Privacy policy

1. Who we are

This website is run by Editions Studio Art B.V., the controller of your personal data under the General Data Protection Regulation (GDPR).

Editions Studio Art B.V.
Keurenplein 41, 1069 CD Amsterdam, The Netherlands
CoC 95985409 · VAT NL867413803B01
info@editionsstudioart.com

2. What data we collect

When you contact us

Through the contact form we receive your name, email address and message. Through the business enquiry form we also receive your company name, type of business, country, website, phone number (optional) and the editions you are interested in. If you email or call us, we receive the details you choose to share.

When you become a customer

To handle orders we keep contact details, company and billing details, delivery addresses, order history and invoices.

When you look up a certificate

To show a Certificate of Authenticity you enter the sculpture number and password printed on the certificate. We use these only to find the matching record. We do not ask for your name to do this.

When you visit the website

Like any website, our server records technical data such as your IP address, browser and the pages you request. With your consent we also collect statistics on how the site is used through Google Analytics. See section 7 on cookies.

3. Why we use it

• Answering your questions and preparing quotes. Basis: steps taken at your request before a contract, and our legitimate interest in responding to business enquiries.
• Delivering orders, invoicing and after-sales service. Basis: performance of a contract.
• Keeping our accounts. Basis: legal obligation under Dutch tax law.
• Keeping business contacts informed. We occasionally email customers and business contacts about new editions. Basis: legitimate interest. You can opt out at any time by replying to the email or writing to us.
• Protecting our forms against spam and abuse. Basis: legitimate interest.
• Understanding how the website is used, so we can improve it. Basis: your consent.

We do not sell your data and we do not use it for automated decision-making or profiling.

4. Who we share it with

We share personal data only where needed for the purposes above, with:

• our hosting provider (one.com), which hosts the website and its data within the EU;
• our email provider, which handles our mailbox and the emails sent from the website;
• Google, for reCAPTCHA spam protection on our forms and, with your consent, Google Analytics;
• Meta (Instagram), when the website shows posts from our Instagram account;
• carriers and logistics partners that deliver orders;
• our accountant and the tax authorities, where the law requires it.

Where these parties process data on our behalf, they may only use it for our purposes.

5. Data outside the EU

Some of these providers, such as Google and Meta, may process data in the United States. Where that happens, the transfer is covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.

6. How long we keep it

We keep personal data only for as long as it serves the purposes described above. Enquiries and correspondence are kept for as long as they are useful for handling your request and any business relationship that follows. Customer and invoice records are kept for at least seven years, as Dutch tax law requires. You can ask us at any time to delete your enquiry or other data we no longer need.

7. Cookies

This website uses a small number of cookies and similar techniques:

• Functional. Needed for the site to work, for example to remember your language choice on the certificate pages. These do not require consent.
• Analytics. Google Analytics helps us see how visitors use the site. These cookies are only placed with your consent.
• Spam protection. Google reCAPTCHA checks that forms are sent by people, not bots.

You can change your choices at any time through the cookie settings on this website, or delete cookies in your browser.

8. Security

We take appropriate technical and organisational measures to protect your data against loss and unauthorised access, including an encrypted (HTTPS) connection for the whole website.

9. Your rights

You have the right to access the personal data we hold about you, and to have it corrected or deleted. You can also ask us to restrict its use, object to it being used, or receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.

To use any of these rights, email info@editionsstudioart.com. We reply within one month and may ask you to confirm your identity first.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Changes

We may update this policy from time to time. The date at the top shows when it last changed.

11. Questions

For any question about this policy or your data, email info@editionsstudioart.com.