PRIVACY POLICY

This privacy statement provides information about the processing and protection of your personal data.

MARIA AVRAM, owner of www.mariartgallery.com (hereinafter referred to as the 'Website Owner'), acts as a personal data controller for the processing carried out through the website www.mariartgallery.com. She is therefore obliged to protect the personal data of those with whom she interacts in this processing environment.

In this context, the website owner collects and processes personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR/RGPD).

This information note provides all the details required by Articles 12 and 13 of the GDPR about the personal data you provide when accessing and using the website, how it is processed, your rights as a data subject and how to exercise them.

Categories of Data Subjects

This Privacy Policy applies to all individuals who interact with the website, including:

  • Visitors who browse the website;

  • Users who create an account;

  • Customers who purchase products or services;

  • Individuals who contact us through forms, email, or other communication channels.

Categories of Data Collected

The Website Owner may collect and process the following types of personal data:

  • Identification data: name, surname, address, telephone number, email address.

  • Account data: username, password, and any account preferences.

  • Transaction data: details of orders, payments, invoices, and delivery addresses.

  • Communication data: messages sent via contact forms, email exchanges, or customer support.

  • Technical data: IP address, browser type, operating system, device information, approximate location, and cookies.

  • Marketing data: preferences for receiving newsletters, promotional offers, or event updates.

Purposes of Processing

Your personal data is processed for the following purposes:

  • To provide and operate the website and its services;

  • To process and deliver orders, including payment confirmation and shipping;

  • To create and manage user accounts;

  • To respond to inquiries, provide customer support, and handle complaints;

  • To send marketing communications and newsletters, where consent has been given;

  • To improve website functionality, user experience, and security;

  • To comply with legal obligations (e.g., accounting and tax requirements).

Legal Grounds for Processing

We process your personal data based on one or more of the following legal grounds:

  • Consent – when you give explicit permission (e.g., for newsletters or marketing);

  • Contractual necessity – when processing is required to provide services or deliver products;

  • Legal obligation – when processing is necessary to comply with legal or regulatory requirements;

  • Legitimate interest – when processing is necessary to pursue our legitimate business interests, provided that your rights and freedoms are not overridden.

Retention of Data

We retain your personal data only for as long as necessary for the purposes stated above or as required by applicable laws.

Data Sharing and Recipients

Your personal data may be shared with trusted third parties, such as:

  • IT service providers and website hosting companies;

  • Payment processors and financial institutions;

  • Delivery and courier services;

  • Professional advisors (accountants, legal consultants);

  • Public authorities and institutions where legally required.

We will never sell your personal data to third parties.

International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure that adequate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission;

  • Adequacy decisions issued by the European Commission;

  • Binding Corporate Rules of service providers.

Data Subject Rights under GDPR

As a data subject, you have the following rights:

  • Right of access – to obtain confirmation and a copy of your personal data;

  • Right to rectification – to correct inaccurate or incomplete data;

  • Right to erasure (“right to be forgotten”) – to request deletion of your data when no longer necessary;

  • Right to restriction of processing – to request limitation of data use in certain cases;

  • Right to data portability – to receive your data in a structured format and transfer it to another controller;

  • Right to object – to object to processing based on legitimate interest, including profiling and direct marketing;

  • Right not to be subject to automated decision-making – including profiling, without human involvement;

  • Right to lodge a complaint – with the National Supervisory Authority for Personal Data Processing in Romania or your local supervisory authority within the EU.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze traffic, and personalize content. You can manage or disable cookies through your browser settings. For more details, please see our Cookie Policy.

Security of Data

We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • SSL encryption on our website;

  • Restricted access to personal data;

  • Regular monitoring and updates of our IT systems.

However, please note that no method of electronic transmission or storage is 100% secure.

Children’s Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will delete it promptly.

Updates to this Privacy Policy

This Privacy Policy is effective as of 01/09/2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us.

  • Email: edmasterart@gmail.com