Effective Date: 24 March, 2025

At X Art Gallery, accessible from http://www.xgallery.es, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with the General Data Protection Regulation (GDPR) and applicable Spanish and EU laws.

By using our website, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We may collect and process the following types of personal data:

  • Personal Information: Name, email address, phone number, and any other details you provide via forms or communication with us.
  • Technical Information: IP address, browser type, device details, and website usage data (collected automatically via cookies and analytics tools).
  • Communication Data: Messages, inquiries, or requests you send to us via forms, emails, or other communication methods.

2. How We Use Your Information

We process your personal data for the following purposes:

  • To operate and maintain the website.
  • To respond to your inquiries and provide customer support.
  • To send newsletters or marketing communications (only if you have opted in).
  • To analyze website traffic and improve user experience.
  • To comply with legal obligations or regulatory requirements.

3. Legal Basis for Processing

Under GDPR, we process your data based on:

  • Your Consent: When you subscribe to newsletters or opt into services.
  • Contractual Necessity: When processing is required to provide services or respond to inquiries.
  • Legitimate Interests: To improve our website, prevent fraud, and ensure security.
  • Legal Obligations: When required by law, such as compliance with data protection regulations.

4. How We Share Your Information

We do not sell or rent your personal data. However, we may share it with:

  • Service Providers: Third-party providers assisting with hosting, analytics, email services, or marketing (e.g., Google Analytics, email marketing platforms).
  • Legal Authorities: When required to comply with legal obligations, court orders, or regulatory authorities.

All service providers process data in compliance with GDPR and under strict data protection agreements.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy:

  • Contact form submissions: Up to 12 months after your last interaction.
  • Email marketing subscriptions: Until you unsubscribe.
  • Website analytics data: Up to 26 months, then anonymized.
  • Legal and compliance records: As required by applicable laws.

Once data is no longer needed, we securely delete or anonymize it.

6. Your Rights Under GDPR

As an EU-based user, you have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion (“Right to be Forgotten”): Request removal of your data, subject to legal exceptions.
  • Restriction: Request limitation of data processing under certain conditions.
  • Data Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to data processing based on legitimate interests.
  • Withdraw Consent: If processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at [your email address].

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze site performance. You can manage or disable cookies through your browser settings. For more details, refer to our [Cookie Policy].

8. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. However, no online transmission is 100% secure, so we cannot guarantee absolute security.

9. Third-Party Links

Our website may include links to third-party websites. We are not responsible for their privacy policies, security practices, or content. We encourage you to review their policies before sharing personal data.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business operations. Updates will be posted on this page with a revised Effective Date. Your continued use of the website constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us:

X Art Gallery
Email: info@xgallery.es
Website: http://www.xgallery.es