Privacy policy

1. Who is responsible

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

2. Visiting this website

This website is hosted by Vercel Inc. (USA). When you visit a page, Vercel automatically processes technical data needed to deliver it and to keep it secure: your IP address, date and time, the page requested and your browser type. These server logs are kept for a short period only. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

This website uses no cookies, no analytics and no advertising trackers. Fonts are served from this website itself; no data is sent to Google or other font providers.

3. Contact form

When you use the contact form, we process your first name, last name, email address, your message and, if you choose one, the artwork you are enquiring about. We use them only to answer your enquiry and, where relevant, to arrange a sale. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering messages (Art. 6(1)(f) GDPR).

Your message is sent to us by email through Resend (Plus Five Five, Inc., USA), an email delivery service, and received in our mailbox hosted by Google (Gmail). The data is not stored on this website.

We keep your messages for as long as needed to handle your enquiry and delete them at the latest three years after our last exchange, unless we are legally required to keep them longer (for example accounting records after a sale).

4. Transfers outside the EU

Vercel, Resend and Google may process data in the United States. These transfers rely on the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

5. Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. To exercise them, write to contact@alansart.gallery.

You can also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.