Privacy Policy - ARTsynonyme

1. Introduction

Protecting your personal data is a priority for ARTsynonyme. This Privacy Policy explains how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Data controller

The controller responsible for your personal data is:

ARTsynonyme (iMultimedia — sole trader, Thierry Lange)
SIRET: 498 480 300 00041
Address: 15bis Place de la Poissonnerie, 56000 Vannes, France
Email: admin@artsynonyme.com
Telephone:

3. Data collected

3.1 Identification data

First and last name
Email address
Telephone number (optional)
Postal address

3.2 Profile data

Profile photograph
Biography
Region and department
Account type (artist or collector)

3.3 Browsing data

IP address (website traffic statistics and security, accessible only to an administrator — see the retention period in section 7; also processed locally, without additional storage, to suggest artworks and artists from your approximate region)
Browser type
Pages visited
Login data (date and time)

3.4 Data specific to artists

Published artworks (photographs, descriptions and prices)
History of your exchanges and activity statistics
Consent to promotional use of images of your artworks (an optional checkbox in your profile and the date on which its status was last changed)

3.5 Communication data

Messages exchanged through the platform
For the visitor chat: name, email address, subject of the request, messages and the public page from which the conversation was started
For optional browser notifications: a technical subscription address and the two encryption keys generated by the browser; ARTsynonyme does not associate this subscription with a name or email address
Favourites and preferences

3.6 Data relating to artist registrations

Name, email address, telephone number and, where applicable, website, portfolio or Instagram link
Artistic introduction and photos submitted during registration
Administrative status of the registration and date of the decision

4. Purposes of processing

Your personal data is collected and processed for the following purposes:

Account management: Creating, managing and securing your account
Providing the service: Connecting artists and collectors and suggesting regional content
Communication: Sending information about your account and the service
Visitor enquiries: Answering questions submitted through the visitor chat and facilitating account registration when requested
Newsletter: Sending news and updates with your consent
Browser notifications: Notifying subscribed visitors when a new artistic event is published, with their consent
Promotional communication: Featuring artworks and artist or gallery profiles on ARTsynonyme’s social networks and promotional media, only with the consent of the artist or gallery concerned
Service improvement: Usage analysis and statistics
Security: Preventing fraud and abuse
Legal obligations: Compliance with accounting and tax obligations

5. Legal basis for processing

The processing of your data is based on the following legal grounds:

Performance of a contract: Providing the ARTsynonyme service
Consent: Visitor chat, newsletter, browser notifications, non-essential cookies and promotional use of images of artists’ and galleries’ artworks (social networks, presentation and ARTsynonyme offers)
Legitimate interests: Improving the service and ensuring security
Legal obligation: Retaining accounting records

6. Recipients of the data

Your personal data may be disclosed to the following recipients:

Authorised ARTsynonyme personnel: As part of their duties
Technical service providers: Hosting and maintenance providers operating under data-processing agreements
Your browser’s Push service: Apple, Google or Mozilla, depending on the browser and operating system used, receives the technical subscription address and the encrypted notification needed for delivery
Competent authorities: In response to a legal or judicial request
Other users: Public profile visible to other members

Your data is never sold to third parties.

7. Retention periods

We retain your personal data for the following periods:

Active account: Throughout your use of the service
Closed account: Data that is no longer necessary is erased or anonymised when the closure request is processed. Data required to comply with a legal obligation or to establish, exercise or defend legal claims is kept in a restricted-access archive for the applicable period, then erased
Prospective customer data: Three years from collection or the last contact initiated by the prospective customer
Accounting records: Ten years (legal obligation)
Login logs: One year (security)
IP address used for traffic statistics: 13 months, after which it is automatically erased; the number of views remains stored without a time limit
Newsletter: Until you unsubscribe
Visitor chat: Thirteen months from the start of the conversation, then automatic deletion
Browser notifications: Until you unsubscribe; expired or unsubscribed technical subscriptions are deleted after three months
Expired or unused referral invitation: One year
Artist registration not approved by the administration: Retained for three months after the decision, then deleted unless a new registration is submitted

8. Your rights

Under the GDPR, you have the following rights:

Right of access: Obtain a copy of your data
Right to rectification: Correct inaccurate data
Right to erasure: Have your data deleted, subject to applicable conditions
Right to restriction: Restrict the processing of your data
Right to object: Object to certain processing
Right to data portability: Receive your data in a structured format
Right to withdraw consent: For processing based on consent
Right to issue instructions for after your death: Regarding what happens to your data

How can you exercise your rights?

To exercise your rights, contact us:

By email: admin@artsynonyme.com
By post: ARTsynonyme (iMultimedia) - GDPR Department - 15bis Place de la Poissonnerie, 56000 Vannes, France

We respond to every request within one month. This period may be extended by a further two months where necessary due to the complexity or number of requests; in that event, we will inform you within the initial one-month period. Proof of identity may be requested only where there are reasonable doubts about the identity of the person making the request, and must be limited to what is necessary.

Artists, galleries and collectors can download a structured JSON export of the main data associated with their account directly from their authenticated profile. This automatic export does not include passwords, authentication tokens, internal security data or personal data belonging exclusively to third parties. A broader access request may still be submitted using the contact details above.

Closing an account and erasing data

You may request closure from your authenticated profile or by contacting us by email or post. Closing an account removes access to the service and the public profile. Data that is no longer necessary is erased or anonymised; accounting records may be kept for ten years where legally required, and data needed to establish, exercise or defend legal claims may be retained for the applicable limitation period in a restricted-access archive.

After a member’s death, the person designated in valid post-mortem instructions, or the heirs where permitted by French law, may contact us to request implementation of those instructions or closure of the account. We request only the supporting documents necessary to verify the death and the applicant’s authority.

Complaint to the CNIL

If you believe that your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against destruction, loss, alteration, disclosure or unauthorised access:

Encryption of sensitive data (HTTPS, SSL/TLS)
Secure authentication (password hashing)
Secure hosting in France or the EU
Regular data backups
Restricted access to data under the principle of least privilege
Staff training in data protection

10. Cookies

10.1 What is a cookie?

A cookie is a small text file placed on your device when you visit a website. It stores information about your browsing.

10.2 Types of cookies used

Essential cookies: Required for the website to operate, including sessions, authentication and continuity of an open visitor-chat conversation
Preference cookies: Remember your choices, including language and dark mode
Statistics cookies: Analyse website use in anonymised form

10.3 Managing cookies

On your first visit, a window allows you to accept, refuse or customise non-essential cookies. Your choice is retained for six months. You can change it at any time using the “Manage my cookies” link in the footer.

Cookies strictly necessary for login, security, the cart and temporary favourites remain active so that the website can operate. You may also delete them through your browser settings, but some features may then cease to work correctly.

10.4 Temporary favourites and cart

When you are not signed in, the identifiers of artworks added to your favourites or cart are stored in the browser’s local storage and in a functional backup cookie for no more than 30 days. They contain no identity data and are used neither for advertising nor for tracking between websites. Your selections are transferred to your Collector account when you sign in and are then deleted from the browser.

10.5 Browser notifications

Notifications are optional and are activated only after you click the subscription button and accept the browser’s native permission request. You can unsubscribe at any time using the “Notifications” link in the footer or revoke permission in your browser or operating-system settings. The seven-day postponement choice is stored only in your browser’s local storage.

11. Data transfers outside the EU

Your personal data is hosted and processed within the European Union. If data is transferred outside the EU, we ensure that appropriate safeguards are in place, such as standard contractual clauses or an adequacy decision.

12. Minors

Our service is intended for adults. If you are under 18, you must obtain permission from your parents or legal guardians before registering.

13. Changes to this policy

We reserve the right to amend this Privacy Policy at any time. Users will be notified of any changes by email or through a notification on the platform. The version currently in force is always available on this page.

14. Contact

If you have any questions about this Privacy Policy or the processing of your personal data:

Email: admin@artsynonyme.com
Post: ARTsynonyme (iMultimedia) - GDPR Department - 15bis Place de la Poissonnerie, 56000 Vannes, France