Privacy Policy

This Privacy Policy explains what personal data INVESTinART s.r.o. collects through the website investinart.eu and in the course of communicating with persons interested in works from its collection, the purposes for which it uses that data, how long it retains it, and the rights you have under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.

1. Controller

The controller of your personal data is INVESTinART s.r.o., with its registered office at Ľ. Fullu 9, 841 05 Bratislava, Slovakia, company ID (IČO) 55631959, registered in the Commercial Register of the Municipal Court Bratislava III, Section Sro, Insert No. 171298/B (hereinafter “we”).

For all matters relating to the protection of personal data, you can contact us by e-mail at info@investinart.eu or by post at the address of our registered office. We have not appointed a data protection officer, as we are not required to do so by law.

2. What data we process and for what purpose

Contact form and artwork enquiry form: first name and surname, e-mail address, telephone number (if you provide it), the subject and text of your message and, where you are interested in a specific work, also the title of the work and the price you propose. We use this data solely to handle your request, to communicate with you about works and to prepare a possible purchase. The legal basis is your consent, given by ticking the box in the form (Art. 6(1)(a) GDPR), and the taking of steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

The data from the form is sent to our web server, which forwards it by e-mail to info@investinart.eu; it is not stored in any database on the website. To protect the form against abuse (automated submissions, repeated sending of the same message), the server keeps a technical record of the submission — IP address, time and a checksum of the message content — for no more than 24 hours, on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

Purchase of a work: if you decide to purchase a work, we process the data necessary for the conclusion and performance of the purchase contract, for issuing the relevant documents and for compliance with our legal obligations, in particular under accounting and tax legislation and, where applicable to the transaction in question, under anti-money laundering legislation (Art. 6(1)(b) and (c) GDPR).

3. How long we retain data

Data from enquiries that were not followed by a purchase is retained for no longer than two years from our last communication with you. Contractual and accounting documentation is retained for the period prescribed by law (generally ten years). Data processed on the basis of consent is processed until the consent is withdrawn.

4. To whom we disclose data

We do not sell your data or pass it on to third parties for marketing purposes. To the extent necessary, our processors — our e-mail and web hosting provider, our accountant and our legal adviser — may have access to it, as may public authorities where required by law.

5. Cookies and technical data

To measure website traffic we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It is activated only after you consent to analytics cookies in the bar at the bottom of the page (Art. 6(1)(a) GDPR and Section 109(8) of Slovak Act No. 452/2021 Coll. on Electronic Communications); until consent is given the service is not loaded and no analytics cookies are stored. Google Analytics sets the cookies _ga and _ga_* (valid for 2 years) to distinguish visitors and sessions and processes data about the pages visited, the device and the browser; the IP address is used only to determine an approximate location and is not stored. You can change or withdraw your consent at any time via the “Cookie settings” link in the footer. Data may be transferred to Google LLC in the USA; the transfer is based on the European Commission's adequacy decision (EU-US Data Privacy Framework) and on standard contractual clauses. More about data processing by Google: policies.google.com/privacy.

The website uses no other cookies and no advertising trackers. The server hosting the website may keep access logs for a short time for security reasons (IP address, time and address of the page viewed, browser type); the legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).

When a page is displayed, your browser loads, for technical reasons, certain files from third parties: fonts from Google Fonts (Google Ireland Limited) and artists' portraits from Wikimedia Commons (Wikimedia Foundation) and from the website eantik.sk. With these requests your IP address and standard technical browser data are transmitted to those providers; we neither store nor evaluate this data. Currency and cryptocurrency rates (Coinbase, CoinGecko, Frankfurter) are downloaded by our server and served to your browser from its own cache, so your data is not transmitted to those services. Some of the providers mentioned are established outside the European Economic Area; the transfer is based on an adequacy decision of the European Commission or on standard contractual clauses.

6. Your rights

You have the right to access your personal data, to have it rectified or erased, to obtain restriction of processing, to data portability, and the right to object to processing based on legitimate interest. You may withdraw your consent to processing at any time; withdrawal does not affect the lawfulness of processing carried out before its withdrawal.

You can exercise your rights by e-mail at info@investinart.eu. We will respond without undue delay and in any event within one month. If you believe that we are processing your data in breach of the law, you have the right to lodge a complaint with the supervisory authority — the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.

7. Automated decision-making

We do not carry out automated decision-making or profiling.

8. Changes to this Policy

We may update this Policy from time to time, in particular where the law or the way the website operates changes. The version published on this page always applies; the date of the last update is shown in its header.