Privacy Statement
1. Introduction and contact information
At OpenArtExchange B.V. we attach great
importance to the privacy of our visitors and customers. This privacy statement
explains what data we collect, how we use and protect this data, and what
rights you have with regard to your personal data under the General Data
Protection Regulation (GDPR).
If you have any questions about this statement,
you can contact us via info@openartexchange.com and 06-13528118.
2. What data do we collect?
OpenArtExchange B.V. may collect the following personal data:
• Contact details (name, email address, telephone number)
• Address information
• Payment information, if applicable
• Information about art interests or purchases
• Cookies (only essential cookies) and tracking data if used (for example for Google Analytics or other analytical tools)
3. Purposes of data processing
OpenArtExchange B.V. OpenArtExchange B.V. processes your personal data for the following purposes:
• To process orders and art sales
• For customer service and support
• For marketing purposes, such as newsletters (with consent)
• For analytical purposes to improve the website and services
4. Legal basis for processing
OpenArtExchange B.V. processes your personal data on the basis of the following legal bases:
• User consent (e.g. for newsletters)
• Performance of a contract (e.g. art sales and shipping)
• Legal obligations (e.g. tax purposes)
• Legitimate interest (e.g. customer service and website optimization)
5. Sharing data with third parties
OpenArtExchange B.V. only shares your personal data with third parties when this is necessary for our services and only with parties that also process the data in accordance with the GDPR. This may include:
• Logistics partners for shipping artworks
• Payment providers for processing payments
• IT service providers for website hosting and maintenance
All third parties who have access to personal data are obliged to protect them and only use them for the agreed purposes.
6. Security measures
OpenArtExchange B.V. takes appropriate technical and organizational measures to protect your personal data, such as:
• Encryption (e.g. SSL certificates on the website)
• Access control for sensitive data
• Regular audits and updates of the security systems
7. Retention periods
OpenArtExchange B.V. does not store your personal data for longer than is necessary for the purposes for which they were collected, unless there is a legal obligation to store them for a longer period. Our retention periods are as follows:
• Contact details for marketing purposes are retained until the user unsubscribes
• Invoice data is retained according to the statutory tax retention obligation (7 years)
• KYC (Know Your Customer) and CDD (Customer Due Diligence) information is retained according to the statutory retention period (5 years)
8. Rights of data subjects
You have the following rights under the GDPR with respect to your personal data:
• Right to access, correct and delete their data
• Right to restrict processing and data portability
• Right to withdraw consent (e.g. for marketing)
• Right to file a complaint with the Dutch Data Protection Authority if you feel aggrieved
To exercise any of these rights, you can contact us using the contact details in section 1. We will respond within one month of receiving your request.
9. Cookies and Tracking
The OpenArtExchange B.V. website uses essential cookies to improve the functionality of the site and to collect data for analytical purposes. For more information about our cookie policy and how you can manage or refuse your preferences via cookie settings or pop-ups, please refer to our Cookie policy.
10. Changes to this privacy statement
OpenArtExchange B.V. has the right to make changes to this privacy statement. Important changes will be communicated on the website.