Source: https://cyrrusgallery.com/privacy-policy/
Timestamp: 2019-04-25 01:44:55+00:00

Document:
The responsible body for data collection, data processing and data usage in connection with the use of our website is Cyrrus Gallery – Contemporary Art, owner: Houmam Alsaleim, Ravenestraße 3, 13347 Berlin, Germany.
We use your personal data (title, first and last name, postal address, email address, telephone number, and payment information) in compliance with the European General Data Protection Regulation (GDPR) in order to fulfil and process your order and to send messages by email in order, for example, to inform your of the status of orders. We will also store the wording of the contract and will send your order data via email. You can see our GTCS here at any time.
Your personal data, which you enter during the order, is only used for processing the contract. Some of your data (title, first and last name, address data, telephone number) will be made available to our logistics partners to facilitate delivery of your order. This forwarding is only ever performed in compliance with the strict requirements of the European General Data Protection Regulation (GDPR). There shall be no further forwarding of your information for purposes other than to fulfil, realise and terminate the contractual relationship between you and us, unless there is some statutory or official order to do so. The same shall apply to personal data you may have provided when contacting us in electronic or printed form.
In accordance with European General Data Protection Regulation (GDPR), you are entitled to request information regarding the data stored about you free of charge, and have the right to correct, block or delete this data. To do this, you can contact our customer service team at the email address cyrrusgallery@outlook.com.
When you access a page, information of a general nature is saved. This includes, inter alia, the type and version of the web browser used, the website from which our site was linked, our websites visited and the date of the visit. All this is information, which does not allow the person to be identified. This anonymous data is only used by Cyrrus Gallery for statistical purposes. This information is not made available to third parties.
Automattic is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation: https://www.privacyshield.gov/.
Automattic and the General Data Protection Regulation (GDPR): https://automattic.com/automattic-and-the-general-data-protection-regulation-gdpr/.
“Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, e.g. the contents of a shopping cart are stored in an online store or a login jam. The term “permanent” or “persistent” refers to cookies that remain stored even after the browser has been closed. Thus, e.g. the login status will be saved if users visit it after several days. Likewise, in such a cookie the interests of the users can be stored, which are used for range measurement or marketing purposes. As a “third-party cookie”, cookies will be offered by providers other than the person responsible for the online offer (otherwise, if only the cookies are called “first-party cookies”).
If users do not want cookies stored on their computer, they will be asked to disable the option in their browser’s system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of our online offer.
Our Website uses the “Akismet” service offered by Automattic, Inc. 132 Hawthorne Street San Francisco, CA 94107, USA. The use is based on our legitimate interests within the meaning of Art. 6 § 1 lit. of GDPR. With the help of this service, comments of real people are distinguished from spam comments. All comment information is sent to a server in the USA, where it is analyzed and stored for four days for comparison. If a comment has been classified as spam, the data will be stored beyond that time. This information includes the name entered, the email address, the IP address, the comment content, the referrer, details of the browser used, the computer system and the time of the entry.
Automattic is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation https://www.privacyshield.gov/.
On our Website we use the service Gravatar, Automattic, Inc. 132 Hawthorne Street San Francisco, CA 94107, USA.
Gravatar is a service that allows users to log in and lodge profile pictures and their email addresses. If users with the respective email address on other online sites (especially in blogs) leave posts or comments, so their profile pictures can be displayed next to the posts or comments. For this purpose, the email address communicated by the users to Gravatar is transmitted encrypted in order to check whether a profile is stored for it. This is the sole purpose of sending the email address and it will not be used for other purposes, but will be deleted afterwards.
The use of Gravatar is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f, DSGVO, because with the help of Gravatar we allow contributors and commentators to personalize their posts with a profile photo.
By displaying the images, Gravatar takes notice of the users’ IP addresses, as this is necessary for communication between a browser and an online service. For more information about Gravatar’s collection and use of data, see the Automattic Privacy Notice: https://automattic.com/privacy/ .
If users do not want a user picture linked to their email address on Gravatar to appear in the comments, they should use a non-Gravatar email address to comment. We also point out that it is also possible to use an anonymous or even no email address if the users do not want their own email address to be sent to Gravatar. Users can completely prevent the transfer of data by not using our commenting system.
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation: https://www.privacyshield.gov/.
We only use Google Analytics with activated IP anonymization. This means that the users’ IP address will be shortened by Google within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
The IP address submitted by the user’s browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to its use of the online offer and the processing of such data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com.
For more information about Google’s data usage, adjustment and opposition options, please visit Google’s Websites: https://www.google.com/intl/de/policies/privacy/partners (“Google’s use of your data when you use websites or apps our partners “), http://www.google.com/policies/technologies/ads (“Use of data for promotional purposes”), http://www.google.de/settings/ads (“Managing information that Google uses, to show you advertising”).
We maintain online presence within social networks and platforms in order to communicate with artists, professionals of the art sector, partners, members, donators, customers, interested persons and users active there and to inform them about the services of our association. When calling the respective networks and platforms, the terms and conditions and the data processing guidelines apply to their respective operators.
When you visit our YouTube plug-in-enabled Website, you will be connected to the servers of YouTube. It tells the YouTube server which of our pages you’ve visited.
The use of YouTube is in the interest of an attractive presentation of our online offer. This constitutes a legitimate interest within the meaning of Art. 6 § 1 of GDPR.
Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) of GDPR) we use social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”). The plugins can represent interaction elements or content (e.g. videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white “f” on blue tile, the terms “Like”, “Like” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation: https://www.privacyshield.gov/.
When a user invokes a feature of this Website that includes such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the device of the user and incorporated by him into the online offer. In the process, user profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs the users according to our knowledge.
By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example, press the “Like” button or leave a comment, the information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address.

References: Art. 6
 § 1
 Art. 6
 Art. 6
 § 1
 Art. 6