Elis'Art GALLERY pays particular attention to the confidentiality of the data shared during exchanges with collectors, visitors and artists. This policy details how your personal data is collected, used and protected, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French "Informatique et Libertés" law.

Elis'Art GALLERY — represented by Aurélia Allart, founder.

Email: contact@elisartgallery.com

During your navigation and your interactions with the site, the following data may be collected:

• Contact form: first name, last name, email, phone (optional), nature of the enquiry, message.
• Newsletter subscription: email only.
• Browsing data: technical information related to your browser, device and journey on the site, used solely for anonymised statistical purposes.

Your data is used solely to:

• Reply to enquiries sent through the contact form.
• Send you information about exhibitions, artists and events of the gallery, when you have given your consent.
• Ensure the security and proper operation of the site.
• Produce anonymised audience statistics.

Your data is never sold, rented or transferred to third parties for commercial purposes.

• Form enquiries: 3 years from the last contact.
• Newsletter subscription: until you unsubscribe, which is possible at any time.
• Technical data (logs): 12 months maximum.

In accordance with the GDPR, you have the right to:

• Access, rectify and erase your data.
• Restrict and object to processing.
• Portability of your data.
• Withdraw your consent at any time.
• Lodge a complaint with the CNIL.

To exercise these rights, write to contact@elisartgallery.com. A reply will be sent within one month maximum.

The site uses a minimal number of cookies, strictly necessary for its operation. No advertising or profiling cookies are placed. Should statistical tools be activated in the future, you will be informed and asked for prior consent.

Elis'Art GALLERY implements appropriate technical and organisational measures to protect your data against any unauthorised access, alteration, disclosure or destruction. Exchanges are encrypted (HTTPS) and hosting is provided by a GDPR-compliant supplier (IONOS).

This policy may be updated to reflect legal or technical developments. The date of the last update is shown at the top of the page.