Pricavy Policy – ARTATZ GALLERY

1. Introduction

1.1. This privacy policy is drafted in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Aratz Azpiri Maurtua informs the User that the website www.artatzgallery.com is the responsibility of Aratz Azpiri Maurtua.
Aratz Azpiri Maurtua informs that the data processed is intended to manage and maintain the relationship with the User of the websites, as well as to provide information, statistics, and marketing services for the service and related activities.
1.2. Aratz Azpiri Maurtua informs you that the legitimate basis for the indicated processing is the existence of a legitimate interest. Likewise, the installation of cookies is legitimized by the existence of consent given by the interested parties or, where applicable, their legal representatives.
Aratz Azpiri Maurtua informs you that your data will be retained for as long as you have given your consent, except in cases where we are legally required to retain it.
In accordance with the rights granted by current data protection regulations, the User may contact the competent Supervisory Authority to file any complaint they deem appropriate. They may also exercise their rights of access, rectification, restriction of processing, deletion, portability, and objection to the processing of their personal data, as well as the right to withdraw any consent given for the processing thereof.
1.3. The access to the website, as well as all or part of its contents and services, implies unreserved acceptance of this privacy policy.
1.4. The User accepts that browsing the website is an act of free expression of will for the collection and processing of data in Aratz Azpiri Maurtua’s files. Aratz Azpiri Maurtua may freely make changes to the website’s privacy policy. Such changes will be indicated in this privacy statement, as well as in any other place we deem appropriate so that the User is aware of the information collected, how we process it, and under what circumstances, if any, we disclose it.

2. Limitation of liability.

Aratz Azpiri Maurtua is solely responsible for the information it requests and collects from Users who wish to contract, and is not responsible at any time for any other personal information that may be transferred, transmitted, or provided by the Users of the websites through any other mechanism.

3. Information on the rights of interested parties and information security.

In accordance with the provisions of Article 32 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, Aratz Azpiri Maurtua undertakes to adopt the necessary technical and organisational measures, in accordance with the level of risk involved in the processing carried out by it, in order to guarantee its integrity, confidentiality and availability.
Aratz Azpiri Maurtua also informs that if the User enters data into the forms on third-party websites, the latter will be responsible for the personal data and must adopt the technical measures described in the previous paragraph of this privacy policy.
Aratz Azpiri Maurtua informs you of the possibility of exercising your rights of access, rectification, restriction of processing, erasure, portability, and objection to processing, which you have and which may be exercised before Aratz Azpiri Maurtua. In accordance with Chapter III of the GDPR, you should take into account the following nuances:
3.1. Right of Access: This is the user’s right to obtain information about their specific personal data and the processing that has been or is being carried out, as well as information available about the origin of said data and the communications made or planned.
3.2. Right of Rectification: This is the data subject’s right to have data that is found to be inaccurate or incomplete modified. This right may only be exercised in relation to information under the control of Aratz Azpiri Maurtua, for example, the removal of comments posted on the website, images, or web content containing the user’s personal data.
3.3. Right to Restriction of Processing: This is the right to have the processing purposes originally intended by the data controller limited.
3.4. Right to Erasure: This is the right to have the user’s personal data deleted, except as provided for in the GDPR itself or in other applicable regulations that require their retention, in a timely manner.
3.5. Right to Portability: The right to receive the personal data provided by the user in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
3.6. Right to Object: This is the user’s right to have their personal data not processed or to have the processing of their personal data ceased by Aratz Azpiri Maurtua.
The User guarantees that the data provided is true, accurate, complete, and up-to-date, and is responsible for any direct or indirect damage or harm that may result from failure to comply with this obligation, both to Aratz Azpiri Maurtua and to third parties.

4. Consent for compliance with the LSSI-CE.

In compliance with Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, Aratz Azpiri Maurtua will request and the User may provide their express consent so that, if they so wish, Aratz Azpiri Maurtua may use their data for the purpose of sending them information and advertising regarding the website, as well as various offers, special promotions, and third-party service providers. With each commercial communication, Aratz Azpiri Maurtua will offer the possibility of revoking their consent to receive commercial communications at any time by sending an email to the email address provided for this purpose and provided in each commercial communication.
In order to guarantee the security and confidentiality of your personal data, Aratz Azpiri Maurtua has adopted the security levels required by personal data protection regulations and has installed the technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the personal data provided to Aratz Azpiri Maurtua.