Privacy Policy

1. Controller

The controller within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is:

Parallel Art GmbH
Parkring 20
1010 Vienna
Austria

2. Hosting

This website is hosted by Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany.

When you visit our website, Host Europe automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include, for example, IP addresses, browser type and version, operating system used, referrer URL, hostname of the accessing computer, and time of the server request.

The use of Host Europe is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the reliable, secure, and efficient provision of our website.
We have concluded a data processing agreement (Art. 28 GDPR) with Host Europe to ensure that personal data is processed only in accordance with our instructions and in compliance with GDPR.

3. Types of Personal Data Processed

We process the following categories of personal data:

Identification and contact data (e.g. name, postal address, email address, phone number)
Account and registration data (login credentials, user account information)
Profile data (biographical information, exhibitor profiles, artist information)
Content data (uploaded texts, images, artworks, descriptions, and related metadata)
Communication data (messages sent via contact forms or email)
Usage and technical data (IP address, browser data, device information, access times)

If exhibitors upload personal data of third parties (e.g. artists), they are responsible for ensuring that they are legally entitled to do so (e.g. based on consent or another legal basis).

4. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

Provision and operation of the website and platform
Registration, login, and management of exhibitor accounts
Presentation of exhibitors, artists, and artworks
Communication with users and handling inquiries
Newsletter distribution
Analysis and optimization of website usage
Ensuring technical security and system stability

The legal bases for processing are:

Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures (e.g. user accounts, platform usage)
Art. 6(1)(a) GDPR – consent (e.g. newsletter subscription, optional cookies)
Art. 6(1)(f) GDPR – legitimate interests (e.g. website security, technical functionality, improvement of services)

5. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that allow an analysis of your use of the website. The information generated by cookies about your use of this website is usually transmitted to and stored on servers operated by Google.

We use Google Analytics with IP anonymization enabled. This means that your IP address is shortened within the EU or EEA before transmission and cannot be directly linked to you as an individual.

The use of Google Analytics is based on your consent (Art. 6(1)(a) GDPR), provided via our cookie banner. You may withdraw your consent at any time with effect for the future by adjusting your cookie settings.

You can also prevent the collection of data by Google Analytics by installing the Google Analytics Opt-out Browser Add-on:
https://tools.google.com/dlpage/gaoptout

Further information about data processing by Google can be found in Google’s Privacy Policy.

6. Newsletter

If you subscribe to our newsletter, we use the double opt-in procedure. After signing up, you will receive a confirmation email. Only after confirmation will your email address be added to the mailing list.

We process your email address solely for the purpose of sending you our newsletter (information about exhibitions, events, and related activities).

The legal basis is your consent (Art. 6(1)(a) GDPR).
You can withdraw your consent at any time by clicking the unsubscribe link included in each newsletter email or by contacting us directly.

We may use external service providers for newsletter distribution. These providers act as processors and are contractually obligated to comply with GDPR.

7. Contact Forms and Communication

If you contact us via a contact form or email, we process the data you provide (such as name, email address, and message content) for the purpose of handling your inquiry and possible follow-up questions.

The legal basis for this processing is:

Art. 6(1)(b) GDPR, if your inquiry relates to a contract or pre-contractual measures, or
Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries.

Your data will be deleted once the inquiry has been fully processed, unless statutory retention obligations apply.

8. Registration and User Accounts

Our platform offers a registration and login area for exhibitors.

When creating a user account, we collect the data required for registration (e.g. name, email address, address, and password). Exhibitors may voluntarily upload additional content such as artist biographies, artworks, images, and texts.

The processing of this data is necessary for the performance of the user agreement (Art. 6(1)(b) GDPR).

Passwords are stored in encrypted form. Please keep your login credentials confidential.

Internal staff (e.g. curators or administrators) may access user content only to the extent necessary for platform operation and editorial or organizational purposes.

User accounts and associated data can be deleted upon request, unless statutory retention periods or legitimate interests prevent immediate deletion.

9. Internal Access and Data Sharing

Within Parallel Art GmbH, only those employees and collaborators who require access to personal data to fulfill their duties have such access.

Personal data is not disclosed to third parties unless:

it is necessary for the operation of the website (e.g. hosting, newsletter services),
required by law, or
you have given explicit consent.

10. No Transfer to Third Countries

We do not intentionally transfer personal data to countries outside the European Union or the European Economic Area.

If, in individual cases (e.g. Google services), data is transferred to third countries, this is done only in accordance with GDPR requirements and appropriate safeguards.

11. Storage Duration

We store personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

Data is deleted once the purpose of processing no longer applies, unless statutory retention obligations or legitimate interests require longer storage.

12. Rights of Data Subjects

You have the following rights under GDPR:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact us using the contact details above.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law.

In Austria, the competent authority is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
www.dsb.gv.at

14. Cookies

Our website uses cookies. Some cookies are technically necessary for the operation of the website (e.g. login functionality). Other cookies (e.g. for analytics) are used only with your consent.

You can manage or withdraw your cookie consent at any time via our cookie settings.
You can also disable cookies entirely via your browser settings; however, this may limit the functionality of the website.

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at <a href=”https://devowl.io/rcb/data-processing/” rel=”noreferrer” target=”_blank”>https://devowl.io/rcb/data-processing/</a>.

The legal basis for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.