Politique de confidentialité

Privacy Policy

At Artransfer, when it comes to your personal data, security and transparency are top priorities. The personal data we process is accurately described in this Privacy Policy document. This document also details how and why we collect and use this data. It also outlines your rights under the General Data Protection Regulation ("GDPR"). All terms mentioned in quotes in this Privacy Policy are defined in our Terms and Conditions or the documents titled as such, all of which are available on the platform. Our "Cookie Policy" provides information on how we collect personal data using cookies or similar technologies.

Article 1. Information processing and collection

Our online sales platform collects information that enables you to fully use its features and services.

Article 1.1. - Your profile

Several information is requested from you when you create your personal account.

When signing up as a member on the Platform, you must provide the following data to complete the registration process and access your Artransfer account:

An email address (required when registering without a Google, Facebook, or Apple account);
Confirmation of adulthood;
Password (required when registering without a Facebook or Google account);

Once these details are entered (and if you are not registering via a Google, Facebook, or Apple account), Artransfer will send you a code to your email address to enter into the application.

The legal basis for the collection and use of data is the execution of a contract (TC) to which you have subscribed or the taking of measures, at your request, prior to the conclusion of the contract (TC).

We collect and use your personal data for this purpose until your Artransfer account is deactivated or for 5 years from the moment your account becomes inactive.

If you sign up using your Google Ireland Ltd. (Ireland), Google LLC (United States) ("Google"), Meta Platforms Ireland Ltd. (Ireland), Meta Platforms, Inc. (United States) ("Apple") account, or if you later decide to link your Google, Facebook, or Apple account to your Artransfer account, you will be redirected from our Platform to the Facebook, Google, or Apple website and prompted to enter your Facebook, Google, or Apple ID login information.

If you enter your Google login information, Artransfer will receive the following data from Google regarding your Google account (you may choose not to provide certain data):

Profile picture;
First and last name ;
Google account ID;
Email address.

If you enter your Apple ID login information, Artransfer will receive the following data from Apple regarding your Apple ID account (you may choose not to provide your email address by using Apple's private email relay service):

First and last name ;
Email address ;
Apple account ID

The data we obtain from Facebook, Google, or Apple will be used to set up your Artransfer account. This means we will use the member name for your Artransfer account, so it is visible to other website visitors and application users. No one will have access to other data obtained from Facebook, Google, or Apple on the Platform.

You can unlink your Facebook, Google, or Apple ID account at any time. To do so, go to the "My Settings" section of your Artransfer account. However, if you did not link your Facebook, Google, or Apple ID account during your initial registration, you can still do so later.

The collection and use of data are based on your consent (under the GDPR).

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 1.2. - Artransfer Profil

Following the creation of your account, you will be asked to provide us with more detailed information in your Personal Profile by sharing the following information:

Your full name;
Your postal address;
Your banking information;
A profile picture (optional).

Moreover, should you decide to put a work up for sale, we will ask you to verify your profile through our partner KYC.

In addition, when you reach the transaction stage, we may ask you, and it becomes a legal obligation when the transaction exceeds 10,000 euros (LCB/FT system since the law of May 15, 2001):

A statement of your identity document;
A comparison with your photo;
A withdrawal or delivery address;
A bank account number to receive the proceeds of the sale.

This information will allow us to:

Contact you;
Verify that you are of legal age (+18 years old);
Ensure that your purchases/sales on our online resale platform can be sent to you or picked up at your address;
Ensure that you can make or receive payments or refunds.

Your consent constitutes the legal basis for the collection and use of said data.

We collect and use your personal data for this purpose until your Artransfer account is deactivated or for 5 years from the moment your account becomes inactive. The metadata of your photo that contains personal data is immediately deleted.

Article 1.3. - Identity verification

A scan or photograph of your valid identification document may be requested, as well as a photo of your face. They must be of good quality so that we can verify your identity, particularly to comply with the LCB/FT system since the 2001-420 law of May 15, 2001 requires art market professionals to collect the identities of their buyers should the transaction exceeds 10,000 euros.

Article 1.4. - Profile information configuration

If you choose to add information to the account profile you create on the Platform, we collect and use the following data, provided that you agree to provide them:

Full name;
Account name;
Your date of birth;
Your profile photo ;
Metadata related to the photo you upload (geolocation, device identification number, date and time the photo was taken, etc.)
Your favourites;
Your works under different statuses and affiliated information.

Your profile photo and your account name are visible to other users of the Platform, but other data you enter is not.

Your consent constitutes the legal basis for the collection and use of said data.

Article 1.5. - Selling your artwork

If you sell artwork on the Platform, we will collect and use the following data in order to create, publish or delete listings on the Platform:

The title of the artwork;
The artist of the artwork;
The dimensions of the artwork;
The date of the artwork;
The technique of the artwork;
The category of the artwork;
The style of the artwork;
Photos of the artwork;
Metadata relating to the photo you upload (geolocation, device identification number, date and time the photo was taken, etc.);
The price of the artwork;
The location of the artwork;
Other information about the artwork (edition number, etc.).

Your consent constitutes the legal basis for the collection and use of said data.

Personal data collected and used for this purpose is kept for 18 months and 7 days from the moment your account becomes inactive. Photos are kept for 3 months after the item is deleted. Metadata from your photos containing personal data is immediately deleted.

Article 1.6. - Notification activation on the Platform

When you sign up on the Platform, you may receive notifications on the Platform about your favourites, as well as messages received, offers, transaction and delivery steps.

The execution of a contract to which you have subscribed constitutes the legal basis for the collection and use of data.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 1.7. -Communication with other members

If you communicate with other members of the platform, we collect and use the following data:

If you communicate with other members of the platform, we collect and use the following data:
The messages;
The date and time of the messages;
The shared photos;
Your device;
Information about whether a member has seen your message or not;
Other data indicated in the messages.

The execution of a contract (TC) to which you have subscribed constitutes the legal basis for the collection and use of data.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Should you decide to delete a message from a conversation, it will instantly be hidden from you and the recipient, and then permanently deleted after 3 months from the moment it was deleted.

The legal basis for storing data from deleted messages is our legitimate interest in ensuring the security of our platform and our members.

Article 1.8. - Sending important information about the Platform

If you register on the Platform, we will send you emails and messages via the Platform's messaging system in order to provide you with important notifications, such as information about changes to the TC or Privacy Policy.

The execution of a contract (in accordance with the TC) to which you have subscribed and compliance with the legal obligations to which Artransfer is subject constitute the legal basis for the collection and use of data.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 1.9. - Sending offers via the Platform messaging system

If you register on the Platform, we will send you offers related to Artransfer services via the Platform's messaging system ("Offers").

Our legitimate interest in providing offers to our members is the legal basis for the collection and use of data (Art. 6(1)(f) of the GDPR, Art. 13(2) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications)).

We send and use your personal data for this purpose until your Artransfer account is deactivated or for a period of 5 years from the moment your account becomes inactive.

Article 1.10. - Access to customer support service

If you send us a question, request or complaint, we will collect and use the following data in order to provide you with the customer support services you request on the Platform:

Information related to your profile;
Information about your use of the Platform;
Information about transactions;
Information about delivery;
Communications;
Age;
Gender;
IP address;
Session information;
Announcements, photos and videos of the work;
Requests;
Other information submitted by you.

The type of information we collect may vary depending on your request.

The execution of a contract (TC) to which you have subscribed constitutes the legal basis for the collection and use of data.

In order to respond to your requests, Artransfer provides your data to service partners who provide customer support services.

The personal data collected and used for this purpose is kept for 2 years after the last update related to your request. If your account is deleted, the personal data collected and used for this purpose will be deleted with your account.

Article 1.11. Disputes related to any purchase between members

If you buy and/or sell items on the Platform and are involved in a dispute with another member, we will collect and use your personal data held by Artransfer necessary to resolve the dispute.

We base such collection and use on a legitimate interest in resolving disputes between our members and defending the rights and interests of Artransfer, and where applicable, complying with the legal obligations to which Artransfer is subject.

The personal data collected and used for this purpose is kept for 1 year after the resolution of a dispute.

Article 1.12. - Temporary storage of your disabled account

If you decide to disable your account, we will make reasonable efforts to ensure that it is no longer visible on the Platform and to limit the use of your personal data. For 3 months, it is still possible to restore your account if it was accidentally or wrongly deactivated, or if you change your mind and wish to use the Platform again, as well as take action if someone else has accessed your account and deleted it without your knowledge.

Artransfer's legitimate right and that of our members to restore your account if necessary, and where applicable, compliance with the legal obligations to which Artransfer is subject, constitute the legal basis for such storage of your data.

The personal data is kept for this purpose for 3 months from the date of deactivation of your Artransfer account.

After these 3 months, we will permanently delete your account on our Platform.

Article 2. Improving your experience when using the Platform

We collect and use your personal data in order to improve your experience when using the Platform, by allowing you to customize your newsfeed and search results, providing relevant suggestions, and saving your previous searches, sending you notifications, and otherwise making the use of the Platform more enjoyable.

Article 2.1. - Activation of your preferences for your news feed and search results

If you choose to customize the works that appear to you on the Platform (on the works newsfeed, the catalogue, and search results), we will collect and use the following data to present you with a personalized newsfeed based on your preferences:

Information about your possible interest in styles of works;
Specific categories;
Specific artists.

Your consent constitutes the legal basis for the collection and use of said data.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 2.2. - Personalizing your feed and search results

We also personalize your feed by evaluating your preferences based on the following elements:

Gender;
Age;
Country;
Language;
Information related to your browsing activity on the Platform;
Purchase history;
Your preferences.

The legitimate interest of Artransfer and its members to make the Platform more convenient for our members and, through personalization, allow you to see offers from other members that may interest you the most, forms the legal basis for said collection and use.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 2.3. - Offering relevant works

If you choose to create ads for works on the Platform, we will collect and use the data you provide in the ad, analyzing them to offer members who view your works other relevant works or to offer members your works that may interest them.

Our legitimate interest in improving the Platform and ensuring that our members receive relevant suggestions and search results forms the legal basis for said collection and use.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 2.4. - mproving search results on the Platform

We collect and use the data provided in ads for works that do not contain any information about the sellers to improve search results by evaluating the relevance of certain works when a specific search keyword is used, and to automatically suggest relevant categories for new ads. We only use ads for works that are not related to any particular seller.

Our legitimate interest in improving the Platform and ensuring that our members receive relevant suggestions and search results forms the legal basis for said collection and use.

Artransfer uses service providers that provide data analysis services.

We collect and use your personal data for this purpose until the deactivation of your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 2.5. - Recording your recent searches

Artransfer records your search keywords to help you find works that you have previously searched for on the Platform. The following data is collected and used to provide information about newly added works on the Platform based on the keyword you previously used for your search:

Your search history (last keywords used to perform a search);
The date and time of your search;
The number of newly added works.

The legitimate interest of our members and Artransfer in improving search results on the Platform constitutes the legal basis for the collection and use of this data.

You can delete your search history at any time.

Unless you delete your search history earlier, we collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the time your account becomes inactive.

Article 2.6. - Suggesting a price when a listing is created for a work

If you choose to offer a work for sale on the Platform, you can indicate the selling price or ask our teams to help you determine the selling price.

If the selling price you have indicated is higher than the current market value of the artist, Artransfer will provide advice on redefining the price to facilitate its sale and promotion.

If you do not want to change the selling price you have set beforehand, the work will be shown by Artransfer in the format of "Make an offer" to potential buyers.

Our legitimate interest in helping our members choose the right price for their works constitutes the legal basis for the collection and use of this data.

When you add your works, we collect and use the information used to analyze your works throughout the entire process of adding the work. When you sell works, we collect and use the data mentioned above for 3 months after the sale of the work.

Article 2.7. - L’activation de notifications relatives à vos œuvres mises en favori

If you mark an artwork offered for sale by another member on the Platform as a "favourite", Artransfer will inform you when its price has been reduced or when it has been sold.

To do so, we will collect and use the following data:

The title of the favourite artwork; ;
The photo of the favourite artwork;
The seller of the favourite artwork ;
The price of the favourite artwork;
Information on the sale or non-sale of the favourite artwork ;
Information on the reduced price.

The legitimate interest of our members and Artransfer to facilitate sales on the Platform constitutes the legal basis for said collection and use.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account is inactive.

Article 2.8. - Notification of sellers when you mark their artworks as favourite

If you mark an artwork on the Platform as a favourite, Artransfer will notify the seller accordingly.

The legitimate interest of our members and of Artransfer to facilitate sales on the Platform constitutes the legal basis for said collection and use.

You can deactivate the aforementioned notifications by logging into the Platform and modifying the relevant settings in the privacy settings.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 2.9. - Improving our Platform

Artransfer is committed to providing you with the best-performing Platform possible. When the Platform is used, Artransfer collects information about the actions performed on it (button clicks, visit times, notification readings, other information related to a particular case study) to help us make decisions on how to improve the Platform and make it an optimal experience for our members.

Our legitimate interest in maintaining performance and improving the Platform is the legal basis for such collection and use.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 2.10. - Conducting surveys

We are constantly looking for ways to improve your user experience on Artransfer. That's why we may invite you to participate in a survey and use your feedback. For this purpose, we collect and use the following data:

Account name;
Gender;
Age;
Location;
Responses to our questions (e.g., your satisfaction with the Platform, your needs regarding the Platform, problems you encounter using the Platform).

Our legitimate interest in receiving feedback from our members and using it to improve the Platform is the legal basis for inviting you to participate in the survey.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

If you wish to participate in the survey, the above information will be collected based on your consent.

We will anonymize your responses after 3 months, meaning that the responses will no longer be associated with you.

Article 2.11. - Sharing your user journey

We are constantly improving our Platform and looking for ways to enhance your user experience on Artransfer. In case you give your consent, we allow you to share your user journey across our Platform. We will collect and use the following data:

Account name;
Contact details;
Date and time of survey;
Screen recording;
Voice recording;
Video recording.

Our legitimate interest in receiving feedback from our members and using it to improve the Platform is the legal basis for inviting you to participate in sharing your user journey.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

If you wish to participate in the survey, the above information will be collected based on your consent.

We will anonymize your responses after 3 months, meaning that the responses will no longer be associated with you.

Article 3. Your account and Platform security monitoring

Artransfer strives to ensure that the accounts of our members and the Platform itself are secure and protected from cyber attacks, unauthorized access, and other related risks.

Article 3.1. - Tracking the number of visits to the Platform for security purposes

When you log in to the website or application, we collect and use the following data, even if you are not logged into the website as a member:

Account name;
IP address of your device;
Browser used by your device;
Content and URLs you connect to;
Date and time of your connections.

In the case of access via mobile devices, the following log files are also captured as part of your use of the Artransfer application:

The model and manufacturer of your mobile device;
The operating system used by your mobile device (iOS, Android, etc.).

This data is used for security purposes, particularly to prevent data capture cyber attacks and denial of service attacks, as well as prohibited multiple applications.

Our legitimate interest in protecting the Platform and ensuring its security, and the legitimate interest of our members in ensuring the security of their accounts on the Platform constitute the legal basis for such collection and use.

The personal data collected and used for this purpose is retained for 3 months.

Article 3.2. - The ability to reset your password

If you have forgotten your password or decide to change it for other reasons and do not have access to your email, we may ask you to answer a few security questions to verify your identity. For this purpose, we collect and use the following data:

Email address;
Date of birth;
Date of registration;
Information about the last transaction.

Our legitimate interest in protecting the Platform, and ensuring its security, and the legitimate interest of our members in ensuring the security of their accounts on the Platform constitute the legal basis for such collection and use of your personal data.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 3.3. - Verifying your account in case of suspicious actions related to it

If we detect actions considered suspicious by Artransfer on your account, we will ask you to perform a basic verification: confirm your email. For the purpose of performing a basic verification, we collect and use the following data:

Email adress.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 3.4. - Email account verification

When you register, you receive a 4-digit code via email to enter in the application that allows us to verify your identity and secure your access.

In this sense, Artransfer will collect and use your email address for verification purposes.

Personal data is necessary for mandatory identity verification with you at the time of registration. If you do not provide us with this personal data, we will not be able to conclude and execute your registration.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 3.5. - Security verification of payment source

As part of the security process, we ask our members to provide verification of their payment source. In order to carry out these security verifications, Artransfer collects and uses the following personal data:

Account name;
When we carry out a security verification of a bank card, namely the information contained on a photo of the bank card: first name, last name, card expiration date, and the last 4 digits of the card number, and other visible information on the front of the card if the member chooses not to cover it;
When we carry out a security verification of a bank account, namely the information contained on a photo/screenshot of the bank statement listing the most recent fees: date and description of the latest fees related to Artransfer and other payment information if the member chooses not to blur them.

The personal data collected and used for this purpose is kept for 4 days after security verification.

Article 3.6. -Ensuring Compliance of Ads with the Authenticity Policy

As part of the due diligence done by Artransfer and as professionals in the art market, we collect and use the following data to protect buyers and ensure that these ads comply with our Authenticity Policy:

Information provided within the ad;
Information related to the authenticity of the artwork: photos of the artwork, photo of the signature, attachments of the purchase invoice and certificate of authenticity or any other relevant information demonstrating the authenticity of the artwork.

Artransfer may provide the purchase invoice and/or certificate of authenticity of the artwork to potential buyers if the communication of such information is decisive in the sale of the artwork.

Our legitimate interest in protecting the Platform and our members against possible counterfeits constitutes the legal basis for such collection and use of your personal data.

We may share ad photos and other authenticity evidence, without your personal data, with artists and/or art market professionals, to verify certain works.

The personal data collected and used for this purpose is kept for 2 years as long as it is necessary for the purpose of resolving a dispute between our users.

Article 3.7. - Verification of account ownership

As part of the security process, we may ask our members to verify the ownership of their Artransfer accounts. In order to confirm your identity, we will need one of the following proofs:

A photo/screenshot of your bank statement showing your recent debit(s) on Artransfer;
A photo of the credit card used to make your purchases on Artransfer (the photo must show the full name of the cardholder, the last 4 digits, and the expiration date of the card).
A photo of the credit card used to make your purchases on Artransfer (the photo must show the full name of the cardholder, the last 4 digits, and the expiration date of the card).

The personal data collected and used for this purpose is kept for 3 years from the date of receipt of the proof.

Article 3.8. - Reporting inappropriate behaviour or content

If you choose to report inappropriate messages, members, items, unwanted or fraudulent emails, we will collect and use the following data for the purpose of ensuring the security of the Platform and its members:

The reported content;
The reason for the report;
The information provided in the report;
The date and time of your report.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 4. Supervision of compliance with the TC

Artransfer actively monitors compliance with and enforcement of the TC to ensure the security of your account and the Platform.

Article 4.1. - Moderation of Your Activity on the Platform

To ensure the security of the Platform and its members, Artransfer regularly moderates your activity on the Platform. We may check your ads, comments, and messages either automatically or when we receive reports from other members or third parties.

If you communicate with another Artransfer member through private messages and either you or another member reports or forwards information about a transaction, we collect and use the information in your communication to track a potential violation of our TC.

Our legitimate interest in protecting the Platform and its users and ensuring its security, and the legitimate interest of our members in ensuring their safety on the Platform, are the legal basis for such collection and use.

We collect and use your personal data for this purpose until your Artransfer account is deactivated or for five years from the time your account becomes inactive.

Article 4.2. - Issuing and Enforcing Warnings

If, as a member, you violate our TC or take other actions that result in the receipt of a warning, we collect and use the following data to issue and enforce the warning:

Account name;
Type of warning received by the member;
Date of receipt of the warning by the member.

We collect and use your personal data for this purpose until the deactivation of your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 4.3. - Removal or masking of works that violate Artransfer's TC

If you post works that violate our TC and Artransfer becomes aware of it after moderation, we will remove or mask them. However, we will keep the removed ads as evidence of the violation. For this purpose, Artransfer uses personal data included in the ad.

Our legitimate interest in protecting the Platform and its users and ensuring its security, and the legitimate interest of our members in ensuring their safety on the Platform, constitute the legal basis for such collection and use.

Removed posts are kept for 30 days after their removal.

Article 4.4. - Detection and locking of compromised accounts

To protect our members and the Platform, we regularly check for suspicious activities to detect compromised accounts. If we determine that your account may be compromised or if we receive your request, we may need to lock your account.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 4.5. - Suspension of members

If you send too many messages in a short period of time, you may be suspended for a period of 1 to 6 hours. For this purpose, Artransfer collects and uses the time and duration of the suspension.

Our legitimate interest in protecting the Platform and its users, and ensuring its security, and the legitimate interest of our members in ensuring their security on the Platform, constitute the legal basis for such collection and use.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 4.6. - - Blocking of Member Accounts

Depending on your use of the Platform, and as explained in our Terms and Conditions, your account may be blocked, temporarily or permanently.

Artransfer may use fully automated tools for this account blocking when it comes to ensuring the integrity of the Platform and the provision of secure services. This automation is necessary for Artransfer to effectively manage security on the Platform and prevent harm to other members.

When your account is blocked, we collect and use the following data to carry out the block:

Your account data;
Data related to the blocking of your account, such as the reason, date, and time of the block.

The execution of a contract (TC) to which you have subscribed constitutes the legal basis for the collection and use of said data.

We collect and use your personal data to make the decision to block your account until your Artransfer account is deleted. To carry out the blocking, we collect and use your personal data during the period of the block, that is, up to 14 days or 3 months from the time you were blocked.

Article 4.7. - Respecting Blocked IP Addresses

We will collect, use, and block your IP address if it shows signs of cyberattacks or other risks to the security of the Platform in order to protect the Platform.

Personal data collected and used for this purpose is kept for 5 years.

Article 5. Authorization and possibility of payment for works

Payments on the Platform are made through payment service providers that provide payment processing and escrow services.

We need most of your personal data to enter into a contract (TC) with you. If you do not provide us with this personal data, we will not be able to enter into and perform a contract (TC) with you. Some of your data is necessary to comply with the legal obligations of our payment service providers when you are a member of our Platform. If you do not provide us with this personal data, we or our payment service providers will not be able to comply with legal requirements and we will not be able to provide our services.

This data is also used to improve the Platform so that we can offer a better experience to our members.

Article 5.1. - Authorization and possibility of making a purchase or adding a bank card for payment purposes

When you add a bank card or purchase additional works or services through the Platform, we collect and use the following data in order to enable you to make payments:

Full name;
The first six and last four digits of your bank card number;
Expiration date.

When you add a bank card or purchase an item or additional services through the Platform, the payment service provider receives the following data:

First and last name of the cardholder;
Bank card number;
Expiration date;
Security code (CVV/CVC).

The execution of a contract (in compliance with the TC) to which you have subscribed constitutes the legal basis for the collection and use of data.

To conclude a contract (TC) with you, we will need your personal data. If you do not provide us with this personal data, we will not be able to conclude and execute a contract (TC) with you.

If you agree, we will keep the details of your bank card for future use. These details can be found in your personal space. You can modify your payment information there.

Your consent constitutes the legal basis for the collection and use of said data.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 5.2. -Adding a bank account for withdrawals

When you add a bank account for withdrawals, we collect and use the following data for the purpose of allowing you to withdraw money:

The first and last name of the account holder;
The account number;
The address.

The execution of a contract to which you have subscribed constitutes the legal basis for the collection and use of data.

To conclude a contract (TC) with you, we will need your personal data. If you do not provide us with this personal data, we will not be able to conclude and execute a contract (TC) with you.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 5.3. - Payment and receipt of payment on our Platform

If you choose to pay a seller or additional services by credit card or any other means integrated into the Platform, or if you use other services on the Platform for which fees apply, the transaction in question will be collected and used through our electronic payment system.

If you use a credit card as a payment method, Artransfer will only see the cardholder's first and last name, the first six and last four digits of your credit card number, and the expiration date. This information will be used by us only for the purpose of confirming payment.

The execution of a contract (in compliance with the TC) to which you have subscribed constitutes the legal basis for the collection and use of data.

To conclude a contract (TC) with you, we will need your personal data. If you do not provide us with this personal data, we will not be able to conclude and execute a contract (TC) with you.

We will collect and use your personal data for this purpose until the deactivation of your Artransfer account or for 5 years from the time your account becomes inactive.

Article 5.4. - Activating "Know Your Customer" (KYC) checks on our Platform

To ensure the safety of its Platform, Artransfer verifies the identity of each seller (regardless of the amount of the sale) as well as the identity of each buyer (for amounts of 10,000 euros or more).

As soon as you reach the KYC thresholds, we will ask you to provide a copy of your passport, ID card or driver's license, including the provisional license.

Article 5.5. - Verification of politically exposed persons (PEP) on our Platform

In rare cases, additional information may be required in order to continue using Artransfer. When you have a lot of transactions on our Platform, our payment provider may ask us to perform additional checks as part of anti-money laundering and counter-terrorism financing measures. In this case, we collect and use the following personal data provided in a statement regarding politically exposed persons (PEP):

Full name;
Date and place of birth;
Country of residence;
Address;
Phone number;
Email address;
Position held and country where the position is held;
Source of funds used on the Platform or destination of funds;
Information about family members who are PEPs (relationship to PEPs, full names, dates and places of birth);
Current employment;
Date ;
Signature.

This is necessary to comply with the legal obligations that our payment provider is subject to.

The personal data collected and used for the aforementioned purposes are kept until this information is transferred to our payment service provider.

Article 5.6. - Refunds

If an artwork you purchase never gets shipped, arrives damaged, or is not as described, and you make a claim, we collect and use the data used to make the purchase for the purpose of issuing a refund. In this case, you are required, with the help of Artransfer, to return the artwork to its owner.

The execution of a contract (TC) to which you have subscribed constitutes the legal basis for the collection and use of data.

To conclude a contract (TC) with you, we will need your personal data. If you do not provide us with this personal data, we will not be able to conclude and execute a contract (TC) with you.

Transaction data is kept for 13 months from the day of the transaction.

Article 5.7. - Keeping financial records

If you participate in buying and/or other transactions when using the Platform, Artransfer will collect and use the following data to carry out its accounting tasks:

Full name;
Account name;
The address;
Value and description and/or services provided.

This is necessary to comply with the legal obligations to which Artransfer is subject.

Financial regulations require us to keep accounting documents that confirm transactions for 10 years.

Article 6. The possibility of delivering works purchased on the Platform

Artransfer strives to make the delivery of works purchased on the Platform as easy and convenient as possible by offering different delivery methods on the Platform.

We need most of your personal data to conclude a contract (TC) with you. If you do not provide us with this personal data, we will not be able to conclude and execute a contract (TC) with you.

This data is also used to improve the Platform so that we can offer a better experience to our members.

Article 6.1. - Possibility of shipping or receiving works

Si vous choisissez de saisir vos informations de livraison ou lorsque vous achetez, vendez ou échangez des articles, nous collectons et utilisons les données suivantes que vous fournissez à des fins d’expédition et d’envoi :

Full name;
Country;
City;
ZIP Code ;
The address;
Phone number;
Email address;
Email address;
The address of the parcel pick-up point;
The tracking number of the parcel;
The confirmation of delivery of the parcel;
Other delivery information required by a particular transport service provider.

The execution of a contract (TC) to which you have subscribed constitutes the legal basis for the collection and use of data.

To conclude a contract (TC) with you, we will need your personal data. If you do not provide us with this personal data, we will not be able to conclude and execute a contract (TC) with you.

We provide personal data collected and used for this purpose to the following recipients:

The seller of the work;
If the chosen transport provider integrates its shipping services with Artransfer services, we also provide them with the aforementioned data.

Otherwise, the seller is required to follow the instructions and provide your data to the transport provider.

The personal data collected and used for this purpose is kept for 10 years.

Article 6.2. - Tracking your package

When you buy or sell items on the Platform, we collect and use the following data for delivery tracking purposes:

The date and time of delivery of the package;
The tracking number of the package;
The address;
The location of the package.

Personal data is protected by the service provider, who undertakes to comply with the EU's standard contractual clauses for transferring data as approved by the European Commission.

The execution of a contract (TC) to which you have subscribed constitutes the legal basis for the collection and use of data.

To conclude a contract (TC) with you, we will need your personal data. If you do not provide us with this personal data, we will not be able to conclude and execute a contract (TC) with you.

The personal data collected and used for this purpose is kept for 10 years.

Article 7. - Implementation of Marketing Activities

Artransfer seeks to involve its members in advantageous marketing campaigns for them. Likewise, we want to present you with marketing material that is both relevant and attractive.

Article 7.1. - Sending marketing emails

You can subscribe to our newsletter and other marketing emails. When you sign up, we ask for your permission to use your email address to send you marketing emails containing the latest information about our products and services, particularly regarding goods available on the Platform, special offers, and marketing campaigns. If you do not give your consent when you sign up, you can change your mind at any time and agree to receive marketing emails by modifying the settings in your Artransfer account.

We base such collection and use on your consent.

You can give and withdraw your consent regarding the sending of marketing emails at any time, with future effect. In your Artransfer account, you can adjust your settings to choose which emails you want to receive or disable the sending of any future marketing emails. Alternatively, you can click "Unsubscribe" at the end of the marketing email. Withdrawing your consent will not affect the legality of the collection and use previously carried out.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 7.2. - Personalization of marketing messages

Artransfer will use the data used to register you on the Platform and those related to your Artransfer account, the data of your activity on the forum, your log files, and other means to personalize the marketing messages and advertisements presented to you.

We base said collection and use on our legitimate interest in presenting marketing messages that we consider relevant to you.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 7.3. - Contact for advertising and/or revenue opportunities

If you sign up on the Platform and at the time of offering a work for sale in "public" mode, the authorization box for Artransfer to share on its social media profiles is selected by default. You can uncheck it to not authorize the sharing of your works.

We may also contact you via the Platform's messaging system to offer you the opportunity to participate in our marketing campaigns, share your contact information with the press, or for any other advertising and/or revenue opportunity.

This allows us to ensure that only members who give their consent are presented on our social media profiles or benefit from opportunities and/or revenue.

We base said collection and use on our legitimate interest in increasing your publicity and that of Artransfer and/or providing you with revenue opportunities.

If you consent, we may verify the information in your profile to ensure that only members who have a good reputation (i.e. who respect the TC) are offered advertising and/or revenue opportunities by us. The collection and use of your personal data for this purpose is based on your consent.

If you consent to participate in the advertising and/or revenue opportunities we offer, subsequent collection and use of your personal data will be based on your consent.

We collect and use your personal data for this purpose until you deactivate your Artransfer account or for 5 years from the moment your account becomes inactive.

The messages themselves will be deleted after 12 months.

Article 7.4. - Permission to publish your content on our social media profiles and accounts

If you allow us by checking the "Social Media" box when proposing a work for sale, we may use your content on our social media profiles and accounts for marketing and public relations purposes.

We base such collection and use on your consent.

You can withdraw your consent at any time by logging into the Platform and unchecking the box in your settings.

In order to publish your content on our social media accounts, we provide data to the operators of the following social media platforms:

As the operators of the following social media platforms are based outside the European Economic Area, your personal data may therefore be transferred outside the European Economic Area. In these specific cases, personal data is protected by the operators who commit to respecting the EU standard contractual clauses for transferring data, as approved by the European Commission:

Linkedin Corporation (United States);
Google LLC (United States);
Meta Platforms, Inc. (United States).

We collect and use your personal data for this purpose until the deactivation of your Artransfer account or for 5 years from the moment your account becomes inactive.

Article .7.5. - Permission to see personalized advertisements

With your consent, Artransfer will allow its advertising service partners to collect your IP address and/or mobile device identifier, place their cookies on your devices, and then use this data to personalize the ads presented to you. This means that with your consent, you will receive ads based on your interests and activity on the Platform. Namely, advertising service partners will collect and use the following data:

The IP address of the connection ;
The mobile device identifier ;
The ad identifier ;
Information about the websites visited by the visitor (list of pages and products viewed, selected, placed in the cart or purchased on the Platform);
The URL of the pages visited by the visitor ("referrer"), URL of the previous page visited by the visitor;
Technical information about the browser, device type, and version of the visitor's operating system ("user agent");
The timestamp (date, time);
Information about possible relationships among different browsers and devices ;
Other information collected by a specific advertising service provider.

As far as personal data is concerned, we base the collection and use on your consent.

You can choose not to receive marketing and personalized advertising at any time by changing the relevant settings on the Platform. Withdrawing your consent will not affect the lawfulness of the previously implemented collection and use.

In order to enable our service providers to show you personalized advertising, we provide your data to partners who provide personalized advertising services.

For this purpose, information is collected by advertising service providers and is not stored by Artransfer.

Article 7.6. - L’évaluation de l’efficacité des campagnes promotionnelles

When you use the Platform, Artransfer analyzes its marketing activities and how you use the Platform (when you sign up, log in, create an ad, sell or buy something, upload a photo of an item, open our app, register or install our app, etc.) in order to evaluate the effectiveness of promotional campaigns and better understand visitor behavior when they have viewed a certain ad and consulted our Platform or downloaded our app.

We base this collection and use on our legitimate commercial interest in evaluating the effectiveness of our promotional campaigns in order to improve them.

In order to carry out the aforementioned evaluation, Artransfer provides your data to service providers who provide services for evaluating the effectiveness of promotional campaigns.

In order to optimize our advertising campaigns, we send certain information about your activities, such as those related to your opened apps, sessions, registrations, logins, information about your additions of works, photo downloads for works, or purchases of works, etc., to the advertising platforms of Google and Facebook.

Thus, we transfer the data of your activities to the following recipients:

Meta Platforms, Inc. (United States). Personal data is protected by the service provider who undertakes to comply with the EU's standard contractual clauses for transferring data as approved by the European Commission;
Google LLC (United States). Personal data is protected by the service provider who undertakes to comply with the EU's standard contractual clauses for transferring data as approved by the European Commission;

We collect and use your personal data for this purpose until your Artransfer account is deactivated or for 5 years from the time your account becomes inactive.

Article 7.7. - Management of our social media profiles

If you are interested in our activity and follow our profiles on social media, we collect and use the following data about you in order to manage our social networking sites:

First and last name;
Email address;
Gender;
Country;
Photo;
Message;
Time and date of message receipt;
Content of message;
Attachments to message;
Response to message;
Time of response to message;
Information about our evaluation;
Comments on a publication
Shares of the publication
Information about reactions to the publication

We base said collection and use on our legitimate interest in managing our social media profiles.

In order to manage our social media accounts established outside the European Economic Area, your data may therefore be transferred outside the European Economic Area. In these specific cases, personal data is protected by operators who undertake to comply with the EU's standard contractual clauses for data transfers, as approved by the European Commission:

LinkedIn Corporation (USA);
Google LLC (USA);
Meta Platforms, Inc. (USA).

The personal data collected and used for this purpose is kept as long as you are registered on a specific social network.

Article 8. Data collection and use for legal purposes

Article 8.1. - Processing your requests related to personal data

If you exercise your statutory rights regarding your data, we will collect and use the data in your request in addition to any other personal data held by Artransfer for the purpose of reviewing and responding to the request, and, if necessary, taking the necessary actions.

In order to respond to your requests, Artransfer provides your data to service partners who consult us on legislation and data protection.

We base such collection and use on a legitimate interest in exercising the rights of our members.

The personal data collected and used for this purpose is kept for 2 years from the day we respond to your request.

Article 8.2. - Sharing information with the police and other state institutions

If we have reasonable grounds to suspect that you are involved in illegal activities, we will collect and use the necessary data from your profile data and data collected and used for security purposes in order to report them to the police and other state institutions.

Artransfer also provides the above-mentioned data to the police and other state institutions when it receives requests for information regarding investigations conducted by these institutions.

This is necessary to comply with the legal obligations that Artransfer is subject to.

The personal data is necessary to fulfill our legal obligations when you are a member of our Platform. If you do not provide us with this personal data, we will not be able to comply with legal requirements.

Artransfer collects and uses your personal data for this purpose as long as we retain your Artransfer account - for 3 months from the date of deactivation of your Artransfer account or for 5 years from the time your account becomes inactive.

Article 8.3. - Defending our rights in relation to chargebacks

If you process transactions through our payment service providers, we will collect and use your personal data held by Artransfer to the extent necessary to resolve a particular situation.

We base such collection and use of your personal data on a legitimate interest in defending our rights in the event that a chargeback procedure is initiated by Artransfer.

The personal data collected and used for this purpose is kept for 13 months from the last transaction

Article 8.4. - Compliance with the French Digital Republic Law

In order to display a relevant version of our Platform, which is designed to comply with the French Digital Republic Law, we collect your location data (country) based on your IP address to determine if you are physically in France.

This is necessary to comply with the legal obligations that Artransfer is subject to.

We collect and use your personal data for this purpose until the deactivation of your Artransfer account or for 5 years from the moment your account becomes inactive.

Article 8.5. - Defense of Artransfer's Rights and Interests

If you are involved in a dispute with Artransfer or if we need to carry out the enforcement of our TC or otherwise defend, enforce, exercise and protect our rights, we will collect and use all your personal data held by Artransfer to the extent necessary to resolve a particular situation.

We base such collection and use on a legitimate interest to defend the rights and interests of Artransfer.

The personal data collected and used for this purpose is retained for 5 years after we have identified the need to defend our specific rights and interests, and in case of a dispute, until the final execution of the binding decision of the authorized body.

Article 9. Recipients of personal data

Artransfer transfers or shares personal data with service providers only to the extent necessary and permitted in accordance with applicable law. The service providers to whom your personal data is transferred or with whom it is shared for specific purposes are described above. In addition, we designate the following service providers as data recipients, who therefore receive personal data.

We constantly conduct and improve technical maintenance of the Platform in order to protect the security and confidentiality of the personal data we process and to perform certain business-related functions that contribute to making our services available and functional. For this reason, we transfer your profile data to service providers who provide cloud and hosting services, IT security, maintenance and technical services, and communication services:

As the following service providers are established outside the European Economic Area, your data may therefore be transferred outside the European Economic Area. In these specific cases, personal data is protected by service providers who undertake to comply with the EU's standard contractual clauses for transferring data, as approved by the European Commission:

Google LLC (USA ;
Apple Inc. (USA) ;
Microsoft Corporation (USA).

We transfer personal data to lawyers, legal assistants, notaries, bailiffs, auditors, accountants, collection agents, consultants, translation agencies, IT service providers, insurance companies, and archiving services that provide services to Artransfer.

Furthermore, we share data within Artransfer teams. Data is processed within teams to the extent necessary for Artransfer management.

Artransfer is legally required to provide personal and/or usage data to authorities conducting an investigation, criminal prosecution, or surveillance, if and to the extent necessary to prevent risks to the public and for the prosecution of criminal acts.

Artransfer may share your data with third parties when transferring obligations and rights relating to the contractual relationship between you and Artransfer to these third parties, in accordance with the GC, particularly in the case of the transfer of a business sector, formation of a new company through a merger, absorption merger, split, or any change of control concerning Artransfer. Prior to such an event, Artransfer will separately inform you about the information regarding the sharing of your data and obtain your consent where legally necessary.

Article 12. Right of amendment

As we constantly develop our services, we reserve the right to modify this Privacy Policy at any time, subject to applicable regulations. Any modification will be posted on this page as soon as possible. Notwithstanding the foregoing, you should regularly check this page for updates.

Article 13. Your statutory rights regarding your personal data

Article 13.1. - Your rights

Subject to the conditions, restrictions, and exceptions established by legal provisions on data protection, you have the right at any time:

to be informed of the data we collect and use and to request access to the data concerned or to demand a copy (right to be informed). You can also access all data that you have directly provided to us on the Platform at any time on your Artransfer account;
to demand the correction of inaccurate data and, subject to the nature of the collection and use, the completion of incomplete data (right of rectification). You can also modify all data that you have directly provided to us on the Platform at any time on your Artransfer account (except for messages sent and posts or reviews on a forum);
subject to a just cause, to demand the erasure of your data, provided that statutory criteria are met (right to restrict processing);
subject to the statutory criteria being met, to receive the data you have provided in a structured, current and machine-readable form and to transfer such data to another processor or, where technically feasible, to have Artransfer transfer them (right to data portability);
to object to the collection and use of data, only where such collection and use is based on a task performed in the public interest or in the exercise of official authority conferred or a legitimate interest, including profiling, on the same grounds of data collection and use as explained in other sections of this statement (right to object). You also have the right to object at any time to the collection of your personal data for direct marketing purposes;
to withdraw any consent you have provided at any time. Such withdrawal shall not affect the lawfulness of the collection and use carried out prior to withdrawal and on the basis of the granted consent. You can withdraw your consent regarding the sending of our newsletter by clicking on "Unsubscribe" at the end of the marketing email;
when a legal decision or a similar important decision concerning you has been made in a fully automated manner, to obtain human intervention from Artransfer, to express your point of view and to contest the decision;
not to be subjected to discriminatory treatment during the exercise of your rights.

To exercise any right specified in this section, you can contact Artransfer and submit your request using the contact details or direct messaging on the application. Regardless of any other legal remedy, you also have the right at any time to lodge a complaint with the supervisory authorities.

Article 13.2. - Verification of Your Request

Your request must provide sufficient information that allows us to reasonably verify that you are the person or authorized representative of the person whose personal data we have collected (first name, last name, URL of your public profile, email address, other information we may request for verification purposes), describe your request with sufficient information that allows us to understand, evaluate, and respond to it, and confirm, under penalty of sanctions, that you are the person whose personal data is the subject of the request.

If your request is submitted by an authorized representative, a written authorization and information verifying the representative's identity must be included in the request.

We cannot provide you with the information or enforce any other rights you have if we cannot verify your identity or your right to request or confirm information about you.

To verify your identity, we may ask you to provide additional information about yourself. We will only use this information and the information provided in the request to verify your identity or your right to request.

Article 14. Our contact information

If you have any questions about the collection and use of your data in connection with your use of the Platform, or about your rights, please contact us at the following addresses:

hello@artransfer.com
Artransfer, 130 rue de Turenne, 75003 Paris, France