This Privacy Policy outlines the rules for processing personal data by Maison d’Art Gallery, obtained through the website www.maisondartgallery.pl (hereinafter: "the Website").

The data controller is Christophe Zerbone Investments, NIP: 5252481852, REGON: 362951249, email address: contact@maisondartgallery.pl (hereinafter: "the Administrator").

Personal data collected by Maison d’Art Gallery is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), and the Act of 10 May 2018 on personal data protection.

Maison d’Art Gallery takes particular care to protect the privacy of visitors to the Website.

§1 Type of data processed, purposes, and legal basis

The Administrator collects information about individuals using the Website (hereinafter: "Clients"), including individuals acting as consumers, individuals conducting business activities, and representatives of legal entities.

Clients' personal data is collected in the following cases:

•       placing an order in the Online Store – for the purpose of performing the sales contract. Legal basis: Article 6(1)(b) GDPR;

•       subscribing to the newsletter – for the purpose of providing the service electronically. Legal basis: Article 6(1)(a) GDPR (consent);

•       using the contact form. Legal basis: Article 6(1)(b) GDPR;

•       analyzing Website traffic and for statistical purposes. Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Administrator);

•       establishing, pursuing, and enforcing claims. Legal basis: Article 6(1)(f) GDPR.

Depending on the purpose of processing, the Client provides the following data:

Online Store Order:

•       first and last name;

•       email address;

•       phone number;

•       delivery address (street, house/apartment number, postal code, city, country);

•       for entrepreneurs: company name and NIP (tax identification number).

Newsletter and contact form:

•       email address;

•       first and last name (optional).

While using the Website, the Administrator may automatically obtain technical data: IP address, browser type, operating system, access time, navigation data. This data is processed for statistical purposes and to ensure the proper functioning of the Website.

Providing personal data is voluntary, but failure to provide it during the order placement process makes it impossible to fulfill the order.

§2 Data sharing and storage

Clients' personal data may be transferred to the following categories of recipients:

•       entities processing data on behalf of the Administrator (e.g., hosting service providers, accounting services, mailing system providers, analytical tools);

•       independent data controllers (e.g., payment operators: PayPal, PayU Poland – to the extent necessary for payment processing);

•       courier and logistics companies – to the extent necessary for order delivery;

•       public authorities, when the obligation to transfer results from legal provisions.

Service providers are based in Poland or other countries of the European Economic Area (EEA). If data is transferred outside the EEA, it is done solely on the basis of appropriate legal safeguards (e.g., standard contractual clauses of the European Commission).

Clients' personal data is stored for the following periods:

•       data processed on the basis of consent – until consent is withdrawn, then for a period corresponding to the statute of limitations for claims (generally 6 years, and for claims related to business activity – 3 years);

•       data processed for the purpose of contract performance – for the time necessary for its execution, then for the period of the statute of limitations for claims;

•       data processed on the basis of legitimate interest – until an effective objection is raised or this interest ceases;

•       data resulting from tax and accounting obligations – for 5 years from the end of the tax year to which they relate (Article 74 of the Accounting Act).

§3 Cookies mechanism and IP address

The website www.maisondartgallery.pl uses cookies. These are small text files saved on the user's end device if the web browser allows it. Cookies help tailor the content of the Website to the individual preferences of users and enable the creation of viewership statistics.

In accordance with Article 173 of the Telecommunications Law and the requirements of Directive 2002/58/EC (amended by Directive 2009/136/EC), the user has the right to express or refuse consent to the use of cookies other than those necessary for the Website to function. Consent can be expressed or withdrawn via the cookie banner on the Website or browser settings.

We distinguish the following categories of cookies:

•       essential – necessary for the proper functioning of the Website and Store; do not require user consent;

•       analytical/statistical – enable the creation of anonymous Website traffic statistics; require user consent;

•       marketing/social – enable the display of personalized advertisements and integration with social media services (Facebook/Meta); require user consent.

The Website may use third-party cookies, including those provided by Facebook/Meta (administrator: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

The Administrator may collect users' IP addresses for diagnostic, statistical, and administrative purposes. The IP address is not combined with other personal data of the Client, unless necessary.

The user can at any time change browser settings regarding cookies, including blocking their saving. Limiting the use of cookies may affect some functionalities of the Website.

§4 Rights of data subjects

Every data subject has the right to:

•       access their personal data (Article 15 GDPR);

•       rectify data (Article 16 GDPR);

•       erase data ("right to be forgotten," Article 17 GDPR);

•       restrict data processing (Article 18 GDPR);

•       data portability (Article 20 GDPR);

•       object to data processing (Article 21 GDPR);

•       withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal (Article 7(3) GDPR);

•       lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl.

To exercise your rights, please contact us at: contact@maisondartgallery.pl. A response will be provided within 30 days of receiving the request, in accordance with Article 12 GDPR.

§5 Data security

The Administrator applies appropriate technical and organizational measures to ensure the protection of processed personal data against unauthorized access, loss, or destruction, adequate to the risk of infringement of the rights and freedoms of natural persons. Only authorized persons, obliged to maintain confidentiality, have access to the data.

Data transmission on the Website takes place via the SSL protocol (HTTPS), ensuring connection encryption.

§6 Changes to the Privacy Policy

The Administrator reserves the right to make changes to this Privacy Policy. Users will be informed of any changes by publishing the updated version on the Website. Continued use of the Website after the changes are published signifies their acceptance.

Questions and requests related to the Privacy Policy should be directed to: contact@maisondartgallery.pl.

Last modified: May 26, 2026