Alternus Art Gallery | Original Artworks & Paintings

Applicable Privacy Laws & Regulations

This Privacy Policy is designed to comply with the following privacy laws and regulations:

GDPR (EU)

General Data Protection Regulation (EU) 2016/679 - European Union

CCPA (California)

California Consumer Privacy Act - United States

LGPD (Brazil)

Lei Geral de Proteção de Dados - Brazil

POPIA (South Africa)

Protection of Personal Information Act - South Africa

Law No. 9887 (Albania)

On the Protection of Personal Data - Republic of Albania

ePrivacy Directive

Directive 2002/58/EC - Electronic Communications Privacy

1. Introduction

Welcome to Alternus Art Gallery ("we," "our," or "us"). We are committed to protecting your privacy and personal information in accordance with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Albanian Law No. 9887 "On the Protection of Personal Data."

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website alternus.art, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the "Site").

Please read this Privacy Policy carefully. By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

2. Information We Collect

2.1 Personal Data

We may collect personally identifiable information that you voluntarily provide to us when you:

Register for an account on our Site
Make a purchase or place an order
Subscribe to our newsletter
Contact us with inquiries or feedback
Participate in promotions, surveys, or other Site features

This information may include:

Name (first and last)
Email address
Phone number
Billing and shipping address
Payment information (credit card numbers, bank account details)
Date of birth
Username and password

2.2 Automatically Collected Data

When you access our Site, we may automatically collect certain information about your device and usage, including:

IP address and geolocation data
Browser type and version
Operating system
Device type and identifiers
Pages visited and time spent on pages
Referring website addresses
Clickstream data and browsing patterns

3. How We Use Your Information

We use the information we collect for various purposes, including to:

Process and fulfill your orders, including shipping and payment processing
Create and manage your account
Send you order confirmations, updates, and shipping notifications
Respond to your inquiries and provide customer support
Send promotional communications (with your consent)
Improve our website, products, and services
Analyze usage trends and preferences
Detect, prevent, and address fraud or security issues
Comply with legal obligations and enforce our terms
Personalize your experience and deliver targeted content

4. Legal Basis for Processing (GDPR Article 6)

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:

Processing Activity	Legal Basis (Article 6)
Processing orders and payments	Contract performance (Art. 6(1)(b))
Account creation and management	Contract performance (Art. 6(1)(b))
Sending transactional emails	Contract performance (Art. 6(1)(b))
Marketing communications	Consent (Art. 6(1)(a))
Newsletter subscription	Consent (Art. 6(1)(a))
Website analytics	Legitimate interests (Art. 6(1)(f))
Fraud prevention and security	Legitimate interests (Art. 6(1)(f))
Tax and accounting records	Legal obligation (Art. 6(1)(c))
Responding to legal requests	Legal obligation (Art. 6(1)(c))

5. Disclosure of Your Information

We may share your information in the following situations:

4.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including payment processing, shipping and logistics, email delivery, hosting services, customer service, and marketing assistance.

4.2 Legal Requirements

We may disclose your information where required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

4.4 With Your Consent

We may disclose your information for any other purpose with your consent.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Site and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

Types of cookies we use:

Essential Cookies: Necessary for the Site to function properly
Analytics Cookies: Help us understand how visitors interact with our Site
Marketing Cookies: Used to deliver relevant advertisements
Preference Cookies: Remember your settings and preferences

You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

7. Data Security

We implement appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures include:

SSL/TLS encryption for data transmission
Secure payment processing through PCI-DSS compliant providers
Regular security assessments and updates
Access controls and authentication measures
Employee training on data protection practices

However, please note that no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

9. Your Legal Rights Under GDPR & Other Laws

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following legally protected rights regarding your personal data:

Right of Access (GDPR Article 15)

You have the right to obtain confirmation as to whether your personal data is being processed, and access to that data along with information about the processing purposes, categories of data, recipients, retention period, and your other rights.

Right to Rectification (GDPR Article 16)

You have the right to obtain rectification of inaccurate personal data and to have incomplete personal data completed without undue delay.

Right to Erasure / "Right to be Forgotten" (GDPR Article 17)

You have the right to request deletion of your personal data when: the data is no longer necessary, you withdraw consent, you object to processing, the data was unlawfully processed, or erasure is required by law.

Right to Restriction of Processing (GDPR Article 18)

You have the right to restrict processing when: accuracy is contested, processing is unlawful, we no longer need the data but you need it for legal claims, or you have objected to processing.

Right to Data Portability (GDPR Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.

Right to Object (GDPR Article 21)

You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests on grounds relating to your particular situation.

Right to Withdraw Consent (GDPR Article 7)

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint (GDPR Article 77)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Albania, this is the Information and Data Protection Commissioner.

For California Residents (CCPA Rights)

Under the California Consumer Privacy Act (CCPA), California residents have additional rights:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by businesses
Right to opt-out of the sale of personal information
Right to non-discrimination for exercising CCPA rights

To exercise any of these rights, please contact us at privacy@alternusart.com. We will respond to your request within 30 days as required by law.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside Albania and choose to provide information to us, please note that we transfer the data to Albania and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

11. Children's Privacy

Our Site is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.

12. Third-Party Advertising

We may use third-party advertising companies, including Google AdSense, to serve advertisements when you visit our website. These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services of interest to you.

Google, as a third-party vendor, uses cookies to serve ads on our site. Google's use of the DART cookie enables it to serve ads to our users based on their visit to our sites and other sites on the Internet. Users may opt out of the use of the DART cookie by visiting the Google ad and content network privacy policy.

How to Opt Out

Visit Google Ads Settings to opt out of personalized advertising
Visit AboutAds.info to opt out of third-party vendor cookies
Use your browser settings to manage or delete cookies

13. Third-Party Links

Our Site may contain links to third-party websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Alternus Art Gallery

Email: privacy@alternusart.com

Website: alternusart.com