Who We Are And What The Purpose of This Document Is

This Privacy Policy has been drawn up by GALERIA ANCA POTERASU SRL, with registered office in Romania, Ion Brezoianu Street, Bucharest, registered with the Trade Register under number J40/20226/2007 and CUI 22649476 (hereinafter referred to as “we” or “Anca Poterasu Gallery”), as the owner of the platform https://www.ancapoterasu.com/  (hereinafter “Site“) and personal data controller under applicable data protection legislation.

With this document we want to explain why and how we use the personal data of our Website visitors.

Anca Poterasu Gallery reserves the right to periodically update and amend this document to reflect any changes in the way your personal data is processed or any changes in legal requirements. 

The current version of the Privacy Policy is posted on https://www.ancapoterasu.com/politica-de-confidentialitate/ , so please check this policy periodically for any changes.

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”);. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, economic, cultural or social identity.

This Privacy Policy applies to our relationship with visitors to our Site and persons who purchase from or contact us.

This Privacy Policy does not cover other third party applications and sites that you may reach by accessing links on our site. This is beyond our control. We encourage you to review the Privacy Policy of any site and/or application before providing any personal data.

The Categories of Personal Data We Process

Depending on the context in which you interact with our website, we collect and process the following categories of personal data, which we collect directly from you or from other sources:

• name and surname 
• contact number
• email address
• data required invoicing
• data needed to deliver orders i
• any other personal data necessary to provide the services offered by Anca Poterasu Gallery.

The Purposes and the Grounds for Processing

Anca Poterasu Gallery requests and processes personal data for:

• to make it possible to carry out the contractual relationship, i.e. for placing the order, validating, processing, invoicing and dispatching the order placed on the website, informing you of the status of the order, organising the return of the product(s) ordered and other such operations necessary for the performance of the contract
• sending newsletters, invitations, offers of goods and/or services, materials related to our products and information about events or programmes we organise or promote – if you give your consent to do so
• monitoring sales and customer behaviour, administrative purposes, media, etc.
• comply with the legislation in force
• providing answers to questions and requests, including complaints

Legal basis for processing:

• You have given your consent to the processing of personal data

Please note that you can withdraw your consent at any time by following the unsubscribe instructions in each email or by sending a written request to contact@ancapoterasu.ro.

• The processing is necessary for the conclusion or execution of a contract between you and Anca Poterasu Gallery (sale/purchase of artwork)
• The processing is necessary for our legitimate interests or those of another party

To Whom We Disclose Your Personal Data

We disclose your personal data to our external service providers, such as, for example, providers of IT services, accounting services, legal services, marketing services, courier services, payment processors who are authorised by us to process payments, etc.  They will only access and use the personal data necessary for the provision of the services contracted by Anca Poterasu Gallery on the basis of appropriate contractual documentation, the basis of this disclosure being our legitimate interest in contracting and benefiting from the services offered by these suppliers for the performance of our activities.

We may also disclose your personal data as follows:

• to our auditors, consultants, lawyers, or other providers of specialist professional services, if necessary for the provision by them of services contracted by us in view of our legitimate interest or legal obligation to contract for such services; and
• public authorities and institutions, if we have a legal obligation to do so or at their express request, if permitted by law.

We will ensure, within reasonable limits, that your data does not leave the European Economic Area, but to the extent that we transfer data to non-EEA countries, we will ensure in all cases that the transfers are legitimate, based on your explicit consent or other lawful basis.

How long do we keep your data

We store personal data only for as long as necessary to fulfil the purposes, but no longer than 5 years after the termination of the contract or the last interaction with us. 

After the end of the period, personal data will be destroyed or deleted from computer systems or rendered anonymous for scientific, historical or statistical research purposes.

Please note that in certain expressly regulated situations, we store data for the period required by law.

Your Rights

Under the GDPR Regulation, you have the following rights:

• The right to be informed;
• Right of access to your personal data;
• Right to rectify inaccurate or incomplete data
• The right to withdraw consent to the processing of data processed on the basis of consent. Withdrawal of consent will not affect the lawfulness of the processing on the basis of consent prior to the withdrawal of consent;
• The right to erasure of data when the contractual/legal retention period has expired or to withdraw consent (if there is no other basis for processing the data)
• Right to restrict processing
• Right to data portability
• Right to object to data processing
• The right not to be subject to automated individual decision-making, including profiling
• The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing

Questions, Requests and Exercise of Rights

In order to exercise the rights mentioned above, as well as for more details, information or questions regarding the way your personal data are processed, please contact us at the e-mail address contact@ancapoterasu.ro, or in writing, by registered letter or directly at the gallery’s headquarters, 26 Popa Soare Street, sector 2, Bucharest.

Anca Poterasu Gallery will take into consideration any request or complaint received and will send a response within the time limits provided by law.

Anca Poterasu Gallery reserves the right to request sufficient evidence of identification of the data subject (exercising the right conferred by law).

Complaints

If you are not satisfied with Anca Poterasu Gallery’s response or if you consider that the processing is done in violation of the applicable legislation, you may lodge a complaint with the data supervisory authority in Romania: the National Supervisory Authority for Personal Data Processing – located at Bd. Gheorghe Magheru no. 28-30, Bucharest, Romania.

E-mail: anspdcp@dataprotection.ro

We remind you that you can always contact Anca Poterasu Gallery for any dissatisfaction related to the way your personal data are processed by e-mail: contact@ancapoterasu.ro.