Privacy policy

Who We Are

VENERE Gallery is a sole proprietorship (eenmanszaak) registered in the Netherlands under KvK number 42043897.

VAT number | NL005452641B59

VENERE Gallery acts as the data controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) and complies with the Dutch Implementation Act (UAVG).

Personal Data We Collect

We collect personal data that is necessary to provide our services and operate our website.

This may include:

Contact details | name, email address, shipping and billing address, phone number (if provided)
Order details | purchased items, payment status and transaction data (no full card details stored)
Communication data | emails or messages sent to us, customer service requests
Technical data | IP address, browser type and device information, and website interaction data via cookies or analytics tools

We do not intentionally collect or process special categories of personal data within the meaning of Article 9 GDPR.

How We Use Your Data

Your data is used solely to:

Process and deliver orders
Provide customer support
Send confirmations, invoices, and shipping updates
Improve website functionality and user experience:

Website functionality and user experience: processing is necessary for the performance of our legitimate interests (Article 6(1)(f) GDPR), namely to provide a secure, stable, and user-friendly website environment;
Website analytics (by [tool name]): processing is based on your consent (Article 6(1)(a) GDPR) and is limited to the purpose of analysing website usage and improving our services;
Fraud prevention and security: processing is necessary to comply with our legal obligations and/or for our legitimate interests (Article 6(1)(c) and/or (f) GDPR), specifically to detect, prevent, and investigate fraudulent or unauthorized activities;
Account management (if applicable): processing is necessary for the performance of a contract or to take steps prior to entering into a contract (Article 6(1)(b) GDPR), strictly limited to administering and maintaining your account;
Marketing (e.g. newsletters): processing is based on your consent (Article 6(1)(a) GDPR), and limited to sending you relevant communications, which you may withdraw at any time.

Comply with legal and tax obligations

We do not sell or rent your personal data.

Legal Basis for Processing

In accordance with Article 6 GDPR, processing is based on:

Contractual necessity | to fulfill orders and provide services
Legal obligations | including tax and accounting requirements
Consent | for non-essential cookies or marketing communications

Sharing of Data

Personal data is shared only where necessary with trusted third parties:

1. Service Providers

Shopify Inc. (Canada and the United States) : hosting of our e-commerce platform and order management.
Payment providers (such as Shopify Payments, Stripe, PayPal or Mollie, as applicable) : secure payment processing.
Shipping partners (such as DHL Express) : order fulfilment and delivery.

2. Professional Advisors

Accounting, tax and legal advisors where necessary to comply with legal obligations or protect our legitimate interests.

All service providers processing personal data on our behalf are engaged under data processing agreements in accordance with Article 28 GDPR.

Some of our service providers may process personal data outside the European Economic Area (EEA), including in the United States. Where such international transfers occur, we ensure that appropriate safeguards are in place in accordance with Chapter V GDPR, including the European Commission's Standard Contractual Clauses (SCCs) and, where appropriate, supplementary technical and organisational measures such as encryption of data in transit and at rest, strict access controls, and role-based access management.

Data Retention

Personal data is retained only as long as necessary:

Order and invoicing data | 7 years ( in accordance with Dutch tax law)
Customer communication | up to 12 months
Marketing data | until consent is withdrawn
Analytics data: as defined in cookie settings

After the retention period, data is securely deleted or anonymized.

Cookies & Analytics

This website uses cookies in accordance with the ePrivacy Directive and the Dutch Telecommunications Act (Telecommunicatiewet). We use:

Essential cookies: required for the proper functioning of the website
Analytics cookies: only activated with your prior consent to help us understand and improve website usage
Marketing cookies: where applicable, used for advertising and tracking purposes, and only with your consent

Non-essential cookies are only placed after obtaining your prior consent via the cookie banner. You can withdraw or adjust your consent at any time through your browser settings or via the cookie settings on our website.

We recommend that, for enhanced transparency, an overview is provided for each cookie or tool used, including its specific purpose, retention period, and clear information on how you can withdraw your consent at any time. Where required, a compliant cookie consent mechanism is implemented to ensure adherence to applicable laws and regulations.

Data Security

We implement appropriate technical and organizational measures in accordance with Article 32 GDPR, including:

Encrypted connections (SSL/TLS)
Secure payment processing (PCI-DSS compliant providers)
Restricted access to personal data
Regular monitoring and security updates

Despite these measures, absolute security cannot be guaranteed.

Your Rights

Under the GDPR, you have the right to access your personal data, request its correction or deletion, and restrict or object to its processing. You may also withdraw your consent at any time, exercise your right to data portability, and lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). In addition, you may object to the processing of your personal data for direct marketing purposes at any time. We will respond to your request within one month, and we may ask you to verify your identity.

Requests can be submitted to info@venere-gallery.com. Identification may be required.

Changes to This Policy

This Privacy Policy may be updated to reflect legal or operational changes. The latest version will always be available on this page.

Legal Framework

This policy is drafted in accordance with:

General Data Protection Regulation (EU) 2016/679
Uitvoeringswet AVG (UAVG)
Dutch Telecommunicatiewet

Supervisory authority: Autoriteit Persoonsgegevens (Netherlands)

Contact

For privacy-related inquiries: info@venere-gallery.com

SELECTION

Privacy policy

Be the first to discover our latest finds and events