Privacy Policy

PRIVACY POLICY

1. Introduction

1.1 Why a personal data charter?

The purpose of this Personal Data Protection Policy is to inform users of the website (hereinafter referred to as "the User" or "Users") about the use of their Personal Data on the website www.maisondartgallery.com (hereinafter referred to as "the Website" or "Maison D'Art"), in accordance with:

Law No. 1.565 of 3 December 2024 on the protection of personal data in the Principality of Monaco;
General Data Protection Regulation (EU) 2016/679 (GDPR);
The French Data Protection Act of 6 January 1978, as amended.

We have sought to simplify this policy as much as possible in order to provide you with clear and transparent information on how your personal data is collected, processed and used.

The Website undertakes in all circumstances to comply with the following four essential principles:

Only collect data that is strictly necessary for the purpose for which it is intended;
The User remains the owner of their personal data and has the right to complain;
Data is processed in a transparent, confidential and secure manner;
Data is only kept for a period not exceeding that necessary for the purposes for which it is processed.

1.2 What is personal data?

Personal data is any information that directly or indirectly identifies a natural person. For example, a name, postal or email address, telephone number or IP address are all examples of personal data.

1.3 Who is responsible for processing the Website's data?

Personal data is collected and processed by Maison d'Art, a sole proprietorship registered in the Monaco Trade and Industry Register under number 03P06793, with its registered office at 27 avenue de la Costa – 98000 MONACO.

The data controller is the person or organisation that determines the purposes and means of collecting and processing your personal data.

For the Website, this is Ms Christine CORSINI, whom you can contact:

At the following email address: info@maisondartgallery.com
At the following postal address: Maison d’Art, 27 avenue de la Costa - 98000 MONACO.

1.4. Who is the data protection officer?

Given the nature, scope and purposes of the processing operations carried out, Maison d'Art is not required to appoint a data protection officer within the meaning of the legal and regulatory provisions in force on the date of this document.

The compliance of the processing operations and the management of the rights of the persons concerned are ensured directly by the data controller.

2. When is your data collected?

Your personal data is collected:

When you browse the Website through trackers or cookies;
When you make a purchase or request a quote on the Website or by telephone;
When you subscribe to the newsletter;
When you send messages to Maison d'Art and its partners via the contact form on the Website, by email or by telephone;

The fields marked with an asterisk in the collection forms are mandatory. If they are not filled in, Maison d'Art will not be able to respond to your request.

3. Why do we collect your data?

1. The processing of personal data generated by the storage and reading of cookies during your browsing of the Website is used to:

Ensure the functioning of the Website on the basis of Maison d'Art's legitimate interest in enabling you to benefit from the optimal functioning of the Website's features;
Measure the Site's audience and compile anonymous visitor statistics based on the User's consent;
Improve the functionality and personalisation of the Website based on your consent, which you may withdraw at any time;
Adapt the advertising content displayed according to your interests based on your consent, which you may withdraw at any time, and ensure the interactivity of the Website with social networks based on your consent, which you may withdraw at any time.

Please refer to Chapter 10 of this Policy for more details.

2. The processing carried out during the purchase process or when requesting a quote on the Website is used to:

Provide the products and services purchased, and the associated after-sales service based on the performance of the sales contract.
Ensure fraud management, in particular payment fraud and payment incidents, based on the legitimate interest of Maison d'Art. Depending on the results of the fraud risk check carried out on orders, it will be possible to take security measures, cancel orders or prevent orders.
Assess customer satisfaction with the shopping experience, based on Maison d'Art's legitimate interest.
Send commercial offers from the Website for products similar to those you have recently purchased, unless you object.

3. The processing carried out when you subscribe to the newsletter is intended to send you information and commercial offers from the Website on the basis of your consent, which you may withdraw at any time.

4. The processing carried out when you register for an online customer account is intended to provide the features of the online customer account, including the provision of targeted and personalised offers, based on your consent, which you may withdraw at any time.

5. The processing generated when sending messages to Maison d'Art via the contact form on the Website or through the call centre is based on Maison d'Art's legitimate interest in responding to your requests.

In general, data may be collected for explicit, legitimate and specific purposes in order to ensure:

The proper functioning and continuous improvement of the Website, its services and its features;
Order management;
The management of the user's subscription to the Website's newsletter;
The provision of a personal space on the Website;
The organisation of events by Maison D'Art;
The management of requests for access, rectification and opposition, erasure, limitation, portability, the right to be forgotten and the right to lodge a complaint with the Personal Data Protection Authority (APDP) for Monaco, or the National Commission for Information Technology and Civil Liberties (CNIL) for France;
Compliance with legal obligations;
Compiling commercial statistics.

In any event, and for each defined purpose, Maison d'Art will use all means at its disposal to ensure the security and confidentiality of the personal data entrusted to it, in compliance with the laws and regulations in force.

4. Who has access to your personal data?

The personal data collected on the Website is intended, within the limits of their responsibilities, for (i) Maison d'Art's internal departments, its subcontractors, and, if you have given your consent, (iii) Maison D'Art's partners.

More specifically, the recipients of your personal data are as follows:

1. When you browse the Website:

Maison D'Art's internal departments
Advertising partner companies

2. When making a purchase or requesting a quote on the Website:

Maison d’Art's internal departments
Advertising partners
Partners responsible for providing the service
Partners responsible for the financial transaction

If you agree to receive commercial prospecting exclusively from the Website, only Maison d'Art's internal services and the partners responsible for the services selected by the Customer will have access to this data.

3. When subscribing to the newsletter:

Maison D'Art's internal departments and any partners and subcontractors.

4. When registering for an online customer account:

Maison d'Art's internal departments and any partners and subcontractors.

5. When sending messages to Maison d'Art or its partners via the contact form on the Website or through the call centre:

Maison d'Art's internal departments and any partners and subcontractors.

Your personal data will only be disclosed to external parties other than those specified above in order to comply with Maison d'Art's legal and regulatory obligations , in particular in the event of a request from an administrative or judicial authority.

5. How long is the data retained?

The principle of data retention limitation means that the personal data collected cannot be stored indefinitely in a form that allows the identification of the persons concerned.

Anonymisation is a technique that consists of "removing any identifying characteristics from a set of data". According to ISO 29100, it is "the process by which personally identifiable information (PII) is irreversibly altered in such a way that the subject of the PII can no longer be identified directly or indirectly, either by the PII controller alone or in collaboration with any other party " (ISO 29100: 2011).

Your personal data is kept for the time necessary to fulfil the purposes described above:

In the case of a newsletter subscription, the contact details and subscription date are retained for as long as the person wishes to subscribe to the newsletter;

If you create a personal account, data from accounts that have been inactive for more than 3 years will be deleted or anonymised, unless a legal obligation requires longer storage;

13 months for cookies from the date they are stored on your computer or device;
3 years from the last expression of interest on the part of the user, for data relating to identity, contact details and any other information voluntarily provided by the user, in particular relating to choices, preferences and behaviour;
1 year for technical connection logs from the last connection;
5 years or any other legal period that may differ for information required by current legislation on anti-money laundering and terrorist financing;
10 years for invoices and accounting documents from their date of issue;
Where applicable, for the entire duration of any litigation and until all avenues of appeal have been exhausted.

6. How can you exercise your rights regarding your personal data?

In accordance with the amended French Data Protection Act and the GDPR, Users have the following rights:

Right of access (Article 15 of the GDPR) Right to rectification (Article 16 of the GDPR) Right to update and complete data
Right to block or erase personal data (Article 17 of the GDPR) when it is inaccurate, incomplete, ambiguous, outdated, or when its collection, use, communication or storage is prohibited;

Right to withdraw consent at any time (Article 13-2 of the GDPR);
Right to restriction of data processing (Article 18 of the GDPR);
Right to object to data processing (Article 21 of the GDPR);
Right to data portability, where the data is subject to automated processing based on the User's consent or on a contract (Article 20 of the GDPR);
Right to lodge a complaint with the APDP in Monaco, or the CNIL in France (Article 77 of the GDPR);
Right to determine the fate of data after the User's death and to choose whether or not to communicate their data to a third party they have previously designated.

In the event of death brought to its attention by any written means, and in the absence of contrary instructions from the User, Maison D'Art undertakes to destroy their data, unless its retention is necessary for evidentiary purposes or to meet a legal obligation.

For more information, please visit the website of the Autorité de Protection des Données Personnelles (APDP) for Monaco or the Commission Nationale de l'Informatique et des Libertés (CNIL) for France.

The user has the right to access, rectify, erase or delete all or part of the Personal Data concerning him/her, the right to object and the right to restrict the processing and portability of Personal Data. For processing based on the User's consent, the User also has the right to withdraw their consent at any time.

Such requests must be made by the User personally and in writing, signed. A photocopy of an identity document bearing the signature of its holder may be requested in the event of reasonable doubt as to the identity of the claimant.

These rights may be exercised directly:

By post to Maison d'Art at the following address: Maison D'Art, 27 avenue de la Costa - 98000 Monaco;
By email via the contact form on the Website, or at info@maisondartgallery.com.

Maison D'Art undertakes to respond to claims within 30 days, unless a reasonable and justified extension of 30 days is granted.

The User is advised that exercising these rights does not affect the validity of any processing operations carried out previously, nor does it affect Maison d'Art's right to archive some of the Personal Data in question, in accordance with the principles set out above.

The rights previously granted to you shall expire upon your death. You have the right to define guidelines for the storage, erasure and communication of your personal data after your death.

When your personal data is processed with your consent, you may revoke it at any time. However, you are informed that the processing carried out prior to this revocation will remain valid.

In France, you have the right to register on the Bloctel list to oppose telephone canvassing. You can register by visiting the following address: http://bloctel.gouv.fr/.

Maison D'Art pays the utmost attention to the protection of personal data. Nevertheless, if you consider that their processing infringes your rights or that your request has not been satisfied, you have the right to lodge a complaint with:

The Personal Data Protection Authority (APDP) – 11 rue du Gabian - Immeuble "Le Concorde" - 98000 MONACO in Monaco;
The National Commission for Information Technology and Civil Liberties (CNIL) - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 in France.

Where applicable, we also urge you to contact our data controller, whose contact details are provided above, who is committed to handling your complaints with the utmost diligence.

7. How can I stop receiving commercial offers by email or text message?

If you agree to receive commercial offers, you can request to no longer receive this type of information at any time:

By clicking on the unsubscribe link provided for this purpose in each email you receive,
By submitting your request via the contact form on the Website or by email to the above address,
By replying STOP to the text message you receive.

8. What security and anti-fraud measures are in place?

Maison d'Art and its subcontractors undertake to implement all technical and organisational measures to ensure the security and confidentiality of personal data processing, in accordance with:

Law No. 1.565 of 3 December 2024 on the protection of personal data in Monaco;
Law No. 2018-133 of 26 February 2018 in France;
The Data Protection Act and the European General Data Protection Regulation (GDPR).

Maison D'Art ensures that such measures are implemented in all operations carried out in the context of processing, in particular during the collection, storage and hosting of Personal Data.

In this regard, Maison d'Art also ensures that any third parties it may use comply with this requirement to protect Users' Personal Data by implementing appropriate measures. The technical and organisational measures put in place may include the use of secure registration forms, the encryption of certain data (such as bank details), and restricted access to Personal Data.

9. How is your personal data used on social networks?

The Website uses plug-ins (or extension modules) from social networks, including Facebook, Instagram, etc. (hereinafter and collectively referred to as "Social Networks").

If you interact with the Website using these plug-ins, for example by clicking on the "Like" or "Share" button, information related to your browsing on the Website and your membership of these social networks will be transmitted, recorded and processed on a server belonging to the company operating the Social Network concerned and linked to your user account, in accordance with its own terms of use.

If you do not want your personal information to be transmitted from the Website to Social Networks, we advise you to:

Not to interact with these social networks by clicking on the plug-ins available on the Website,
Deactivate your account on the social network in question before visiting our Website.
Browse in "Private" mode via your browser.

10. How are cookies managed?

10.1 What is a cookie?

A cookie is a file stored on your computer's hard drive at the request of the server managing the website you are visiting. It contains information about your browsing activity on the website's pages. The purpose of cookies placed during a visit to the Site is to ensure its optimal functioning by storing the user's information for the duration of their session, to enable the compilation of audience measurement statistics and the display of advertisements tailored to your interests, and to improve the interactivity of the site via social networks.

Cookies are also used to measure and evaluate the behaviour of users who visit a website (number of visitors, duration of visits, most viewed items, etc.).

There are several types of cookies, some of which are non-identifying, and others which are identifying. Some cookies may be associated with other data in order to personalise the User's experience on a website. When cookies are identifying, they enable the collection and processing of Personal Data.

As a rule, all cookies are subject to the User's prior consent, unless they are strictly necessary for the provision of a service expressly requested by the User.

10.2 How do cookies work in practice?

Maison d'Art informs the User that its Website is up to date with the new obligations regarding cookies, namely:

Obtaining the User's consent for the placement of trackers through a clear and positive action;
The possibility for the User to withdraw their consent easily and at any time in a succinct and effective manner;
The ability for the User to easily accept or refuse cookies;
Bringing to the User's attention the purposes and consequences of accepting or refusing trackers;
Inform the User of the identity of all parties using trackers subject to consent;
Implementation of processes so that the collection of the User's free, informed, specific and unambiguous consent regarding cookies can be proven at any time.

Maison D'Art uses cookies when the User browses the Website. These cookies are used to measure Website traffic, to provide Maison D'Art with information on how the User navigates the Website, and to improve the User's experience on the Website (for example, to retain the contents of the User's shopping basket from one visit to the next). The cookies used by Maison d'Art are stored for a maximum period of thirteen (13) months from the date they are first placed on the User's computer.

Third parties may also use cookies to collect data related to the User's browsing. Maison d'Art is in no way responsible for operations related to the use of third-party cookies. The User can configure the settings of the cookies installed on their computer by adjusting their browser settings. If the User chooses to disable or block certain cookies, the associated features (e.g. personalisation of the browsing experience on the Website) will not be available to them.

You can configure cookie management on the Website from the cookie banner displayed when you open the Website, or by clicking on the "Manage Cookies" link at the bottom of the page.

In particular, the Website uses the following cookies, without this list being exhaustive:

Google Group. For information on how Google uses the data collected via these cookies, you can read Google's privacy policy and terms of use by visiting https://policies.google.com/technologies/partner-sites;
The site is managed by the squarespace.com platform;
It is hosted by the artlogic.net platform, a company registered in England under number 03829035.

You can read the privacy policies and terms of use for these platforms by visiting the addresses listed above.

10.3 Profiling and personalisation of content

Some of the processing carried out by Maison d'Art is based on profiling operations, which consist of analysing data relating to the User's browsing and interactions with the Website.

The data that may be used for this purpose includes:

Data relating to browsing on the Website (pages viewed, products viewed, duration and frequency of visits);
When using the contact form: date of visit, first and last name if provided, telephone number, message sent to MAISON D'ART;
Preferences expressed by the User, if any, when creating their account or interacting with the Website (interest in a specific work);
Limited technical data, such as the type of device or browser used, the date of the visit, the IP address and browser information (e.g. Advanced Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36).

The sole purposes of this processing are:

To improve the User's browsing experience on the Website;
Presenting content or products that may be of interest to the User;
Adapting commercial communications sent to the User, where the User has given their prior consent.

This profiling:

Does not result in any automated decision-making that produces legal or significant effects on the User without their consent;
Is not intended to exclude or discriminate against the User;
Is based exclusively on the User's prior consent, which may be withdrawn at any time.

The User retains the right to object to this processing or to request its limitation under the conditions provided for by law and regulations.

10.4 Browser settings

Each Internet browser has its own cookie management settings. To find out how to change your cookie preferences, you will find below links to the help pages for accessing your browser's menu for this purpose:

Chrome: https://support.google.com/chrome/answer/95647?hl=fr
Firefox: https://support.mozilla.org/fr/
Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies#ie=ie-11
Opera: http://help.opera.com/Windows/10.20/fr/cookies.html
Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac

For more information about cookie management tools, please visit:

The APDP in Monaco: https://apdp.mc/apdp/fiches-pratiques/internet-et-reseaux-sociaux/fiche-memo-les-cookies/;
The CNIL in France: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.

11. Guarantees offered to the User

In accordance with the provisions of Law No. 1.565 of 3 December 2024 on the protection of personal data, Maison D'Art takes the following steps to offer Users an adequate level of data protection.

11.1 Data processing register

Maison d'Art keeps an internal register of the processing activities carried out under its responsibility, in accordance with the requirements of Law No. 1.565 of 3 December 2024.

This register lists, in particular, the purposes pursued, the categories of data processed, the recipients, the retention periods and the security measures implemented.

This register is regularly updated and can be consulted at the request of Users.

11.2 Clause relating to data breaches

In the event of a personal data breach that may pose a risk to the rights and freedoms of the persons concerned, Maison d'Art undertakes to notify the Personal Data Protection Authority of this breach within the 72-hour period required by Monegasque law on the date hereof.

Where this breach is likely to result in a high risk, the persons concerned will be informed in accordance with the conditions set out in the applicable legal provisions.

11.3. Traceability of consent to cookies

The User's consent to the storage of cookies that are not strictly necessary is obtained through a mechanism that guarantees that it is freely given, specific, informed and unambiguous, as mentioned above.

The choices expressed by the User are stored for evidentiary purposes.

12. Transfer outside Monaco and the European Union

The personal data collected is processed and hosted primarily in Monaco or in countries offering a level of protection recognised as adequate.

When certain technical service providers involve the transfer of data outside Monaco, Maison d'Art ensures that these transfers are subject to appropriate safeguards, in particular:

Standard contractual clauses: Contracts concluded with our American subcontractors or partners include the standard contractual clauses adopted by the European Commission;
Compliance commitments: Our subcontractors undertake to comply with the principles of the GDPR, in particular with regard to individual rights, security and notification of data breaches.

Transfers of personal data to the United States may involve the following subcontractors, already mentioned in this privacy policy, without this list being exhaustive:

Website hosting and management platforms: Squarespace.com; Artlogic.net (England);
Audience analysis and measurement tools: Google Analytics (Google Group).

The User may obtain additional information about the safeguards in place by simply requesting it from the data controller.

13. Changes to privacy policies

These privacy policies may be modified by Maison d'Art at any time. In the event of a change to the privacy policies, the new version in force will apply to the User from the moment they log on to the Website.

In the event of a dispute between the User and Maison d'Art, the privacy policy to be taken into account will be the one in force at the time of the events giving rise to the dispute.

Updated January 2026.