fbpx

Privacy policy

99artfairs GmbH takes the protection of your personal data very seriously. In the following, we present which data we collect, process and use when you visit our website or in the case of an order in our online shop, when and for what purposes.

1. Controller and contact for data protection concerns

The controller pursuant to Article 4 (7) of the European General Data Protection Regulation (GDPR) is 99artfairs GmbH, Ohmstr. 22, 80802 Munich. You can reach us at any time by post or e-mail at mail@unpainted.net.
If you have any concerns about data protection, you can reach us at any time.B. by e-mail to mail@unpainted.net or at our postal address with the addition “Data Protection”.

2. Your rights

You have the following rights vis-à-vis us with regard to the personal data concerning you:

  • Right to information (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • right to erasure (Art. 17 GDPR; “Right to be forgotten
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to object to processing (Art. 21 GDPR),
  • Right to data portability (Art. 20 GDPR).

You also have the right to complain to a data protection supervisory authority in the Member State of your place of residence, place of work or place of the alleged infringement about the processing of your personal data by us if you believe that the processing of your personal data is unlawful.

If you have given us your consent to the processing of your data, you can revoke it at any time with effect for the future. The legality of the processing of your data until the revocation remains unaffected by this.

For the assertion of your rights or other data protection concerns, you can contact us at any time via the contact channels mentioned in Section 1 above and/or the contact channels listed in our imprint.

3. Additional information on your right to object

We would also like to point out that if your personal data is processed on the basis of legitimate interest in the context of the balancing of interests in accordance with Art. 6 (1) sentence 1 f) GDPR and/or your personal data is processed for direct marketing purposes, you have the right to object to the processing of your personal data at any time.

4. Purposes and legal bases of the processing of your personal data

We process your personal data only if you place an order with us, use one of the services offered on our website, you have expressly consented to the processing of your personal data or if we have a legitimate interest in the processing of your personal data.

Specifically, these are the processings described below:

a. Newsletter

We use a contact form to subscribe to our email newsletter. We use this medium to inform you at irregular intervals about events and offers of UNPAINTED.

Here we ask for your first and last name, your email address, your city, your language (german/English) and your institution.

We use MailChimp as a technical platform for storing contact data and sending email newsletters. MailChimp is a registered trademark of Rocket Science Group, LLC, with an address of 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308, USA. MailChimp’s privacy policy can be found here.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time by clicking on the “unsubscribe” link at the end of the newsletter or by replying with personal information that you no longer wish to receive the newsletter. The legal basis for the processing described above is Art. 6 para. 1 sentence 1 lit. a) GDPR (processing based on the consent of the data subject).

a. Registration for our online shop / member area

In order to be able to place an order in our online shop, you need to register in advance for our online shop. For registration, the following data is required: first name, last name, e-mail address, address and a password of your choice. With this data, a user account for our online shop is created for you.

The user account also serves the purpose of providing you with access to digital works of art purchased by you in your dedicated member area.

The legal basis for the processing described above is Art. 6 para. 1 sentence 1 lit.b) GDPR (processing is necessary for the performance of a contract).

c. Order in our online shop

If you wish to place an order on our website, in addition to the data requested during registration, it is also necessary (for physical works of art that are sent to you by post) to provide your address and bank details (depending on the payment method selected).

We process this data in order to be able to carry out the order of the desired goods in accordance with the contract, to confirm your order by e-mail and to deal with complaints or complaints. To be able to process your requests to customer service. The legal basis for the processing described above is Art. 6 para. 1 sentence 1 lit.b) GDPR (processing is necessary for the performance of a contract).

d. Contacting us

When you contact us by e-mail, post or telephone to the contact channels listed in the imprint, the data provided by you (e.B. Your e-mail address and your name as well as the content of your request) are stored by us in order to answer your questions or questions. To process and answer your request.

We delete the data arising in this context after the storage is no longer necessary (usually after complete completion of your request), or restrict the processing if there are statutory retention obligations. Depending on the content of your request, the legal basis for the processing described above is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary to safeguard the legitimate interests of the controller).

e. Obligation to provide personal data

If you wish to use the services offered, you must provide the personal data necessary for the respective service. If you do not provide us with this data, it is not possible for us to provide you with the desired service, in particular to process your registration or order.

f. non-existence of automated decision-making

We would like to point out that in the context of the use of our website and the use of our services offered on it, you will not be subject to a decision based exclusively on automated processing – including profiling – which has legal effect on you or significantly affects you in a similar way.

5. Data transfer to third parties/recipients, use of service providers

Your personal data will only be passed on or transmitted by us to third parties if this is necessary for the fulfilment of the contract with you, there is a legitimate interest on our part, you have given your consent to this and/or if we are obliged to do so by law or by official or court orders. Your personal data will be transmitted by us to third parties in the cases described below and for the purposes described below.

In order to be able to offer you a selection of different payment methods in our subscription shop, we use external payment service providers. Depending on which payment method you select in the booking process, we pass on the data collected for the processing of payments, such as bank details or credit card data, to the bank commissioned with the payment or to the payment service provider commissioned by us. Insofar as the integrated payment service providers partly collect data themselves (e.B. PayPal), the respective payment service provider/payment provider is itself responsible for the data collected in the context of the payment and the data protection provisions of the respective payment service provider apply in addition. The legal basis for the transfer is Art. 6 para. 1 sentence 1 lit.b) GDPR (processing is necessary for the performance of a contract).

In addition, we use service providers who provide services for us in connection with web hosting and also use cloud- or web-based software solutions of third parties, which enable us to manage and host personal data in the cloud with external service providers in order to relieve our own servers and work effectively with new software solutions. We have concluded order processing agreements with the respective service providers, which ensure that the respective service providers do not process the data for their own purposes, but only within the framework of our instructions and on our behalf. The legal basis for the use of the service providers is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary for compliance

Search