Privacy Policy

Who We Are

The Art Room Gallery, S.L. is a company registered in Spain under tax identification number B75541896. We are the data controller responsible for your personal data under the EU General Data Protection Regulation ("GDPR").

In this policy, "The Art Room", "the Gallery", "we", "our" or "us" refer to The Art Room Gallery, S.L. You can reach us at contact@theartroom.gallery

What This Policy Covers

The Art Room is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and share personal information when you access or interact with the The Art Room website and related digital services, including virtual and 3D exhibitions (collectively, the "Website").

By using the Website, you consent to the practices described in this Privacy Policy.

This policy explains:

• What personal data we collect and why
• How we collect and use your personal data
• How cookies and similar technologies are used
• How we communicate with you
• When and why we share personal data
• How we protect personal data
• Your rights under applicable data protection laws
• How to contact us

This policy also applies when you contact us directly or when we contact you.

Personal Data We Collect

For purposes of this Privacy Policy, "Personal Data" means any information that identifies or can reasonably be linked to an identifiable individual.

Information You Provide Directly

We may collect personal data when you:

• Subscribe to newsletters or mailing lists
• Register interest in exhibitions or artists
• Contact us via forms, email, or social platforms
• Create or update an account (if applicable)
• Participate in virtual exhibitions or events
• Make a purchase or inquiry

This may include:

• Name
• Email address
• Country or city of residence
• Professional or artistic interests
• Communication preferences

Where you make a purchase, additional information such as billing and shipping details is collected. Card details are processed securely by our payment provider and are not stored by us.

Information Collected Automatically

When you browse the Website, we may automatically collect:

• IP address
• Device and browser type
• Operating system
• Pages visited and time spent
• Referring URLs
• Approximate geographic location
• Interaction data within virtual or 3D exhibitions

This data is used for analytics, security, and performance optimization.

Communications Data

If we send you emails or digital communications, we may collect:

• Whether an email was opened
• Whether links were clicked
• Subsequent interactions with the Website

You may avoid such tracking by not clicking on embedded links.

Aggregated and Anonymous Data

We may collect aggregated or anonymized data for statistical and analytical purposes. This data does not identify individual users and is used to understand audience behavior, improve the Website, and evaluate interest in exhibitions.

How We Use Your Personal Data

We process personal data for the following purposes:

• To operate and maintain the Website
• To provide access to virtual exhibitions and content
• To respond to inquiries and provide support
• To send newsletters or updates you have requested
• To understand audience interests and improve offerings
• To process transactions, where applicable
• To ensure Website security and prevent misuse
• To comply with legal obligations
• To support business operations and future development

We only process personal data where a valid legal basis exists, including consent, contractual necessity, legitimate interest, or legal obligation, in accordance with the GDPR.

Communication Preferences

You may receive communications from us if you have opted in or requested information.

You may:

• Unsubscribe from marketing emails at any time using the link provided
• Contact us to update or remove your communication preferences
• Request complete removal from all non-essential correspondence

Transactional or administrative communications may still be sent where necessary.

Sharing of Personal Data

We do not sell or trade your personal data.

We may share personal data only in the following circumstances:

• With trusted service providers who assist in operating the Website (e.g., hosting, database, email, analytics, and payment services), under confidentiality obligations and only for the purposes we instruct
• With our print-production and fulfilment partner, where you order a print, to produce and deliver your order
• Where required by law, regulation, or legal process
• In connection with a business transfer or restructuring

Artists featured on The Art Room are independent third parties. We do not share your personal data with artists unless necessary for a transaction or explicitly consented to by you.

Cookies and Similar Technologies

We use cookies and similar technologies to ensure Website functionality, remember your preferences, and — with your consent — analyze usage to improve performance and experience.

Strictly necessary cookies are essential for the Website to work and cannot be disabled. Analytics cookies are optional and are only set after you accept them in our cookie notice.

With your consent, we use Google Analytics to understand how visitors navigate the gallery (such as pages and exhibitions viewed, approximate country, and device type). You can decline at any time, or change your choice later, via the "Cookie Settings" link in the footer — declining does not affect your use of the Website. Analytics data is retained for 14 months.

Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encrypted communications (HTTPS)
• Restricted access to systems
• Secure hosting environments
• Regular security monitoring

While we take reasonable precautions, no system is completely secure. Transmission of data is at your own risk.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal, tax and accounting obligations, or resolve disputes. Order and invoice records are kept for the periods required by law; analytics data is retained for 14 months.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with your local supervisory authority

We may require identity verification before responding to requests. To exercise any of these rights, contact us at contact@theartroom.gallery.

International Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. When we transfer your data outside the EEA, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework — so your data receives an equivalent level of protection. The Website may be accessed globally.

Children's Privacy

The Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that such data has been collected, it will be deleted promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of the Website constitutes acceptance of the updated policy.

Contact Us

For privacy-related inquiries or requests, please contact:

The Art Room Gallery, S.L.
Email: contact@theartroom.gallery
Address: Avenida Guadarrama 4, 28220 Majadahonda, Spain