Privacy Policy

1. Types of Personal Data We Collect and Process

Definition. When we use the term “Personal Data” in this Privacy Policy, we mean any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly.

General Provisions. We hereby inform you, and you hereby acknowledge that you have no legal obligation to provide us with any Personal Data when you use the Website, and the provision of it is solely based on your free will. However, without receipt of Personal Data it may not be possible to use the Website or for us to fulfill specific purposes (e.g., processing orders, donations or responding to your inquiries), so please do not use our Website if you do not wish to provide us with Personal Data, as further detailed below. You represent and warrant that any Personal Data you provide through the Website is accurate, complete, and up to date.

Third-Party Personal Data. To the extent that you provide us with Personal Data relating to third parties (for example, where you place an order on behalf of another person), you represent that you have obtained all necessary consents from such third parties for the disclosure and processing of their Personal Data for the purposes set out in this Privacy Policy, and that you have brought this Privacy Policy to their knowledge, or that you are their legal guardian.

Personal Data Collection and Processing. The provision of certain types of Personal Data may be necessary or optional, depending on your requests. Mandatory data will be marked as such at the moment of collection of your Personal Data.

Personal Data That You Provide Us Directly on the Website

Contact Requests. When you contact us through forms on the Website or by other means with regards to the Website, we collect and process the following: full name, email address, phone number (optional), place of residence (optional), artwork of interest (optional) and any information you decide to include. Information entered in free text boxes will be transmitted to us “as is”, therefore we ask that you only enter the details essential to your request. Without providing mandatory data, we may not be able to process or respond to your request.

Orders, Purchases and Donations. When you place an order or purchase an artwork through the Website, you will be required to provide us the following: full name, email address, company name (optional), delivery address or pickup coordination details, billing address, and payment method. Credit card and payment details are provided directly to an external payment processor and are subject to its privacy policy. If you refuse to provide mandatory data, we will not be able to process or fulfill your order or donation.

User Account Registration. You may voluntarily create an account on the Website to facilitate the purchasing process, view order history, and save artworks, by providing the following details: full name, email address, password. We ask that you choose a unique password that you do not use for other services. Please do not disclose your login details to other people. If you refuse to provide data, we will not be able to create your account or provide access to relevant features.

Marketing and Promotional Communications. If you explicitly consent to receive marketing communication, we may send you promotional or marketing material through various media channels. You may withdraw your consent to receive advertising at any time by sending a request to art4democ@gmail.com or as stated in the advertising message.

Artist Submissions. Where an artist or their representative submits information through forms available on the Website (for example, in connection with the submission of artworks for display or sale on the Website), we may collect and process the following: full name or artist name, email address, phone number (optional), biographical information and artist statement (optional), artwork details (including title, medium, dimensions, year of creation, and asking price), images of artworks, and any additional information the artist chooses to provide. Without providing mandatory data, we may not be able to display the artist’s works on the Website or process transactions on their behalf.

Personal Data Collected Through Technological Tools

In addition to the above, we collect data through cookies and various analytical tools regarding your browsing habits, such as IP address or Device ID, duration of visit to the Website, and the like. For more information about these tools, including options how to disable certain Cookies, please see our Cookie Policy / section n4 below.

2. Purposes and EU Legal Basis

We process the Personal Data described in section 1 above for the following purposes:

Purposes	Example of use of Personal Data	Legal Basis (for EEA Visitors only)
Managing your request	To answer your questions, inquiries or requests regarding artworks or other matters; to contact you if necessary.	Our legitimate interest in managing inquiries and contact requests sent to us.
Website operation and artwork display	To operate the Website and display artworks, artist pages and artist biographies; to manage artwork availability and inventory status, including marking sold works; to generate artwork pages or catalogs; to manage relationships with artists, artist representatives, suppliers, and partners.	Our legitimate interest in operating the Website.
Order and donation processing and fulfillment	To process and complete your orders and donations; to deliver the artworks you purchased; to collect payment, including to refer to and receive payment confirmations or webhooks from external payment systems; to prevent duplicate purchases and manage inventory; to coordinate artwork delivery, pickup, shipping, or further handling of a purchase; to send notifications and updates regarding the purchase, donations and delivery.	Performance of a contract to which you are a party.
User account management	To create and manage your user account; to authenticate user identity; to provide customer service; to store your details for future orders; to display your order history and saved artworks.	Your consent.
Marketing and promotional purposes	To send marketing communications, newsletter and promotional materials; to provide you with updates about artworks, artists, or related offers and benefits.	Your consent. You may withdraw your consent at any time by contacting us or as stated in the advertising message.
Providing enhanced functionality and personalization on the Website	To store information on your preferences; to display and personalize content, Website pages, and artwork recommendations; to develop, customize and improve the Website.	Your consent.
Improving the Website and your user experience	To create aggregated statistical data, anonymized or pseudonymized data; to evaluate, develop, enhance, analyze and improve the Website and its performance; to measure user engagement, including clicks on Website pages; to facilitate your visit on the Website.	Our legitimate interest in improving the Website.
Supporting and enhancing our data security measures	To monitor, investigate bugs, and improve our Website; to prevent and mitigate the risks of fraud, error or any illegal, criminal or prohibited activity.	Our legitimate interest in securing the Website.
Managing any litigation	To take action against any identified security breach, manage any dispute or litigation; to seek advice from lawyers, auditors, and other professional advisers.	Our legitimate interest in defending our rights and interests.
Complying with legal and regulatory obligations	To perform any reporting and notifications obligations we may be subject to, to competent governmental agencies and authorities; to process your requests to exercise your rights; to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights.	Legal obligations to which we are subject.

3. With Whom Do We Share Personal Data?

We may share your Personal Data with third parties as detailed below:

Service Providers, including billing, payment processing and donation management services; inventory management services; shipping and delivery providers; data storage providers; workflow automation and system integration services; website design services; WordPress and plugin providers; forms and PDF generation services; data security services, fraud detection and prevention services; email and communication services; customer support services; marketing and analytics services; and insurers. We share Personal Data with selected third-party companies we engage to perform services on our behalf. We only provide such service providers with Personal Data so they can perform their required functions on our behalf.

Artists and Artist Representatives. We may share limited Personal Data exclusively with artists or their representatives where necessary for coordinating artwork delivery or pickup, issuing certificates of authenticity, handling professional inquiries, or managing matters related to a transaction.

Partners and Collaborating Organizations. We may share Personal Data with partners (such as partner organizations, co-exhibiting institutions, supporting entities, or collaborating bodies) in connection with joint activities, initiatives or services. We only share the Personal Data necessary for managing the joint activity, maintaining contact with you, and delivering the artworks or services.

Governmental, Administrative or Judiciary Authorities. We will disclose or allow government and law enforcement officials access to certain Personal Data, exclusively in response to a subpoena, search warrant or court order (or similar requirement), or in compliance with applicable laws and regulations. Such disclosure or access may occur with or without notice to you, if we have a good faith belief that we are legally compelled to do so, or that disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing.

Organizational Transactions. We may share Personal Data in connection with any proposed or actual reorganization, merger, consolidation, assignment, transfer or other disposition of all or any portion of our activities or assets (including in connection with any similar proceedings).

Lawyers and Interested Parties. We will share Personal Data exclusively in case of the management of possible disputes and other legal matters where appropriate, including with respect to the Website; to establish, protect, or exercise our legal rights; as required to enforce agreements; to defend against legal claims or demands; to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights.

4. Cookies

Cookies are small data files stored on your device that help us recognize your browser and remember your preferences. You can view the full list of cookies used on our Website and manage your cookie preferences at any time by clicking the cookie icon available at the bottom of the Website. This cookie management tool allows you to view detailed information about each category of cookies, consent to or reject non-essential cookies (such as statistics or marketing cookies), and change or withdraw your consent at any time.

Please note that strictly necessary cookies are always active, as they are required for the Website to function properly and do not require user consent. No non-necessary cookies will be placed on your device without your explicit, prior consent.

5. International Data Transfers

We may host, store, transfer or otherwise process the Personal Data to various sites worldwide, outside your jurisdiction. Where specific laws or regulations relating to Personal Data transfer apply to us, we will implement our best effort to ensure that the Personal Data is protected and transferred in a manner consistent with legal requirements. By using our Website, you acknowledge that your Personal Data may be transferred to countries where data protection standards differ from those in your jurisdiction.

EEA Transfers. To the extent we transfer Personal Data from within the European Economic Area (“EEA”) to countries or international organizations that are based outside the EEA, we will ensure that such transfers are conducted in accordance with applicable legal requirements, including, where applicable, on the basis of an adequacy decision by the European Commission or other legally permitted safeguards under the GDPR, such as standard contractual clauses.

Israeli Transfers. To the extent we transfer Personal Data from Israel to third countries outside Israel, such transfers are conducted in accordance with the applicable law, including on the basis of countries recognized by the Israeli Privacy Protection Authority as providing equivalent protection, appropriate safeguards, or your consent.

6. Data Retention

We retain Personal Data for as long as you are using our Website or maintaining an active user account with us. Other circumstances in which we will retain your Personal Data for longer periods of time include: (i) where we are required to do so in accordance with legal and regulatory requirements, including tax or accounting requirements, or (ii) for us to have an accurate record of your interaction with us in the event of any inquiries or contact requests, or (iii) if we reasonably believe there is a prospect of litigation.

If you have any questions about data retention, please contact us as detailed in Section n11 below.

7. Data Security

We endeavor to maintain appropriate technical and organizational measures compliant with industry standards to protect Personal Data in particular, against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. However, although we make every effort to protect the Personal Data which you provide to us or we generate, we cannot completely ensure the security of any Personal Data you transmit to us over the internet or guarantee that this Personal Data will not be accessed, disclosed, altered, or destroyed.

Payment Processing Security. Payment processing on the Website is carried out by third-party payment service providers, and payment transactions are processed through PCI DSS-certified processors. Such providers are solely and directly responsible for the security of your payment details in accordance with their own terms of use and privacy policies. We do not store, access, or control your payment card information, and we therefore accept no liability for any damage or loss, direct or indirect, of any kind, arising from or in connection with the processing of your payment by such third-party providers.

To report a security vulnerability or incident, please contact us as detailed in Section n12 below.

8. Your Rights Regarding your Personal Data

General Provisions. Please note that under certain circumstances and depending on your jurisdiction, you are entitled to specific rights regarding your Personal Data (subject to some exceptions). Applicable privacy and data protection laws in your jurisdiction may provide you with different or additional rights related to the Personal Data we collect from you, which may also apply. In most cases, you can exercise such rights free of charge.

When you ask us to exercise any of your rights under this Privacy Policy and the applicable privacy and data protection laws, we may need to ask you to provide us with certain credentials to make sure that you are who you claim you are, to avoid disclosure to you of Personal Data which is related to others that you are not authorized to receive, and to ask you questions to better understand the nature and scope of Personal Data that you request to access.

Please note that you can deliver your request by contacting us at: art4democ@gmail.com

EEA Visitors. If you are based in the EEA and subject to the GDPR, you have the following rights:

• access your Personal Data in order to obtain clear, transparent and understandable information on how we process your Personal Data and on your rights, as well as a copy of your Personal Data;
• rectify your Personal Data in case your Personal Data is obsolete, inaccurate or incomplete;
• object the processing of your Personal Data when the processing is based on our legitimate interest. We will no longer process your Personal Data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, such as the respect of a legal obligation (e.g., legal obligation involving the retention of documents), or for the establishment, exercise or defense of legal claims;
• in certain circumstances under GDPR, you have the right to restrict the processing of some of your Personal Data during a limited period of time;
• withdraw your consent when it has been obtained and processing is based on consent;
• in certain circumstances under GDPR, you have the right to request data portability, meaning that you can receive the Personal Data originally provided by you in a structured and commonly used format or that you can request the transfer of the Personal Data you provided to another data controller;
• in certain circumstances under GDPR, you have the right to delete your Personal Data (also known as the right to be forgotten);
• if applicable, not to be subject to a decision based solely on automated processing, including profiling, if such profiling produces a legal effect concerning you or similarly significantly affects you and if automated processing is used;
• lodge a complaint with your national data protection authority. If you have a complaint about how we use your Personal Data, we will always prefer you to contact us first. If you are unsure which data protection authority to contact, please contact us at: art4democ@gmail.com

Data Rights for Israeli Individuals. If you are based in Israel, you are entitled to request us to: review and access your Personal Data that we process; update, amendment, and deletion of Personal Data which is incomplete, incorrect, outdated or unclear.

9. Minors

The Website is not intended for use by minors (an individual that is under the age defined by applicable law, which concerning the EEA is under the age of 18). If we nevertheless receive Personal Data from an individual who indicates that he or she is, or whom we otherwise have reason to believe is, under the age of 18, we will endeavor to delete such Personal Data from our systems.

10. Third Party Links

During your use of the Website you may, access links to other websites or services operated by third parties. This includes third-party payment processing service to which you may be directed when completing a purchase or donation through the Website. Please note that this Privacy Policy only applies to Personal Data that we (or third parties on our behalf) collect from or about you through the Website, and we are not responsible for Personal Data collected and stored by third parties.

Third party websites and services have their own terms and conditions and privacy policies, and you should read these carefully before you submit any Personal Data to these websites.

11. Changes to This Privacy Policy

This Privacy Policy may change from time to time. If we decide to change our Privacy Policy, we will post new or updated privacy policy in our Website. Each version of this Privacy Policy will be identified by its effective date, which you can find at the top of this Privacy Policy. The new or updated privacy policy will be effective from the date mentioned at the top page of the new privacy policy.

We strongly encourage you to review this Privacy Policy periodically to ensure that you understand our most updated privacy practices.

12. Contact Information and Data Controller Details

If you have any questions about this Privacy Policy, or in the event that you wish to exercise certain rights you are eligible for with respect to your Personal Data, please contact us as follows: Website: art4democracy.co.il Email: art4democ@gmail.com art4democ@gmail.com

Data Controller Details. Brothers and Sisters in Arms - For the Democracy (R.A.) 5 Tuval Street Tel-Aviv 6789717. Website: art4democracy.co.il Email: art4democ@gmail.com