This website has been produced and published by jcd agency, a company based in Paris, registered with the Commercial Register.**

As a result, we are responsible for the collection, processing, and use of your personal data and the management of this data in accordance with the law. These data protection provisions are an integral part of the terms of use, which you can find HERE.

We are committed to managing your personal data responsibly. Therefore, we consider it a matter of course that we comply with the legal requirements of the French Data Protection Act, the Ordinance of the National Data Protection Act, the Telecommunications Act, as well as the EU General Data Protection Regulation (GDPR) and other provisions of French and European data protection law.

We would like to inform you below about how we manage your personal data.

Please note that the information stated below may be revised and modified from time to time. We therefore recommend that you regularly review this privacy policy. During your visit to our site www.goldshteynsaatortgallery.com, we collect and use your personal data to the extent and for the purposes described below:

**SCOPE AND PURPOSES OF THE COLLECTION, PROCESSING, AND USE OF PERSONAL DATA**

**When visiting our website**

When you visit our website, our servers temporarily store each access in a log file.

We retain the following data:

– The IP address of the computer from which the request originated,
– The date and time of access,
– The name and URL of the retrieved data,
– The website from which our domain was accessed,
– The operating system of your computer and the browser you are using,
– The country from which access to our website occurs, and
– The name of your Internet service provider.

The collection and processing of this data are generally anonymized without personal reference to enable the use of the website (connection establishment), ensure long-term security and stability of the system, and optimize the website, as well as for internal statistical purposes. The aforementioned information will not be linked to personal information or stored with such information.

In the event of an attack on the network infrastructure of www.goldshteynsaatortgallery.com or in case of suspicion of any other unauthorized or abusive use of the website, the IP address will be evaluated for clarification and defense purposes and, if necessary, used in criminal proceedings to identify the users concerned and to take civil and criminal action against them.

**When using the contact form**

When you use the contact form, it is essential that you accurately enter the following personal data (*mandatory):

– First name*
– Last name*
– Email address*
– Reason for contact*
– Your question*

The legal basis for processing your contact request is Art. 6 para. 1 lit. f GDPR. This legal basis permits the processing of personal data for the purpose of our “legitimate interests.” It is in our legitimate interest to process your request.

You can object to this data processing at any time if there are reasons related to your particular situation that oppose the data processing (see the “Contact” section).

**When contacting us by email, phone, or mail**

We offer you the possibility to contact us by email (e.g., at contact@goldshteynsaatortgallery.com), phone, or mail. You can contact us and ask questions about elements of the website and our products.

You are responsible for the communications and/or any content you send or communicate to us by email, phone, or mail. We recommend not providing sensitive information. Personal data will only be collected if you voluntarily provide it to us. Therefore, you control the information you provide to us. To be able to answer your questions, we may ask you to provide additional information, e.g., your address, email address, etc. We will only collect personal data from you if it is necessary to answer your questions or to provide the services you have requested.

You can object to this data processing at any time (see the “Contact” section).

**CENTRAL STORAGE**

We retain the information stated in this privacy policy in a central electronic data processing system. The data concerning you will be automatically collected, matched, and evaluated for the purpose of processing your requests and our services.

You can object to this data processing at any time (see the “Contact” section below).

**TRANSFER OF YOUR DATA TO THIRD PARTIES**

We will only pass on your data if you have expressly consented to it, we are obliged to do so by law, or to the extent necessary to assert our rights.

Furthermore, we disclose users’ personal information to third parties to the extent necessary in connection with the use of the website, responding to inquiries, processing requests, or providing the services requested by the user. The use of this data by third parties is strictly limited to the purposes mentioned.

For the distribution of our printed materials, we use, for example, the marketing services provided by POULP UP telephone.

**USE FOR MARKETING PURPOSES**

**a. DoubleClick by Google/DoubleClick Floodlight**

This site uses DoubleClick by Google, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google uses the “DoubleClick” cookie, which allows the browser used by the user to be recognized when visiting other websites. The information generated by the cookie regarding the visit to these websites (including the IP address) will be transmitted to Google in the USA and stored on a server there (see below for more information on data transfers to the USA).

Google will use this information to evaluate your use of the website concerning the advertisements to be displayed, to compile reports for the website operator regarding activities on the website and advertisements, and to provide other services related to the use of the website and the Internet. Google may also transfer this information to third parties if required by law or if such third parties process the information on behalf of Google. However, Google will not associate the IP address of users with any other data held by Google.

Due to the marketing tools used, your browser establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected by Google through this tool, and therefore, the information we provide corresponds to our state of knowledge. Through the integration of DoubleClick, Google receives information that you have called up the relevant part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will find out and store your IP address.

In addition, the DoubleClick Floodlight cookies used allow us to understand whether you perform any actions on our website after opening or clicking on one of our advertisements/videos displayed on Google or another platform via DoubleClick (conversion tracking). DoubleClick uses this cookie to understand the content with which you have interacted on our website so that we can later deliver targeted advertising to you.

For more information on DoubleClick by Google, please visit https://www.google.com/doubleclick and see Google’s general privacy policy: https://policies.google.com/privacy?hl=en&gl=de.

To create pseudonymized user profiles for advertising and analysis purposes, we rely on a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. This applies to all the data processing activities mentioned. Our legitimate interest lies in direct marketing and the analysis of the use of our website.

You can object to the aforementioned data processing in various ways: a) by setting your browser accordingly, in particular by suppressing third-party cookies to avoid receiving advertisements from third parties (see section 6 below); b) by disabling the cookies for conversion tracking by setting your browser to block cookies from the domain https://www.google.com/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by disabling the interest-based ads of providers who are part of the self-regulation campaign “About Ads” via the page http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; d) by permanently disabling them in your browsers Firefox, Internet Explorer, or Google Chrome under the link http://www.google.com/settings/ads/plugin.

**b. Facebook Pixel/Facebook Custom Audience**

On our website, we use the “Facebook Pixel” of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the European Union, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Facebook uses the Facebook Pixel to identify visitors to our website and to define a target audience for the display of advertisements (referred to as “Facebook ads”). We therefore use the Facebook Pixel to display Facebook ads, which we place ourselves, only to users of the social network who have shown an interest in our site or who meet certain criteria (e.g., interest in certain topics or products based on the web pages visited) and which we have communicated to Facebook (custom audiences).

We also use the Facebook Pixel to ensure that our Facebook ads match the potential interests of users and do not bother them. By using the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad or not (a process known as “conversion”).

The Facebook Pixel is integrated directly by Facebook when you visit our website and can store a “cookie” on your device. If you log in to Facebook or visit Facebook while logged in, your visit to our website will be recorded on your profile. The data collected about you is anonymous to us and does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that it can be linked to the respective user profile. Facebook processes the data according to its Data Use

Policy. Therefore, please refer to Facebook’s Data Use Policy for more information about how Facebook ads work and how Facebook Pixel works.

You can refuse the collection and use of your information by Facebook Pixel to display Facebook ads. To set the type of ads you see on Facebook, you can visit Facebook’s ad settings page and follow the instructions for usage-based ad settings.

You can also refuse the use of cookies for reach measurement and advertising purposes through the Network Advertising Initiative opt-out page:

http://optout.aboutads.info/?c=3&lang=en

Your ad choices

The legal basis for the aforementioned data processing lies in our legitimate interest in analyzing, optimizing, and operating our online offering economically (Art. 6 para. 1 lit. f GDPR).

**c. Google AdWords Remarketing**

We use Google AdWords on our website. Google AdWords is an online advertising program by Google. We use the remarketing function. This allows us to use cookies to show ads based on users’ interests on our website. For this purpose, the interactions of users on our website are analyzed, which enables us, for example, to see what interests the user has, so we can show targeted advertising on other pages even after the user has visited our website. The cookies used are not used to identify a person but to uniquely identify a web browser on a specific computer. No personal data is stored.

You can refuse Google’s cookies by following the instructions and downloading and installing the browser plugin available at: https://support.google.com/ads/answer/7395996?hl=en.

For more information about Google AdWords remarketing and Google’s privacy policy, please visit: https://policies.google.com/technologies/ads?hl=en.

The legal basis for the aforementioned data processing lies in our legitimate interest in advertising our products and services in a personalized and interest-based manner (Art. 6 para. 1 lit. f GDPR).

**d. Sizmek Retargeting**

We use the technology of the provider Sizmek Inc., located at 401 Park Avenue S, 10016 New York City, USA, which allows us to provide you with relevant and targeted advertising media and ads based on your interests and user behavior on our website and offers from third parties. We also use Sizmek to measure and statistically evaluate the success of our advertisements (e.g., interaction with an ad or click on it).

Cookies are used for this purpose to analyze and evaluate your usage behavior (e.g., clicks) and interactions with the ads. The data collected includes usage data (e.g., clicks on ads, websites, time, and duration of the visit) and browser data (e.g., language settings, screen resolution), which do not allow any conclusions about your identity.

For more information about privacy and your choices regarding settings, please visit https://www.sizmek.com/privacy-policy/. You can object to the use of Sizmek technology at any time using the opt-out tool available at https://www.sizmek.com/privacy-policy/.

The legal basis for the aforementioned data processing lies in our legitimate interest in providing our products and services in a personalized and interest-based manner (Art. 6 para. 1 lit. f GDPR).

**TRANSFER OF PERSONAL DATA ABROAD**

SAS Goldshteynsaatortgallery is entitled to transfer your data to third-party companies located abroad to the extent necessary to process your requests, provide services, and conduct marketing campaigns. These third-party companies are obliged to respect the privacy of users to the same extent as the provider itself. If the level of data protection in a country is considered inadequate according to Swiss standards or within the meaning of the EU General Data Protection Regulation, we will ensure that your personal data is always protected in accordance with Swiss and EU data protection regulations by means of a contract with these companies.

An overview of third-party service providers and their locations can be downloaded here. Most service providers are located in Switzerland or Germany. The website is hosted on a dedicated server at OVH in Paris, France. However, some of the third-party service providers mentioned in this privacy policy are based in the USA (see the sections “Retargeting,” “Tracking Tools,” and “Social Media Features”). For more information on data transfers to the USA, see the section “Tracking Tools.”

**COOKIES**

Cookies help us, among other things, to make your visit to our website easier, more pleasant, and more useful. Cookies are information files that your web browser automatically stores on your computer’s hard drive when you visit our website.

Cookies do not damage your computer’s hard drive and do not transmit any personal data to us.

We use cookies, for example, to recognize you as a registered user so that you do not need to log in each time. This usage does not mean that we obtain new personal data about you as an online visitor.

Most internet browsers automatically accept cookies. However, you can adjust your browser settings so that cookies are not placed on your computer or you receive a new warning message when you encounter a new cookie. For more information, refer to your browser settings.

However, if you disable cookies, you may not be able to use all the services on our portal.

**TRACKING TOOLS**

**a. Google Analytics**

This website uses Google Analytics, a web analytics service provided by Google. Google Analytics uses methods that enable the analysis of website usage, such as “cookies” (see the “Cookies” section above). The information generated by the cookie about your use of this website, such as:

– Your navigation path on the site,
– The length of stay on the website or individual pages,
– The page from which you are leaving the website,
– The country, region, or city from which access is taking place,
– The device used (type, version, color depth, resolution, width, and height of the browser window),
– Returning visitors and new visitors,
– The type/version of the browser,
– The operating system used,
– The referrer URL (the page previously visited),
– The name of the host of the computer from which access is taking place (IP address), and
– The time of the server request

will be transferred to the USA and stored on servers there by Google, a company belonging to the Alphabet Inc. holding company. The IP address is shortened by activating IP anonymization (“anonymizeIP”) on this website before transmission within the member states of the European Union or to other states party to the Agreement on the European Economic Area or Switzerland. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In such cases, we provide contractual guarantees to ensure that Google maintains an adequate level of data protection.

The information is used to evaluate website usage, compile reports on website activities, and provide other services related to website usage for market research and tailored website design. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of us. According to Google, the IP address will never be linked to other data concerning the user.

Users can prevent Google from collecting the data (including IP address) generated by the cookie and related to the user’s use of the website, as well as the processing of this data by Google, by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser plugin, you can click on this link to prevent data collection by Google Analytics on this website in the future. An opt-out cookie will be stored on the user’s device. If the user deletes the cookies (see the “Cookies” section above), the user must click on the link again.

**b. Google AdWords Conversion**

As part of our use of Google AdWords, we use “conversion tracking.” For this purpose, we use conversion tracking via Google Analytics. If you visit certain pages of our website, Google and we can determine whether you have clicked on a Google ad and have been redirected to this page.

The information collected as part of conversion tracking is used to generate conversion statistics. We receive the total number of users who clicked on our ad and were redirected to a page containing a conversion tracking tag. However, we do not receive any information that allows us to identify users personally. If you do not wish to participate in tracking, you can opt out of this usage by simply disabling the Google conversion tracking cookie in your browser under user settings. In this case, you will not be included in the conversion tracking statistics.

The retention of conversion cookies is based on Art. 6 para. 1 lit. f GDPR. It is in our legitimate interest to analyze user behavior to optimize our website and our advertising.

For more information on Google AdWords and Google Conversion Tracking, please refer to Google’s privacy policy: https://policies.google.com/privacy?gl=de&hl=en.

You can configure your browser to notify you when cookies are used and to accept them only in specific cases or to generally refuse them, and you can enable the automatic deletion of cookies when closing your browser. If cookies are disabled, the functionality of the website may be limited.

**DATA TRANSFERS TO THE USA**

For the sake of completeness, please note that under US legislation, US authorities may take surveillance measures that allow for the general storage of all data transferred from the European Union or Switzerland to the USA. This is done without distinction, limitation, or exemption based on the objective pursued and without objective criteria that would allow limiting the access of US authorities to personal data and their subsequent use for specific and strictly limited purposes that justify access to this data.

We inform users residing in an EU member state that the USA does not have an adequate level of data protection from the perspective of the European Union, partly due to the issues mentioned in this section. To the extent that we have indicated in this Privacy Policy that certain data

recipients (such as Google) are located in the USA, we will ensure that your data is protected to an appropriate level with our partners, either through contractual agreements with these companies or by ensuring that these companies are certified under the EU-US Privacy Shield.

**SOCIAL MEDIA SERVICES**

On our website, we provide you with certain social media services, including sharing product information on Facebook, posting tweets about it, etc. You will find these services on the individual product pages under the heading “Share.”

On our website, social media features (“plugins”) are integrated through the bookmarking service AddThis, operated by AddThis LLC, Inc., 8000 Westpark Drive, Suite 625, McLean, VA2210, USA (“AddThis”). An overview of AddThis plugins and their appearance can be found here: https://www.addthis.com/get/share/fr/.

When you visit our website, which contains this plugin, your browser establishes a direct connection to AddThis servers. The content of the plugin is transmitted by AddThis directly to your browser and integrated into the page. By integrating the plugin, AddThis receives information indicating that your browser has requested the corresponding page of our website and stores a cookie on your device to identify your browser (see the “Cookies” section). This information (including your IP address) is transmitted directly from your browser to an AddThis server in the USA and stored there. AddThis uses the data to create anonymized user profiles, which are used as a basis to offer personalized and interest-based advertising to visitors of websites with AddThis plugins. The purpose and scope of data collection and further processing and use of the data by AddThis are presented in the AddThis privacy policy: http://www.addthis.com/privacy/privacy-policy.

If you wish to object to data collection by AddThis in the future, you can use an opt-out cookie available at the following link: http://www.addthis.com/privacy/opt-out.

We provide social media services for the following social networks:

– Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA,
– Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, and
– Google+ of Google Inc.

When you click on the relevant social media icons, you will be linked to the corresponding social network to perform the chosen service, e.g., to share content on Facebook or to post tweets on Twitter. However, you must log in to your user account or be already logged in to do this.

If you select one of the services provided and click on the relevant social media icon, a direct connection is established between your browser and the server of the corresponding social network. This provides the network with information indicating that you have visited our website with your IP address and accessed the link. If you access a link to a network while logged in to your account on the relevant network, the content of our page can be linked to your profile on the network, meaning that the network can link your visit to our website directly to your user account. If you want to prevent this, you should log out before clicking on the links. An assignment takes place in any case if you log in to the relevant network after clicking on the link.

**Links to our profiles on social networks**

On our website, we have incorporated links to our profiles on the following social networks:

– Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA,
– Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA,
– Instagram Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and
– YouTube, a service provided by Google Inc.

If you click on the relevant social media icons, you will automatically be redirected to your profile on the corresponding network. To use the social media network’s features at that location, you must partially log in to your user account on the relevant social network.

When you open a link to one of our social media profiles, a direct connection is established between your browser and the server of the relevant social network. This provides the network with information indicating that you have visited our website with your IP address and accessed the link. If you access a link to a network while logged in to your account on the relevant network, the content of our page can be linked to your profile on the network, meaning that the network can link your visit to our website directly to your user account. If you want to prevent this, you should log out before clicking on the links. An assignment takes place in any case if you log in to the relevant network after clicking on the link.

**RIGHT TO INFORMATION, DELETION, AND CORRECTION**

You can request information about the personal data we hold about you free of charge at any time. Requests for information must be submitted in writing and accompanied by proof of identity. You also have the right to request the deletion or correction of your data held by us at any time. You also have the right to request the retrieval of the data you have provided to us (right to data portability). Upon request, we will also transfer the data to a third party of your choice. You have the right to receive the data in a common file format.

You can do this by sending a request by email to contact@goldshteynsaatortgallery.com. For other ways to contact us, please refer to the “Contact” section.

Please note that if your data is deleted, our services may not or no longer be usable in whole or in part. You can withdraw your consent to certain data processing at any time, with the withdrawal taking effect in the future.

Please note that we are required by law to retain certain data for a certain period. Therefore, we are required to retain such data until the end of this period. We will block these data in our system and only use them to comply with legal requirements.

**ADVICE FOR CHILDREN AND PARENTS**

The Goldshteynsaatortgallery website is intended for an adult audience. Minors, especially children under 13, are prohibited from transmitting personal data about themselves to us or registering for any service. If we become aware that such data has been transmitted to us, it will be deleted from our database. Parents (or legal guardians) can contact us and request the deletion of the data or the cancellation of the registration. For this purpose, we ask for a copy of an official document confirming that you are a parent or legal guardian.

**DATA SECURITY**

We use appropriate technical and organizational security measures that we consider adequate to protect the data we hold about you against manipulation, partial or total loss, and unauthorized access by third parties. Our security measures are constantly updated to keep pace with technological developments.

We also take the protection of our internal company data very seriously. Our employees and the service providers we engage are obliged to maintain confidentiality and comply with data protection laws. Furthermore, they only have access to personal data to the extent necessary.

**DATA RETENTION**

We only retain personal data for as long as necessary,

– to use the tracking services mentioned within the scope of our legitimate interest;
– to perform services within the scope outlined above, which you have requested or for which you have given your consent.

We retain contractual data longer if our legal retention obligations require it. The retention obligations that require us to retain data arise from accounting and tax regulations. According to these regulations, business communications, contracts concluded, and accounting records must be retained for up to 10 years. If we no longer need these data to provide services to you, they will be blocked. This means that the data will then only be used for accounting or tax purposes.

**CONTACT**

If you have questions about data protection on our website or want more information or to have your data deleted, please contact us by filling out the CONTACT FORM or sending us an email at contact@goldshteynsaatortgallery.com.

If you want to contact us by mail, please address your inquiries to:

SAS Goldshteynsaatortgallery
167 Blvd du Montparnasse
75006 PARIS
France

**Complaint to a Data Protection Supervisory Authority**

You have the right at any time to lodge a complaint with a data protection supervisory authority.

**Last updated: 2021**