PRIVACY POLICY (GDPR)
Last updated: 13 August 2026
1. CONTROLLER
The controller responsible for the processing of personal data on this website is:
SILVERFINEART e.U.
Gerald Berghammer
Lindengasse 28/3
1070 Vienna
Austria
Email: sales@silverfineart.com
2. GENERAL INFORMATION
We process personal data only where necessary to operate and secure this website, respond to enquiries, provide our art advisory services, process orders and payments, arrange delivery, comply with legal obligations and, where you have given your consent, provide newsletters, analytics and marketing services.
Personal data means any information relating to an identified or identifiable natural person.
Depending on the processing activity, we rely in particular on the following legal bases under the General Data Protection Regulation (GDPR):
your consent – Art. 6(1)(a) GDPR
performance of a contract or pre-contractual measures – Art. 6(1)(b) GDPR
compliance with legal obligations – Art. 6(1)(c) GDPR
our legitimate interests – Art. 6(1)(f) GDPR
Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
3. WEBSITE ACCESS AND TECHNICAL DATA
When you visit this website, technical information may be processed automatically. This may include:
IP address
browser type and version
device and operating system information
date and time of access
requested page or URL
referring website or source
technical error and security information
This information is processed to provide the website securely and reliably, detect technical problems, prevent misuse and protect our website and systems.
Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in the secure and reliable operation of the website.
Technical log data is retained only for as long as necessary for website operation, security, troubleshooting or the investigation of suspected misuse, unless longer retention is required by law or necessary for the establishment, exercise or defence of legal claims.
4. SQUARESPACE WEBSITE PLATFORM
This website is hosted and operated using Squarespace.
Squarespace provides technical infrastructure, hosting, website functionality, e-commerce services, checkout functionality and other services required to operate this website.
In connection with these services, Squarespace may process technical and personal information relating to visitors and customers, including browser, device, network, IP address, website activity and order information.
Squarespace may act as a processor on our behalf and, for certain processing activities, as an independent controller in accordance with its own privacy information.
Legal basis: Art. 6(1)(b) GDPR where processing is necessary for contractual services and Art. 6(1)(f) GDPR for the secure and effective operation of our website.
5. CONTACT REQUESTS AND ART ADVISORY
If you contact SILVERFINEART by email, contact form, telephone or another communication channel, we process the information you provide.
This may include:
name
email address
telephone number
message content
artwork preferences
information about dimensions, interiors or projects
photographs or other files you voluntarily provide
We use this information to respond to your enquiry, provide art advisory services, prepare recommendations or offers and communicate with you about a possible purchase or project.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to pre-contractual measures or an existing contract and Art. 6(1)(f) GDPR for general enquiries and customer communication.
Contact information is generally retained for up to six months following completion of the enquiry unless the correspondence becomes part of a contractual relationship or longer retention is necessary for legal, accounting or evidentiary purposes.
6. ORDERS, CUSTOMER ACCOUNTS AND CONTRACT PERFORMANCE
When you place an order through our online shop, we collect and process information necessary to conclude and perform the contract.
This may include:
name
billing address
shipping address
email address
telephone number, where provided
order and product information
selected artwork, edition, size and presentation options
invoice information
payment and transaction confirmation
shipping and tracking information
communication relating to your order
information relating to returns, claims or customer service
We use this information to process and fulfil your order, produce or prepare the artwork where necessary, arrange shipping, issue invoices, provide customer service and comply with accounting and legal obligations.
Legal basis: Art. 6(1)(b) GDPR and, where statutory retention obligations apply, Art. 6(1)(c) GDPR.
Accounting records, invoices and related business documentation are generally retained for seven years in accordance with Austrian statutory requirements. Data may be retained for longer where required by law or necessary for the establishment, exercise or defence of legal claims.
7. SHIPPING AND DELIVERY
Where required to fulfil an order, we provide the information necessary for delivery to shipping companies, logistics providers, fine art transport providers or other delivery partners.
This may include:
recipient name
delivery address
telephone number
email address
shipment and customs information
The information is disclosed only to the extent necessary to arrange and complete delivery, provide tracking information, manage customs formalities or process transport claims.
Legal basis: Art. 6(1)(b) GDPR.
For international shipments, information may also be provided to customs authorities, customs agents or other authorities where required by law.
Legal basis: Art. 6(1)(c) GDPR.
8. PAYMENTS – SQUARESPACE PAYMENTS
We use Squarespace Payments to process payments made through our online shop.
Payment-related information is transmitted to Squarespace and the payment service providers involved in the transaction. Squarespace Payments currently uses third-party providers including Stripe for payment processing and Sift for fraud monitoring and detection.
Depending on the selected payment method, additional payment providers or wallet services may also process information under their own responsibility.
Payment information may include:
name
billing information
transaction amount
payment method
transaction identifiers
information required for fraud prevention and payment authentication
SILVERFINEART does not receive or store your complete credit or debit card details.
Purpose: payment processing, payment authentication, fraud prevention, chargebacks and transaction security.
Legal basis: Art. 6(1)(b) GDPR for payment processing and Art. 6(1)(f) GDPR for fraud prevention and secure transaction handling.
Payment service providers may process certain information as independent controllers in accordance with their respective privacy policies.
9. NEWSLETTER AND EMAIL MARKETING
If you subscribe to the SILVERFINEART newsletter, we process the information required to manage your subscription, generally your email address and, where provided, your name.
We use Squarespace Email Campaigns to manage and send newsletters.
Newsletter information may also be processed to measure basic campaign performance, such as successful delivery, opens and clicks, where these functions are enabled and legally permitted.
Purpose: sending newsletters, information about artists, artworks, exhibitions, new editions, gallery news and other SILVERFINEART communications.
Legal basis: your consent under Art. 6(1)(a) GDPR.
Where applicable, we use a confirmation procedure to verify newsletter registrations.
You may withdraw your consent at any time by using the unsubscribe link contained in our newsletters or by contacting:
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Your newsletter subscription data is retained until you unsubscribe or withdraw your consent. We may retain limited information afterwards where necessary to document your previous consent or opt-out and to comply with legal obligations.
10. COOKIES AND SIMILAR TECHNOLOGIES
This website uses cookies and similar technologies.
Cookies are small data files stored on your device. Similar technologies may include pixels, tags and local storage.
We distinguish between:
Strictly necessary cookies
These are required for essential website functions such as security, navigation, shopping basket functionality and checkout. They do not require consent where their use is strictly necessary to provide the service requested by you.
Analytics and performance cookies
These help us understand how visitors use the website and improve its performance.
Marketing cookies and similar technologies
These may be used to measure advertising performance, understand visitor behaviour and create or measure audiences.
Non-essential cookies and similar technologies are used only where you have given the required consent through our cookie banner or cookie settings.
Legal basis for non-essential technologies: Art. 6(1)(a) GDPR together with applicable ePrivacy requirements.
You can change or withdraw your cookie consent at any time using the cookie settings available on the website.
Withdrawal of consent does not affect processing carried out before the withdrawal.
Current information about cookie categories, providers, purposes and applicable storage periods is available through the website's cookie settings.
11. SQUARESPACE ANALYTICS
Squarespace may provide website analytics that help us understand traffic and interaction with this website.
Depending on our Squarespace settings and your cookie choices, analytics information may include:
browser, network and device information
IP address
referring website
pages visited
clicks and internal links
searches
scrolling and interaction information
timestamps
traffic and conversion information
Where Squarespace Analytics uses non-essential analytics or performance cookies, these are used only after the required consent has been provided.
Purpose: analysing website traffic and improving website performance and usability.
Legal basis: Art. 6(1)(a) GDPR where consent is required.
You can withdraw your consent at any time through the cookie settings.
12. GOOGLE ANALYTICS
Where you have given your consent, we use Google Analytics to analyse the use of our website and improve its content, usability and performance.
Google Analytics may process information such as:
pages viewed
website interactions
session information
device and browser information
approximate geographical information
technical identifiers
information derived from your IP address
Google Analytics may use cookies or similar technologies.
Purpose: website analytics, statistical evaluation and website improvement.
Legal basis: Art. 6(1)(a) GDPR.
Google Analytics is activated only where the required consent has been provided.
You may withdraw your consent at any time through the cookie settings.
13. META PIXEL
Where you have given your consent, we use Meta Pixel to measure and improve the effectiveness of advertising and marketing activities.
Meta Pixel may process information relating to interactions with this website, including events such as:
page views
searches
viewing products
adding products to a basket
beginning checkout
purchases
newsletter registrations or other defined interactions
Meta may combine information received through the Pixel with other information available to Meta in accordance with its own privacy policies.
Purpose: advertising measurement, conversion measurement, audience analysis and marketing optimisation.
Legal basis: Art. 6(1)(a) GDPR.
Meta Pixel is activated only where the required consent has been provided.
You may withdraw your consent at any time through the cookie settings.
14. SOCIAL MEDIA LINKS AND THIRD-PARTY CONTENT
Our website contains links to external social media services, including Instagram.
If you click such a link, you leave the SILVERFINEART website and the respective provider processes your information under its own responsibility.
Where third-party content such as social media feeds, videos, maps or similar services is embedded directly into the website, technical data such as your IP address may be transmitted to the relevant provider when the content loads.
Where consent is legally required, such third-party content is loaded only after you have provided the necessary consent.
15. RECIPIENTS AND SERVICE PROVIDERS
We disclose personal data only where necessary for the purposes described in this Privacy Policy, where required by law or where you have provided consent.
Recipients may include:
Squarespace – website hosting, e-commerce and checkout
Squarespace Payments
Stripe – payment processing
Sift – fraud monitoring and detection
Squarespace Email Campaigns – newsletter services
Google – analytics services where consented
Meta – marketing and advertising measurement where consented
shipping, logistics and fine art transport providers
payment and financial service providers
IT and technical service providers
accountants, tax advisers, legal advisers and other professional advisers
public authorities, courts or other bodies where disclosure is legally required
Where service providers process personal data on our behalf, appropriate data processing arrangements are used where required by Art. 28 GDPR.
We do not sell personal data.
16. INTERNATIONAL DATA TRANSFERS
Some technology and service providers used by SILVERFINEART may process personal data outside the European Economic Area (EEA), including in the United States.
Where personal data is transferred to a country outside the EEA, we ensure that an appropriate transfer mechanism under the GDPR applies.
Depending on the recipient and destination, this may include:
an adequacy decision of the European Commission
the EU–US Data Privacy Framework where the US recipient is appropriately certified
Standard Contractual Clauses approved by the European Commission
other legally recognised safeguards under Chapter V GDPR
Squarespace states that transfers of personal data to Squarespace, Inc. in the United States may rely on the EU–US Data Privacy Framework and, where appropriate, other recognised transfer mechanisms.
Further information about the safeguards applicable to a particular processing activity may be requested from:
17. STORAGE AND DELETION OF PERSONAL DATA
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as statutory retention obligations apply.
The relevant retention period depends on the type of information and purpose of processing.
In particular:
contact enquiries are generally retained for up to six months after completion of the enquiry unless longer retention is necessary
contractual and order information is retained for the duration of the contractual relationship and applicable limitation periods
invoices and accounting records are generally retained for seven years in accordance with Austrian statutory requirements
newsletter data is retained until consent is withdrawn or the subscription is terminated, subject to limited continued storage where necessary to document consent or an opt-out
cookie, analytics and marketing information is retained in accordance with the applicable cookie settings and provider retention periods
information required for the establishment, exercise or defence of legal claims may be retained for the relevant limitation period
When personal data is no longer required and no statutory obligation or legitimate reason for continued retention exists, it is deleted or anonymised.
18. YOUR DATA PROTECTION RIGHTS
Subject to the requirements of the GDPR, you have the right to:
obtain information about the personal data we process concerning you – Art. 15 GDPR
request correction of inaccurate personal data – Art. 16 GDPR
request deletion of personal data – Art. 17 GDPR
request restriction of processing – Art. 18 GDPR
receive certain personal data in a structured, commonly used and machine-readable format – Art. 20 GDPR
object to processing based on legitimate interests – Art. 21 GDPR
withdraw consent at any time with effect for the future – Art. 7(3) GDPR
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.
To exercise your rights, contact:
We may request appropriate information to verify your identity before responding to a request.
19. RIGHT TO LODGE A COMPLAINT
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.
In Austria, you may contact:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
You may also lodge a complaint with another competent supervisory authority where provided by the GDPR.
20. REQUIREMENT TO PROVIDE PERSONAL DATA
Providing personal data for general website browsing is not generally required beyond technical information necessary to operate the website.
Certain information is, however, necessary if you wish to:
place an order
receive delivery
make a payment
request art advisory or other services
enter into a contract with SILVERFINEART
Without the information required for these purposes, we may be unable to process your order or provide the requested service.
Newsletter subscriptions and consent to optional analytics or marketing technologies are voluntary.
21. AUTOMATED DECISION-MAKING
SILVERFINEART does not use personal data to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Art. 22 GDPR.
Payment and fraud-prevention providers may use automated systems as part of payment security or fraud detection in accordance with their respective privacy information.
22. DATA SECURITY
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no transmission or storage system can guarantee absolute security.
23. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy where necessary to reflect changes in legal requirements, technology, our website, services or data processing activities.
The current version is always published on this website. The date of the most recent revision is stated at the beginning of this Privacy Policy.
If material changes affect the way we process personal data, we will provide additional information where required by law.