Privacy Policy
This Privacy Policy explains how personal data are processed when you visit fine-art-magazine.com or contact us. Personal data are information relating to an identified or identifiable individual.
1. Controller
The controller responsible for the processing described in this Privacy Policy is:
Nour Nouri
Gotenstraße 21
20097 Hamburg
Germany
Phone: +49 40 69219953
Email: info@fine-art-magazine.com
You may use these contact details for all enquiries concerning data protection and the exercise of your rights.
2. Hosting, website access and server logs
When you access our website, your browser transmits technical information to the server providing it. This may include your IP address, the date and time of access, the requested page or file, the referring website, browser and operating system information, the response status and the volume of data transferred. Requested addresses may also contain search terms that you enter in our website search.
We process these data to deliver the website and its content, operate the search function, maintain technical availability, diagnose errors and detect or investigate misuse and security incidents.
The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interests are the reliable operation and security of our website.
Technical access data are necessary to establish the connection and provide the requested content. Without them, the website cannot be made available to your device.
Server logs are retained only for as long as needed for technical operation, error analysis and security monitoring. Where specific evidence of misuse or a security incident exists, relevant records may be retained for the investigation and, where necessary, the establishment, exercise or defence of legal claims. They are deleted when these purposes no longer require their retention, subject to applicable legal obligations.
3. Contact enquiries
If you contact us through our contact form, by email or by telephone, we process the information you provide to handle your enquiry and any necessary follow-up. Depending on how you contact us, this includes your name, email address, telephone number, selected enquiry category, message and other information you choose to provide. Technical transmission data may also be processed to deliver your message and protect our communication systems against misuse.
Where your enquiry concerns a contract with you or steps taken at your request before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to enquiries and maintaining appropriate business and editorial communications.
Providing information is voluntary. However, we need the information required to understand and answer your enquiry. Required fields are marked in the contact form.
Enquiry data are deleted once the matter has been resolved and further correspondence is no longer reasonably expected, unless statutory retention obligations or the necessary establishment, exercise or defence of legal claims require continued retention.
4. Cookies and similar technologies
Cookies are small text files stored on your device. Similar technologies may also store information on your device or access information already stored there.
Storage or access that is strictly necessary to provide a digital service expressly requested by you does not require consent under Section 25(2), no. 2 of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG).
Where strictly necessary technologies involve the processing of personal data, the legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in providing a secure and functional website, or Article 6(1)(c) GDPR where the processing is required to meet a legal obligation.
Storage or access that is not strictly necessary requires your prior consent under Section 25(1) TDDDG. Any associated processing of personal data based on that consent is carried out under Article 6(1)(a) GDPR. Refusing or withdrawing consent does not prevent you from using website functions that do not depend on the relevant technology.
Details of the cookies in use, their purposes and their lifetimes are available in the cookie settings. You can also restrict or delete cookies through your browser settings. Deleting cookies may remove saved preferences and cause the website to ask you for your choices again.
5. Consent management with Borlabs Cookie
We use Borlabs Cookie to manage and remember your privacy preferences and, where required, obtain and document consent. The software is provided by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.
Borlabs Cookie stores the technically necessary cookie borlabs-cookie on your device. It contains your selected preferences and consent choices, a randomly generated identifier and technical information such as the cookie version, domain, path and expiry information.
The consent information is processed within our website infrastructure. The locally operated Borlabs Cookie software does not transmit visitor data to Borlabs.
Where processing is necessary to fulfil our obligations to obtain and demonstrate consent, the legal basis is Article 6(1)(c) GDPR in conjunction with Articles 5(2) and 7(1) GDPR. Other necessary technical administration of your preferences is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in implementing your choices reliably. The strictly necessary storage and reading of the preference cookie are based on Section 25(2), no. 2 TDDDG.
The preference cookie remains stored until it expires or you delete it. Its applicable lifetime is shown in the cookie settings. Any separately retained consent records are kept only for as long as needed to meet accountability obligations or establish, exercise or defend legal claims.
You can review and change your choices at any time through the cookie widget on this website. Withdrawing consent takes effect for the future and does not affect the lawfulness of earlier processing. Deleting the browser cookie does not automatically delete consent records retained separately for a lawful purpose.
6. Recipients of personal data
Personal data may be accessible to authorised persons working for us and to technical service providers where necessary for hosting, website maintenance and email communications. Providers processing personal data on our behalf are bound by the requirements of Article 28 GDPR.
We may also disclose data to public authorities where required by law, or to professional advisers where necessary to establish, exercise or defend legal claims. Such disclosures are based on the applicable legal obligation under Article 6(1)(c) GDPR or our legitimate interest in protecting our legal rights under Article 6(1)(f) GDPR.
7. General retention and deletion
We retain personal data only for as long as necessary for the relevant processing purpose. The criteria described for each activity above determine when retention ends.
Where commercial, tax or other applicable laws require the retention of particular documents, those documents are retained for the applicable statutory retention period. This does not mean that every category of website data is subject to such obligations.
Data retained solely to comply with a legal obligation or protect legal claims are restricted to that purpose. They are deleted when the retention obligation or other lawful reason for continued retention ends.
8. Security and external links
Our website uses HTTPS encryption to protect data during transmission. We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss and unlawful processing.
Our website contains links to external websites, including social media platforms. If you follow such a link, the respective provider processes data under its own privacy policy.
9. Your rights
Subject to the applicable statutory conditions, you have the following rights:
- Access to your personal data and information about its processing under Article 15 GDPR.
- Rectification of inaccurate data and completion of incomplete data under Article 16 GDPR.
- Erasure of personal data under Article 17 GDPR.
- Restriction of processing under Article 18 GDPR.
- Data portability under Article 20 GDPR where processing is automated and based on consent or a contract.
- Objection to processing under Article 21 GDPR.
- Withdrawal of consent at any time with effect for the future under Article 7(3) GDPR.
To exercise your rights, contact us using the details in the Controller section. For consent choices managed through Borlabs Cookie, you can also use the cookie settings.
Right to object
Where we process personal data under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. This also applies to profiling based on that provision. We will then stop the processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.
If your personal data are processed for direct marketing, you may object at any time without giving reasons. This also applies to profiling connected with such direct marketing. Your data will then no longer be processed for those marketing purposes.
Right to lodge a complaint
Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement.
The supervisory authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
Email: mailbox@datenschutz.hamburg.de
Website: https://datenschutz-hamburg.de/
10. Changes to this Privacy Policy
We update this Privacy Policy when changes to our processing activities or legal requirements make an update necessary. The current version is available on this website.