Privacy Policy
The self employed Hannah Assouline Gallery (as defined by its identity in article 1 below) operates under the brand name Hannah Assouline Gallery. The purpose of the company is to market quality artistic works on its website www.hannahassoulinegallery.com and in its physical shops.
Hannah Assouline Gallery has developed this privacy policy to inform users of its website, and customers of its physical shops, of the means by which it collects, accesses, processes and retains their personal data.
Hannah Assouline, as part of its business activity, collects personal data from users of its website and during purchases made by its customers in its physical shops.
In the context of the use of this website, Hannah Assouline Gallery is required to comply with the terms of Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data.
Hannah Assouline Gallery informs users of this website that in order to carry out its services, it needs to collect certain personal data. This privacy policy is intended to inform users of the Site, how such data is collected.
However, if the customer does not wish to provide this personal data, Hannah Assouline Gallery will not be able to perform the services offered.
In order to comply with any regulatory, legal, editorial or technical developments, Hannah Assouline Gallery wishes to inform users of its website that this privacy policy ("Policy") may be modified at any time. Therefore, users should check the latest version of the Policy before browsing the website.
Preamble
The purpose of the preamble is to present the definitions of the various terms used in the "General Terms of Sale and Use". These terms have the same meaning whether they are expressed in the singular or in the plural.
- The term "Site" refers to this website, whose address is www.hannahassoulinegallery.com.
- The term "work" used hereafter refers to art pieces created by artists and presented for sale on the Site. The term "work" also includes limited edition art pieces created for the Hannah Assouline Gallery.
- The term "Terms and Conditions of Sale and Use" refers to the current document. These terms and conditions apply in commercial transactions between Hannah Assouline Gallery and the customer. The term "Rules" will also be used to refer to them.
- The term "Users" refers to Internet users browsing the Site.
- The term "Customer" refers to the user who has acquired one or more works of art through the website. By purchasing the work, the customer has given his prior agreement to these "General Terms and Conditions of Sale".
1. Who is the data controller? What is the purpose of the data controller?
The person who is responsible for collecting personal data and implementing the processing of such data is the data controller.
The data controller of the Hannah Assouline Gallery website is :
The auto-entrepreneur, Hannah Assouline Gallery, registered in the Créteil Trade and Companies Register on 27 December 2021, under the number 893 925 396 R.C.S , whose registered office is located at 11 avenue de Stinville Charenton le Pont 94220.
The host of the website of the online gallery is 02switch.
2. What is the purpose of collecting personal data?
The regulations in force protect the privacy of users and require any data controller to be able to justify a legitimate basis for the said "processing".
In order to protect the privacy of users, the data controller must ensure that it can justify the collection of data on legitimate grounds.
Some of these legitimate reasons are expressed in this "Policy":
1. The data controller has a legal obligation to keep the invoices of its customers.
2. The data controller has a legitimate interest in ensuring that the privacy of users of its website is respected.
3. The data controller needs certain personal data of its customer in order to execute the sales contract. In particular, to deliver the goods, to make returns and to manage the customer account.
4. The data controller wishes to obtain the prior consent of the users for this data collection.
Therefore, this data collection is justified to prevent a breach of privacy of users, and to improve the customer experience.
The personal data of the users of the Hannah Assouline Gallery website will not be shared for commercial purposes with third parties. However, the data controller reserves the right to disclose your personal information if required by law or in the event of a breach of our terms and conditions.
We wish to inform our users that they have the right to change their personal data and withdraw their consent at any time. If the user changes their mind and no longer wishes to be contacted or have their information collected or shared with service providers, then they can contact Hannah Assouline Gallery by sending an email to hannahassoulinegallery@gmail.com
3. How is personal data collected?
As mentioned above, Hannah Assouline Gallery will need to collect personal data from users of the website, or customers of its physical stores in order to carry out its activities.
Hannah Assouline Gallery may collect the following personal data from these users.
- Firstly, the data controller may collect browsing data. This is the data that may be collected by the Publisher when the user navigates the site, such as the type of browser, the language of the browser, the user's IP address, the date and time of connection and the location and geolocation data.
- In addition, when the user registers his or her customer account and creates a user profile, the online gallery is able to collect both the user's personal data, such as date of birth and the user's registration profile. This profile consists of information that the user is able to provide, including last name, first name, billing and shipping addresses, e-mail addresses, mobile phone numbers, and passwords in order to log in to the customer account.
- In addition, the data controller may collect discussions with online customer service.
- Finally, Hannah Assouline Gallery may collect transaction data. This data includes information about orders placed and returns, such as telephone numbers, shipping addresses, and payment information.
Our payment service providers Stripe and PayPal are able to collect payment data directly. This data includes credit card number, expiration date, authorization number, and security code.
Third party application providers may also use automated means to collect data about users based on their interests (i.e., interaction with features and profiling of online activity). These third-party application providers include Facebook and Instagram, where the Hannah Assouline Gallery publishes editorial and promotional content.
The controller is not responsible for the practices of these third-party providers and parties.
Furthermore, it should be noted that certain services on the website may be altered or unavailable without the user's consent to this "Policy".
4. Which service providers have access to the personal data of the users of the Site?
What is the access to data by data processors?
Hannah Assouline's service providers may have access to users' personal data collected on its site.
This personal data is collected in order to
- Carry out the secure payment of sales, the preparation and shipping of orders and the return of products;
- Improve the technical maintenance and development of the website.
Hannah Assouline Gallery is able to share the personal data of its customers in its physical shops. This access is limited to orders placed by the customer.
The Hannah Assouline Gallery invites the users of the website to visit the following websites in order to find out about the analysis services and the methods of opposition.
- https://support.google.com/analytics/answer/6004245
- Google Analytics: https://support.google.com/analytics/answer/6004245?hl=fr
The Hannah Assouline Gallery informs customers who have a customer account in its ephemeral physical boutiques that it may share their personal data. Their consultation is restricted to the orders placed by the customer.
What access to data is given to the service providers hosting the "Site"?
Hannah Assouline Gallery may share user data with its service providers, who may carry out processing on behalf of the latter and/or on behalf of the recipients of the data.
Our online gallery is hosted by O2switch, which provides us with an e-commerce platform, allowing us to offer our services and products for sale, specialising in art objects.
Your information is stored both in the database, in the data processing system, and in the general application of the same host, 02switch.
It should be noted that user data is stored on a secure server protected by a firewall of the host.
What access to data is given to payment providers?
1) What are the payment conditions?
The payments made by the Clients are only for the All-Inclusive Price. These payments can only be made with the following credit cards: Visa, Amex, MasterCard, Maestro.
2) What are the terms and conditions relating to prices?
If the full price cannot be charged, the purchase will be immediately cancelled by operation of law and the Order will be cancelled.
3) What are the terms and conditions relating to payment service providers?
Our payment service provider, the company Stripe, has a secure platform where the payment of purchases on our website is made. The latter makes a highly secure page available to customers. This page allows customers to enter their credit card numbers, expiry dates and cryptograms.
The Hannah Assouline Gallery website does not store any credit card numbers. The Gallery has no access to credit card numbers. Furthermore, Hannah Assouline Gallery has no way of accessing the payment data of Customers.
4) How is the payment provider approved?
The Stripe payment provider is PCI/DDS certified by Mastercard, Amex, Visa and Maestro. This certification meets the highest security standards to protect our customers' credit card data. Therefore, this certification assures Hannah Assouline Gallery and its service providers that your credit card data is handled securely.
5) How is the order approved by the payment provider?
When Stripe approves the order, the customer's credit card is charged in euros.
6) Where do I go if I need more information about the payment provider?
For more information, please refer to Stripe's Terms of Service or Stripe's Privacy Policy.
How do third party suppliers have access to the personal data of users of the Site?
The third party providers we use will use, collect, use and disclose personal data of users of the Site for the purpose of performing the services they provide to us.
However, some third party service providers, such as payment providers, have their own privacy policies regarding the information we are required to provide to them for your purchase transactions.
Hannah Assouline Gallery recommends that Customers carefully read the privacy policies of third party providers, and in particular Stripe, to understand how your personal data will be handled.
Hannah Assouline Gallery wishes to remind Customers that some third party service providers may be located abroad, and therefore subject to the application of foreign law. Therefore, if any Customer decides to conduct a commercial transaction on the Site, they should understand that their personal data may be governed by the foreign law where the third party service provider is located.
For example, if the customer conducts an online transaction in France, but the payment provider (one of the Gallery's third party providers) is located in the United States. The information you provide to the payment provider may be disclosed under US law, including the Patriot Act.
When the user leaves the site, or is redirected to a third party website, the user is no longer governed by this Privacy Policy or the Site's Terms and Conditions.
5.How long do you keep your personal data?
From the closing of the user's customer account or from the last contact of the user, personal data can be collected for a maximum period of three (3) years. After the three (3) years, user data is deleted.
However, such data may be archived beyond this maximum period for specific purposes, in particular the detection and prosecution of criminal offences in order to make such data available to the judicial authorities.
Archiving implies that these data will be collected and saved on a reliable stand-alone medium. The data will be made anonymous and will not be available online.
6.What rights do users have over their personal data?
According to Articles 14 to 22 of the European Union Regulation 2016/679 of 27 April 2016, users of the Hannah Assouline Gallery website exercise the following rights:
- Have the possibility to access, rectify and delete the data collected
- Have the right to object to the processing of their collected data
- Have the right to limit the processing of their data
- Have the right to have recourse to the portability of the data collected
- Have the right to formulate requests relating to the deletion, conservation, erasure of their personal data after their death according to Article 40-1 of Law 78-17 of 6 January 1978.
When the staff in charge of processing realizes that the personal data of the users are not sufficiently respected, the Hannah Assouline Gallery undertakes to inform the users concerned.
The user may exercise the above-mentioned rights by contacting the customer service of the Hannah Assouline Gallery. When making such a request, the user must provide valid proof of identity.
Galerie Hannah Assouline can be contacted either
By mail at 11 avenue de Stinville, Charenton le Pont, 94220.
By e-mail to hannahassoulinegallery@gmail.com.
If the data controller does not provide an answer, or does not provide a satisfactory answer, the user may refer the matter to the competent administrative authority in his country of residence, for France, the CNIL http.CNIL.com.
7. What are the security measures related to the personal data collected?
The data controller of Hannah Assouline Gallery takes all necessary precautions following the best practices of the sector in order to assure its users that their personal data will not be lost, consulted, disclosed, modified or destroyed inappropriately.
8.What are the terms and conditions concerning cookies, TAGS, and tracers ?
The files called "Cookies" have the capacity to record information relating to the navigation of the user's terminal (computer, tablet, smartphone, etc.) during their browsing on the Hannah Assouline Gallery website.
In addition, the "cookies" files enable the Hannah Assouline Gallery to analyse user behaviour and monitor their browsing by carrying out the following operations
- Measuring the number of visitors to the website and its content
- Personalising the display of the content available to the user
- Saving the shopping cart for 30 minutes
Cookie preferences can be modified directly by the user of our website through the software used:
- Safari: https://support.apple.com/ ,
- Chrome: https://support.google.com ,
- Firefox: https://support.mozilla.org/fr/ ,
- Edge: https://support.microsoft.com/ ,
- iOS : https://support.apple.com/
- Android: https://support.google.com
In addition, the user has the option of not accepting the deposit of cookies by the site by connecting to the following link:
http://www.youronlinechoices.com/fr/controler-ses-cookies/.
9.How is personal data processed when the user of the Site also uses the social networks of Hannah Assouline Gallery?
Hannah Assouline Gallery is present online, including via its official accounts on the "Facebook" and "Instagram" platforms. These accounts allow users of these platforms to post content related to the services offered by Hannah Assouline Gallery.
Users should be aware that content published on social networks may be seen by third parties. Therefore, users are requested to be more careful when providing certain data online.
Hannah Assouline Gallery's applications and website may provide links to third party sites. These third party sites may be operated by third party companies. As a result,
Hannah Assouline Gallery cannot be held responsible for the processing of personal data that is carried out by these third party sites. The personal data protection policies should be consulted by the user when using these other sites.
10.What level of personal data protection does Hannah Assouline Gallery offer?
Hannah Assouline Gallery has a data protection officer who is responsible for compliance with the regulations in force. This person is responsible for establishing a register of personal data processing activities.
The user can contact the data protection officer at the following e-mail address: hannahassoulinegallery@gmail.com.
11.What is the age of consent to use the Site?
By using the Hannah Assouline Gallery website, you acknowledge that you have reached the age of majority in your country of origin. In addition, use also implies that you have given us your consent for a minor in your care to use this website.
12.What changes may be made to this "Policy"?
Hannah Assouline Gallery reserves the right to make changes to this privacy policy at any time. Users should check this policy regularly.
Changes will be effective when posted on the website.
When changes are posted to the website, Hannah Assouline Gallery will update the information we collect, inform you of how we use it, and under what circumstances it will be disclosed if necessary.
Finally, in the event that Hannah Assouline Gallery goes through a merger or is completely acquired by another company, your information will be transferred to the new owner so that they can continue their business.
Contact for questions and contact information
When the user wishes to obtain more information about this "policy", or when the user wishes to make a request to review, delete or modify any personal information, the user may contact Hannah Assouline Gallery.
This contact can be made in two ways:
- by e-mail to: hannahassoulinegallery@gmail.com
- by post at the following address 11 avenue de Stinville, Charenton le pont, 94220
Done in Paris, May 25, 2022