Privacy Policy (GDPR)
Information on how Artify collects, processes, and protects your personal data in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
1. Data Controller
The data controller pursuant to Article 4(7) of Regulation (EU) 2016/679 (GDPR) is AlterWear s.r.o., with registered office at Werferova 6, 040 11 Košice - mestská časť Juh, Slovak Republic, Company ID (IČO): 53 553 179, Tax ID: 2121408894, registered in the Commercial Register of the Municipal Court Košice, Section: Sro, Insert No.: 50924/V (Contact: privacy@artify.sk, Phone: +421 948 123 456).
2. Personal Data We Process
We process personal identification, delivery addresses, order history, and technical session data required for artwork purchases, artist portfolio management, and platform security.
3. Purposes & Legal Grounds
Processing is carried out for contract fulfillment (Art. 6(1)(b) GDPR), statutory accounting obligations (Art. 6(1)(c) GDPR), legitimate interests in platform security and verified review integrity (Art. 6(1)(f) GDPR), and optional consent for analytics (Art. 6(1)(a) GDPR).
4. Data Recipients & Processors
Data processors include Stripe Payments Europe Ltd. (payments), Supabase/AWS (secure cloud database within the EU), courier services (Packeta, postal and courier operators for artwork shipping), and Resend (transactional email).
5. Data Retention
User account data is retained for the duration of registration. Tax and invoice records are preserved for 10 years in compliance with statutory requirements.
6. Your GDPR Rights
You hold the right to access, rectify, erase ("right to be forgotten"), restrict processing, data portability, and object to processing. Contact privacy@artify.sk to exercise your rights.
7. Security & Cookies
All traffic is protected via TLS 1.3 encryption. For details regarding cookies and consent preferences, see our Cookie Policy.
8. Contact & Supervisory Authority
You hold the right to lodge a complaint with the relevant Data Protection Authority (Slovak Data Protection Authority: dataprotection.gov.sk; Czech DPA: uoou.gov.cz).