top of page

PRIVACY POLICY

​Last updated: October 2025

​

1. General Information on Data Processing and Legal Basis

​

This privacy policy describes the type, scope, and purpose of the processing of personal data within our service offering and related websites, functions, and content (hereinafter collectively referred to as the “Website”).
It applies regardless of the domains, systems, platforms, or devices used (desktop, mobile, or offline).

“Personal data” and “processing” are defined in Article 4 of the EU General Data Protection Regulation (GDPR).

We process personal data only in accordance with legal requirements, particularly Article 6 (1) GDPR. Processing takes place only if:

  • it is necessary to fulfill contractual obligations;

  • it is required by law;

  • you have given consent; or

  • we have a legitimate interest (e.g. optimization of our online offering, ensuring security).

Please note: email transmission cannot be guaranteed to be fully secure. Do not send confidential data unencrypted.

​

2. Controller

​

Davy Art Space GmbH
Managing Director: Daniel Karl
Wiedner Gürtel 64/3, 1040 Vienna, Austria
Email: office@davyartspace.com
Phone: +43 676 6800664
Company Registration No.: FN 658714y
Commercial Court: Handelsgericht Wien

​

3. Categories of Data Processed and Legal Basis

​

Newsletter:
Email address (and optionally name) — processed only with your consent (Art. 6 (1)(a) GDPR).

Contract and Website Data:

  • Inventory data: name, address, telephone number, email

  • Contract data: ordered artworks, payment details

  • Usage data: visited pages, IP address, interest in offers

  • Content data: messages in contact forms

​​

Processed on the basis of Art. 6 (1)(b) GDPR (contract) or Art. 6 (1)(f) GDPR (legitimate interest).

​

4. Purposes of Data Processing

​

  • Fulfillment of orders and delivery of artworks

  • Provision, maintenance, and optimization of the website

  • Security and fraud prevention

  • Creation of usage statistics and reach measurement

  • Response to customer inquiries

​​

Data originate from your voluntary submissions or are automatically collected when you visit the website (e.g. IP address, browser type, time of access).

​

5. Hosting, Email, Newsletter, and Third-Party Services

​

Hosting (Wix.com Ltd.)

This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.


Wix stores and processes data on servers located in the European Union (EU), Israel, and the United States.

  • Legal basis: Art. 6 (1)(f) GDPR (legitimate interest: secure and efficient website operation).

  • Data transfer: Israel is subject to an adequacy decision by the European Commission (Art. 45 GDPR).
    For transfers to the USA, Standard Contractual Clauses (SCCs) approved by the European Commission apply.

  • Collected data:

    • Browser, network, and device information

    • Pages visited before and during your visit

    • IP address

    • Session data, timestamps, cookies, and usage statistics

    • ​

Wix requires this data to operate, secure, and improve its platform and this website. Data are analyzed in aggregated and pseudonymized form.

Further information: https://www.wix.com/about/privacy

​

Email Provider

World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria.
Used for sending and receiving business and contact emails.
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest: communication management).

​

Newsletter (Mailchimp / Intuit Inc.)

We use Mailchimp (part of Intuit Inc., USA) to send newsletters.

  • Double-opt-in: Subscription is confirmed via email.

  • Legal basis: Consent under Art. 6 (1)(a) GDPR.

  • Data processing agreement: pursuant to Art. 28 GDPR.

  • Data transfer: protected by EU Standard Contractual Clauses (SCCs).

  • Usage: pseudonymized analysis for optimization and performance metrics.

​​

You can withdraw your consent at any time via the unsubscribe link in the newsletter or by contacting office@davyartspace.com.

​

Mailchimp Privacy Policy: https://mailchimp.com/legal/privacy/

​

Other Third-Party Providers

We may engage:

  • IT service providers (for maintenance and security)

  • Logistics companies (for shipping artworks)

  • Analytics providers (e.g., Google Analytics)

All third-party processors are bound by Art. 28 GDPR agreements.

​

6. Cookies and Analytics

​

This website uses cookies and similar technologies (e.g. local storage). Cookies are small text files stored on your device.

  • Necessary cookies: enable essential website functionality and are always active.

  • Analytics cookies: used only after your consent via the cookie banner.

  • Marketing cookies: used for measuring reach and performance.

​

Legal basis: Art. 6 (1)(a) GDPR (consent) and Art. 6 (1)(f) GDPR (legitimate interest).

​

You can revoke consent at any time and delete cookies via your browser settings.
Information for major browsers: Safari, Chrome, Firefox, Edge.

​

For interest-based advertising opt-out: YourOnlineChoices

​

7. Google Services

​

Google Analytics — web analytics with pseudonymized IP addresses and cookies.
Opt-out: https://tools.google.com/dlpage/gaoptout

Google Ads / Marketing Services — remarketing and interest-based advertising with pseudonymized cookies.
Opt-out: https://www.google.com/ads/preferences

Google Fonts — used to optimize web design; IP addresses may be transmitted to Google.
Privacy Policy: https://policies.google.com/privacy

​

8. Data Subject Rights

​

You have the following rights under Articles 15–21 GDPR:

  • Right of access

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to restriction of processing

  • Right to data portability

  • Right to object (especially against direct marketing)

  • Right to withdraw consent at any time

​​

To exercise these rights, contact: office@davyartspace.com

​

You also have the right to lodge a complaint with the
Austrian Data Protection Authority (Datenschutzbehörde).

​

9. Data Retention

​

We store personal data only as long as necessary for the stated purposes or as required by law.

  • Business and accounting records: 7 years (§ 132 BAO)

  • Newsletter data: up to 3 years after withdrawal of consent, or earlier upon request

​​

Data no longer required will be securely deleted or anonymized.

​

10. Right to Object to Processing

​

You may object at any time to the processing of your personal data based on legitimate interests (Art. 6 (1)(f) GDPR), particularly for direct marketing purposes.
Please email: office@davyartspace.com

​

11. Data Security

​

We implement technical and organizational measures to ensure data protection (Art. 32 GDPR), including encryption, access control, and secure data backups.


However, no transmission over the Internet can be fully guaranteed to be secure.

​

12. Updates to This Privacy Policy

​

We reserve the right to update this privacy policy to reflect legal, technical, or service-related changes.
Changes requiring consent will only take effect with your renewed approval.


Please review this policy periodically for the latest version.

​

bottom of page