سياسة الخصوصية

Onlinegallery.art is operated from the Netherlands. We are the controller for the personal data described in this policy. Questions or requests: info@onlinegallery.art.

Account data — your e-mail address, used to sign in (passwordless magic links) and to send service messages. Legal basis: performance of contract.

Profile and artwork data — the name, biography, location, links, photos and artworks you choose to publish. This information is public by design: showing it is the purpose of the platform. Legal basis: performance of contract.

Contact messages — when you message an artist we process your name, e-mail address and message. Messages are automatically screened (including automated duplicate and fraud detection) before delivery, to protect artists against scams. Legal basis: legitimate interest (platform safety).

Payment data — subscription payments are processed by our payment provider; we never store card details. Sales of artworks are settled directly between buyer and artist via the artist's own payment provider.

Technical data — IP address and basic request data, used for security, rate limiting and abuse prevention. Legal basis: legitimate interest.

We only use functional cookies that are required to keep you signed in, and local storage for preferences such as your currency choice. We do not use advertising or cross-site tracking cookies. Because of this, no cookie consent is required for normal use; if that ever changes we will ask for consent first.

Data is stored with our infrastructure providers Supabase (database and files, EU region Frankfurt) and Vercel (hosting). E-mail is delivered through our e-mail provider. With each provider a data processing agreement is in place.

Account and profile data: for as long as your account exists, and up to 30 days after deletion. Contact messages: up to 12 months after delivery. Quarantined (suspected scam) messages: up to 12 months, for safety analysis. Invoices: 7 years (legal retention duty).

You can request access, correction, deletion, restriction or a copy (portability) of your personal data, and object to processing based on legitimate interest. Mail info@onlinegallery.art and we will respond within one month. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We may update this policy. Substantial changes will be announced on the platform before they take effect.