Privacy Policy

Effective date: 17 February 2026
Version: 1.0
Privacy Policy – ArAr Gallery
This Privacy Policy explains how ArAr Gallery collects, uses, and protects personal data when you visit our website or purchase from us.

Data Controller

ArAr Gallery / ArAr B.V.
David Ben Goerionstraat 43
3573 XM Utrecht
The Netherlands
Email: art@arar.gallery
Phone: +31 6 51268325
KVK: 70727627
VAT: NL858436206B01
ArAr Gallery is the data controller responsible for processing your personal data under the GDPR (EU General Data Protection Regulation).

2. Personal Data We Collect

We may collect the following categories of personal data:
• Name and contact details (name, email, phone, address)
• Billing and shipping information
• Order history and purchase records
• Account login details (if applicable)
• Customer communications
• Technical data (IP address, browser type, cookies)
• Marketing preferences (newsletter subscription)
We collect only data necessary for legitimate business purposes.

3. Legal Basis for Processing

We process personal data on the following legal grounds:
• Performance of a contract (processing orders and deliveries)
• Legal obligations (tax and accounting compliance)
• Legitimate interests (fraud prevention, website security, service improvement)
• Consent (marketing emails and optional cookies)
You may withdraw consent at any time.

4. Cookies

What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help websites function properly, improve performance, remember preferences, and provide analytics or advertising.
Cookies may be:
• Session cookies (deleted when you close your browser)
• Persistent cookies (stored for a defined period)
We may also use similar technologies such as pixels, tags, and local storage.

4.1 Types of Cookies We Use

Essential Cookies
These cookies are necessary for the website to function. They enable:
• Secure login
• Shopping cart functionality
• Payment processing
• Fraud prevention
• Website security
These cookies do not require consent.

Analytics Cookies
These cookies help us understand how visitors use the website so we can improve performance and user experience.
They collect anonymized information such as:
• Pages visited
• Time spent
• Device and browser type
• Error reports
Analytics cookies are used only with your consent.

Marketing Cookies
These cookies allow us and advertising partners to:
• Show relevant ads
• Measure campaign performance
• Prevent repeated ads
• Personalize marketing
Marketing cookies are placed only with your explicit consent.

Third-Party Cookies
Some cookies are placed by third parties that provide services such as:
• Payment processing
• Website analytics
• Advertising networks
• Social media integrations
These providers have their own privacy and cookie policies.

4.2 Legal Basis for Cookies

Under EU and Dutch law:
• Essential cookies rely on legitimate interest
• Analytics and marketing cookies require consent
You may withdraw consent at any time.

4.3. Managing Cookies

You can manage or delete cookies by:
• Adjusting browser settings
• Using the cookie banner on our website
• Blocking cookies via device preferences
Disabling essential cookies may affect website functionality.

4.4. Retention Period

Cookies are stored for different durations:
• Session cookies: deleted after browser closes
• Persistent cookies: stored until expiration or deletion
Retention periods depend on cookie type and purpose.

5. Sharing of Data

We share personal data only when necessary with:
• Payment providers
• Shipping and logistics partners
• Website hosting and technical providers
• Email marketing services
• Analytics providers (with consent)
All partners process data under confidentiality and data protection agreements.

6. International Transfers

If data is transferred outside the EEA, we use appropriate safeguards such as EU Standard Contractual Clauses.

7. Data Retention

We retain data only as long as necessary:
• Order and accounting data: legally required retention periods
• Accounts: until deletion request
• Marketing data: until unsubscribe
• Technical logs: limited security retention

8. Your Rights

You have the right to:
• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
You may also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Requests: art@arar.gallery

9. Security

We implement technical and organizational security measures including encrypted connections and controlled access.

10. Children

This website is not intended for individuals under 16 years old.

11. Changes

We may update this policy. The latest version will always be published on this page.