Privacy policy

Who is the administrator of your personal data?

Cosma Gallery Sp z o.o., Łokietka 49b/14, 81-736 Sopot

How to contact us for more information on the processing of your personal data?

The Administrator can be contacted in writing by traditional mail to the following address: Cosma Gallery Sp z o.o., Łokietka 49b / 14, 81-736 Sopot or to the email address:

Where do we get your data from?

We receive them from you when you set up a purchasing account, artist registration, and later, in connection with transactions you make on our website and in connection with submitting works of art to the auctions and online galleries.

What is the purpose and legal basis for the processing of your personal data?

Your personal data is processed on the basis of art. 6 sec. 1 lit. f GDPR, i.e. based on the necessity of processing for purposes resulting from legitimate interests pursued by the administrator or by a third party.

Providing the above data is necessary in the following cases:

Registration in the artists and collectors database is voluntary. We store the above-mentioned data in our database to make it easier for you to submit works of art to the on-line gallery and in the future and participate in auctions organized by Cosma Gallery Sp. z o.o.

Registration in the customer database – is voluntary. We store the above-mentioned data in our database to facilitate your future purchases in the online store

If you want to be informed about interesting events and commercial offers, you can subscribe to the Newsletter.

Joining is voluntary and you can unsubscribe at any time.

What data do we collect?

We collect the following personal data in our store:

Name and surname – when placing the Order, you will be asked to provide your name and surname so that we can send you the order and to enable us to contact you should it become necessary

Address of residence – we need it to ship purchased works

Telephone number – we notify you by text message about sending the work. Sometimes we also call to confirm the Order, or in the event of unexpected events, such as lack of goods in stock, so that we may propose a favorable solution.

Email address – we send an order confirmation via email and may use it to contact you for other necessities. If you have become a subscriber to our Newsletter, we will send you commercial information once or twice a month.

Address – information resulting from the general principles of Internet connections, such as the IP address (and other information contained in system logs) are used by the store administrator for technical purposes. IP addresses can also be used for statistical purposes – to collect general demographic information (e.g. about the region from which the connection is made).

Cookies – our online store uses cookies to adapt to your individual needs. You can agree that the data entered by you will be retained to be automatically entered the next time you visit the website of the online store. The owners of other websites will not have access to this data. If you do not agree to personalize the store, we suggest disabling cookies in your web browser options.

Who do we share your personal data with?

We provide your personal data to entities supporting us in the provision of electronic services, i.e. those that provide payment, insurance and transport services. We can transfer your personal data to public authorities fighting against fraud and abuse.

How do we protect your data?

The administrator makes every effort to ensure all means of physical, technical and organizational protection of personal data against accidental or deliberate destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable regulations. Data protection is carried out in accordance with the requirements of generally applicable law, and their storage takes place on secured servers. In the interest of the security of the data entrusted to us, we have developed internal procedures to prevent disclosure of data to unauthorized persons. We control their performance and constantly check their compliance with the relevant legal acts – the Protection of Personal Data Act and the Provision of Electronic Services Act, as well as all types of executive acts and community legislation. We have implemented data encryption and we have introduced access control, thanks to which we minimize the effects of a possible breach of data security. We respect the right to privacy and we care about data security. For this purpose, we use inter alia, secure communication encryption protocol (SSL) (also called “secure connection”).

Personal data provided in the forms are treated as confidential and are not visible to unauthorized persons. Each user of our store, as well as the artist and owner of works of art, can choose whether and to what extent they want to use our services and share information about themselves.

If for some reason you do not wish to leave your personal data, you have the right to delete them or not to use our online store We do not share any data with third parties.

We also do not store confidential data such as your credit card numbers or access data to your bank account.