This policy applies to information held about clients and prospective clients, suppliers and prospective suppliers, artists, contacts and all other persons about whom Galleria Rustica holds information. By ‘information,’ we mean personal information about you that we collect, use, share and store.
In this policy, “we,” “us,” and “our” means Galleria Rustica, a simulated company within the Confederation of Democratic Simulators, Second Life and “you” means the individual to whom the information relates.
We are the data controller and responsible for your personal data.
What we collect
- your name;
- your contact information such as your address, email address and telephone number;
- when browsing our site, your IP address, your browser type and language;
- information related to your attendance of, and interest in, Galleria Rustica events and exhibitions;
- information about you that you give us in person at our events and exhibitions, by filling in forms on our site galleriarustica.org (our site) or by corresponding with us by phone, e-mail or otherwise; and
- information in relation to your purchase of our art work or use of our services.
How we collect information about you
- collecting information you give to us when you purchase any art work or visit us at the Galleria; and
- your use of the forms on our website.
What we do with the information we gather
We use your information to:
- provide information about our art work and services to you;
- keep you informed about art work, artists and events that we think you may find interesting;
- carry out our obligations arising from any agreements entered into between you and us;
- communicate with you;
- administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- keep our site safe and secure; and
- to comply with legal and regulatory obligations.
Legal basis for processing
Our processing of your personal information is necessary:
- for the purposes of legitimate interests pursued by us (this is in relation to your name and contact information, IP address, your use of forms on our website or giving us information at events and in visitor’s books), where those legitimate interests may relate to customer service and satisfaction, product/service development, managing our business, service analysis and system administration – as further described below); or
- in order to comply with a legal obligation to which we are subject for example in connection with financial records.
In relation to any processing of special categories of personal data, we will generally rely on obtaining specific consent from you at the time unless there is otherwise a legal requirement for us to process such information.
Where our processing is based on the legitimate interest grounds described above, those legitimate interests are: (i) collecting personal information to provide you with a smooth and efficient client experience; (ii) to make sure you receive updated information on Galleria Rustica’s business activities; (iii) to provide the services you have requested; and (iv) for our own marketing and research.
Sharing your information
Except as expressly set out in this policy we will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
At any time, you have the right:
- to request access to or a copy of any personal data which we hold about you;
- to rectification of your personal data, if you consider that the information we are holding is inaccurate;
- to ask us to delete your personal data, if you consider that we do not have the right to hold it;
- to withdraw consent to our processing of your personal data (to the extent such processing is based on previously obtained consent); to ask us to stop or start sending you marketing messages as described below in the marketing section;
- to restrict processing of your personal data, if the personal data we hold is inaccurate, the processing is unlawful or we no longer need it;
- to data portability (moving some of your personal data elsewhere) in certain circumstances; and
- to object to your personal data being processed in certain circumstances.
Any request from you for access to or a copy of your personal data must be in writing and we will endeavour to respond within a reasonable period and in any event within one month in compliance with data protection legislation. We will comply with our legal obligations as regards your rights as a data subject. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We aim to ensure that the information we hold about you is accurate at all times. To assist us in ensuring that your information is up to date, do let us know if any of your personal details change at the following email address email@example.com
How long will we keep your information?
We will only keep the information we collect about you for as long as required for the purposes set out above or as required to comply with any legal obligations to which we are subject. This will involve us periodically reviewing our files to check that information is accurate, up-to-date and still required. We will keep contract and financial information for a minimum of 7 years.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Links to other sites
Certain features of our site will allow for social networking. You should ensure when using these features that you do not submit any personal data that you do not want to be sent, collected or used by other users, such as profile details or e-mail address.
Questions, comments and requests regarding this policy are welcomed and should be addressed to firstname.lastname@example.org
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
Changes to this policy
Any changes we make to our policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our policy.