages, newsletter sign-ups). Netlify is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA are permitted under the European Commission's adequacy decision. Netlify also uses Standard Contractual Clauses.
Google (Gmail): the gallery's mailbox receives notifications of form submissions and holds our correspondence with you. For users in the EU the service is provided by Google Ireland Limited. Data may also be processed by Google LLC in the USA, which is likewise certified under the EU-U.S. Data Privacy Framework.

We share data with anyone else only where the law requires us to (e.g. public authorities).

Cookies and browser storage

We use no analytics or marketing cookies and do not track you.

The website only remembers your chosen language (CZ/EN) and that you have closed the announcement bar for a particular exhibition in your browser's local storage (localStorage). These settings are strictly necessary for features you selected yourself, contain no personal data and require no consent. You can delete them at any time in your browser settings.

The map on the Contact page (Google Maps, provided by Google Ireland Limited) is loaded when you open the Contact page. Google then receives your IP address and browser information and may set its own cookies (e.g. NID); data may also be transferred to Google LLC in the USA (certified under the EU-U.S. Data Privacy Framework). The address is also given in the text and in the links to Mapy.cz and Google Maps. Details: Google's privacy policy (policies.google.com/privacy).

If we start using analytics tools in the future, we will ask for your consent first and update this page.

Event photography

We take photographs at openings and other gallery events. We may publish them on this website and on our Instagram to document events and present the gallery's programme. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We try to publish mainly general views. If you prefer not to be photographed, please tell the photographer or our staff at the event. If you find yourself in a published photo and would like it removed, write to us and we will remove or edit it.

Your rights

You have the right:

of access: to find out what data we hold about you and obtain a copy;
to rectification of inaccurate data;
to erasure, where we no longer need the data or process it unlawfully;
to restriction of processing, e.g. while we assess your objection;
to object to processing based on our legitimate interest (including photographs);
to withdraw your consent to the newsletter at any time;
to data portability: to receive the data you provided to us for pre-contractual purposes in a machine-readable format;
to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz.

To exercise your rights, e-mail artivspace@gmail.com. We will reply without undue delay and within one month at the latest.

Effective date

This policy applies from 6 November 2026. Version 1.0.

If it changes, we will publish the current version on this page.

Version 1.0 · effective from 6 November 2026