ARTKHADE SARL ("Artkhade", "we", or "our") attaches particular importance to the protection of personal data and compliance with applicable regulations, in particular Regulation (EU) 2016/679 of April 27, 2016 ("GDPR") and applicable French regulations on personal data protection.
This Privacy Policy explains what personal data is collected and processed when you use artkhade.com, create an account, use our services, subscribe to a membership, or interact with our communications.
It also describes the main processing operations concerning personal data of third parties that may be entered or published on Artkhade by professional users or enriched by Artkhade.
The data controller for personal data processing operations carried out for Artkhade's own purposes is:
ARTKHADE SARL
Limited liability company (Société à responsabilité limitée) with a capital of €10,000
Registered office: 5 bis rue Dr Gabriel Ledermann, 92310 Sèvres, France
SIREN: 511 935 348 RCS Nanterre
Email: contact@artkhade.com
Artkhade has not appointed a Data Protection Officer (DPO).
For any questions regarding the protection of your personal data or to exercise your rights, you can contact Artkhade at:
contact@artkhade.com
Depending on your use of the website and services, Artkhade may process the following categories of data.
When creating and using an account, we may collect in particular:
For professional accounts, we may also collect:
When you subscribe to a membership or make a payment, we may process information necessary for managing the transaction, including:
Payments may be processed by specialized service providers, including Stripe, PayPal, and Monetico.
Artkhade does not store complete credit/debit card details.
Payment service providers may, however, directly process certain data necessary for payment in accordance with their own privacy policies and applicable legal obligations.
When you use Artkhade, we may collect certain technical data necessary for the operation and security of the service, including:
This information may notably be used to ensure the security of the service, detect anomalous behavior, prevent abuse, and ensure the proper functioning of the platform.
Artkhade may also process certain data relating to your use of the service, including:
This data may be used to enable the operation of certain account features, improve the service, and establish internal statistics.
Artkhade does not use advertising cookies or audience measurement cookies for these processing operations.
Artkhade may process your email address and necessary information in order to send you:
Communications required for the operation of the service are distinct from commercial communications.
Artkhade may offer a newsletter and commercial communications distinct from the communications required for account operation.
Subscription to the newsletter is based on specific consent.
Users can choose to receive the newsletter by voluntarily checking the corresponding box. This box is not pre-checked.
Acceptance of the General Terms of Use, General Terms of Sale, or simple account creation does not constitute consent to receive the newsletter.
This distinction complies with applicable rules governing electronic commercial prospecting.
Each newsletter includes a mechanism allowing simple unsubscription.
Unsubscribing from the newsletter does not necessarily delete the Artkhade account and does not prevent Artkhade from sending communications strictly necessary for service performance or account security.
Management of the newsletter and commercial campaigns is provided notably using MailerLite.
The email address may continue to be retained by the newsletter service after an Artkhade account is deleted if the user remains subscribed to the newsletter.
Unsubscribing results in the cessation of commercial mailings. Information strictly necessary to respect this choice may be retained to prevent unwanted re-subscription or mailings.
Artkhade may send communications necessary for the operation of the account and services, including:
These communications do not necessarily constitute commercial communications.
Transactional or relational communications required for the service are distinguished from messages intended to promote Artkhade's products or services. The CNIL expressly distinguishes between these different categories of communications.
Transactional emails are notably likely to be sent using Twilio SendGrid.
Artkhade processes personal data only when it has an appropriate legal basis.
Depending on the processing involved, legal bases may include the following:
| Purpose | Main Legal Basis |
|---|---|
| Account creation and management | Performance of contract or pre-contractual measures |
| Subscription management | Performance of contract |
| Payment processing | Performance of contract and legal obligations |
| Billing and accounting | Legal obligation |
| Sending communications necessary for the service | Performance of contract / legitimate interest depending on processing |
| Website security and abuse prevention | Legitimate interest |
| Log management and technical data | Legitimate interest / security |
| Operation of certain features | Performance of contract |
| Internal usage statistics | Legitimate interest or other appropriate basis depending on processing |
| Commercial newsletter | Consent |
| Management of data subject rights requests | Legal obligation |
| Publication and management of certain entries and data on Artkhade | Depending on context: performance of service, legitimate interest, and/or other appropriate legal basis |
The applicable legal basis may vary depending on the precise nature of the processing and the circumstances under which the data is collected.
Artkhade is a platform specialized in data and information relating in particular to the art world.
As part of the professional use of the service, certain users may enter information regarding third parties, including:
This information may include names, professional contact details, biographies, positions, information relating to professional activities, or other information associated with an individual.
Some of this information may be published on Artkhade and accessible to other platform users.
When a professional user enters data concerning third parties, they must have an appropriate legal basis for the processing they carry out and comply with their obligations regarding personal data protection.
When Artkhade processes certain data on behalf of a professional user and on their instructions, Artkhade may act as a processor within the meaning of the GDPR.
In this case, the respective obligations of Artkhade and the professional are also governed by applicable contractual provisions, particularly those relating to data protection.
Artkhade may also determine itself certain purposes and means relating to the compilation, structuring, management, enrichment, and publication of its databases and content.
Artkhade may notably enrich or supplement certain information relating to persons, artworks, artists, galleries, collectors, or other entities referenced on the platform.
For these processing operations, Artkhade acts as data controller when it determines the purposes and means of processing itself.
This distinction is made according to the operational reality of processing and may vary depending on the features and services involved.
Certain data relating to individuals who do not necessarily have an Artkhade account may be obtained indirectly, including:
Where the GDPR requires specific information to be provided to data subjects in the case of indirect collection, Artkhade implements appropriate information measures, subject to statutory exceptions.
Data subjects may contact Artkhade to request information about data concerning them or exercise their rights.
Personal data may be accessible, depending on the purposes concerned, to the following categories of recipients:
Artkhade does not sell users' personal data.
Artkhade does not transfer personal data to third parties for independent commercial prospecting purposes without having the necessary legal basis.
Artkhade uses certain specialized service providers to deliver and secure its services.
Artkhade uses DigitalOcean in particular for:
The hosting services used by Artkhade include infrastructure located in Frankfurt, Germany.
Artkhade uses in particular:
These providers may directly process certain data necessary for payment.
Artkhade uses in particular Twilio SendGrid to send certain transactional and service emails.
Artkhade uses MailerLite to manage the newsletter and commercial campaigns.
These providers may process personal data on behalf of Artkhade or, depending on the nature of the processing, act as independent data controllers.
Artkhade selects its service providers taking into account in particular their guarantees regarding data protection and security.
When a provider acts as a processor, the relationship is governed in accordance with applicable GDPR requirements, particularly those under Article 28.
Certain service providers used by Artkhade may be established outside the European Economic Area or involve affiliates or subcontractors located in third countries.
When personal data is transferred to a country that does not benefit from an applicable adequacy decision, Artkhade ensures that a transfer mechanism recognized by the GDPR is applied where required, including European Commission Standard Contractual Clauses or, where conditions are met, another recognized mechanism.
By way of example, Stripe currently provides in its contractual documentation for mechanisms including European Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
Twilio also indicates that it uses various transfer mechanisms depending on the services involved, including its Binding Corporate Rules and European Standard Contractual Clauses; terms may differ for SendGrid services.
International transfers that may be carried out by other service providers are subject to the mechanisms set forth in their contractual terms and applicable data protection documentation.
Artkhade retains personal data for a period proportionate to the purposes for which it is processed and in accordance with applicable legal obligations.
Data necessary for account management is retained for the duration of account use, subject to specific retention periods applicable to certain data categories.
When a free account remains inactive for three years, Artkhade may automatically delete it.
Where technically and operationally applicable, Artkhade may notify the user in advance to allow them to log back in and retain their account.
Account deletion results in the erasure of account data that does not need to be retained for another purpose or pursuant to a legal obligation.
When a user requests the deletion of their account, Artkhade deletes the relevant account data, subject to:
Artkhade's technical backups may retain certain data for a maximum period of approximately 10 days before erasure or overwriting during the standard backup cycle.
Certain data relating to invoices, payments, and accounting transactions may be retained for the duration required by applicable regulations, in particular accounting and tax obligations.
This data may be stored separately from data used for routine account operations.
Deletion of an Artkhade account does not automatically unsubscribe the email address from a newsletter managed by a separate service when the user has expressly chosen to continue receiving it.
Subscription to the newsletter may therefore persist independently of the Artkhade account until the user unsubscribes or until Artkhade ceases this communication.
In accordance with the GDPR and applicable regulations, you may, depending on the circumstances and subject to conditions provided by law:
Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
You may in particular withdraw your consent to the newsletter at any time by using the unsubscription link contained in the relevant communications.
To exercise your rights or ask any question regarding the processing of your personal data, you can contact Artkhade:
To protect personal data and prevent fraudulent requests, Artkhade may request information reasonably necessary to verify the applicant's identity where justified.
Artkhade responds to requests within the timeframes provided by the GDPR.
If you believe that the processing of your personal data does not comply with applicable regulations, you can contact Artkhade to allow it to examine your request.
You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French supervisory authority for personal data protection.
Artkhade implements appropriate technical and organizational measures to protect personal data in particular against:
The measures implemented are adapted to the nature of the data, the purposes of processing, and associated risks.
Access to personal data is limited to individuals and service providers who need it for the relevant purposes.
Since no transmission of data over the Internet or storage method can be guaranteed to be completely secure, Artkhade cannot, however, guarantee absolute security.
Artkhade uses only cookies strictly necessary for the operation of the website and services.
These cookies may notably be used to:
Artkhade does not use cookies intended for advertising, profiling, or audience measurement.
For more information, please consult our Cookie Policy.
Artkhade does not use users' personal data to make decisions concerning them producing legal effects or similarly significant effects based solely on automated processing.
Artkhade may amend this Privacy Policy to reflect changes in its services, processing practices, or applicable regulations.
The version published on this page is the current version.
When changes are significant and required by regulations, Artkhade may inform users through appropriate means.