Published January 1, 2022

Introduction

PosterDrops.com (”PosterDrops”) is the data controller for the processing of your personal data. Below, PosterDrops has provided an overview of the processing activities in which personal data are processed, including among others the purpose thereof and the legal basis.

If you have any question to this privacy policy (“Privacy Policy”) or you wish to exercise your data subject rights pursuant to Chapter III of the General Data Protection Regulation (“GDPR”) and according to section 6 of this Privacy Policy, please contact PosterDrops by telephone on +1 888 230 2246 or by email to info@posterdrops.com.

Categories of personal data, purpose and legal basis

Website visitors

When you visit PosterDrops website www.posterdrops.com, PosterDrops will process personal data about you, for instance, location data, cookies and your IP-address. The purpose of the processing of your personal data, which PosterDrops obtains when you visit the website, is to provide you with the content of PosterDrops website, including providing you with a better website experience and to prepare website statistics.

The legal basis for the processing of your personal data is your consent, which you will be asked to give when you visit the website, cf. Article 6(1)(a) of the GDPR.

Member account on PosterDrops

PosterDrops offers the users, who have created a member account on PosterDrops, the opportunity for browsing through 3D exhibitions, sharing collections, connecting with other people interested in art, and buying and selling art through PosterDrops website. PosterDrops provides services and products related to the platform. These services include writing articles, setting up shows, creating 3D models of galleries, etc.

When you create a member account on our website, PosterDrops will process personal data about you, for instance, your email address, name, location data, telephone number, your picture if you provide this, information about your art collection, your comments to posts and conversations with other members, your followers and who you are following, your IP-address, etc. If you buy an artwork via the platform, PosterDrops will process your payment information. The purpose of the processing of your personal data is to provide you access to our platform and give you the possibility to use the technical solutions in our platform, for instance the possibility to connect with art collectors, galleries and artists, including to buy artwork from these parties.

The legal basis for the processing of your personal data is that the processing is necessary for the performance of a contract entered into between you as a member and PosterDrops , cf. article 6(1)(b) of the GDPR. The legal basis for such processing of your personal data might also be or alternatively be that processing is necessary for the purposes of legitimate interests pursued by PosterDrops and that it is our assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. article 6(1)(f) in the GDPR. Our legitimate interests constitute maintaining and enhancing customer relationships, business development and providing our customers with our services, including the delivery of a social marketplace for interactions between art buyers and galleries.

Requesting information about or purchasing an artwork without a member account on PosterDrops You can also request information about an artwork or purchase such artwork without creating a member account on PosterDrops. If this is the case, PosterDrops will process personal data about you, for instance, your email address, name, location data, telephone number etc. If you buy an artwork via the platform, PosterDrops will process your payment information. The purpose of the processing of your personal data is to provide you with the requested artwork, including the possibility to connect with art collectors, galleries and artists.

The legal basis for the processing of your personal data is that the processing is necessary for the performance of a contract entered into between you and PosterDrops, cf. article 6(1)(b) of the GDPR. The legal basis for such processing of your personal data might also be or alternatively be that processing is necessary for the purposes of legitimate interests pursued by PosterDrops and that it is our assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. article 6(1)(f) in the GDPR. Our legitimate interests constitute maintaining and enhancing customer relationships, business development and providing our customers with our services.

Customer support inquiries

If you submit an inquiry relating to PosterDrops services to our customer support, PosterDrops will process personal data included in your inquiry and any other personal data of relevance to the inquiry. The personal data processed will be your name, your email address, the personal data included in your inquiry, etc.

The legal basis for such processing of your personal data is that the processing is necessary for the purposes of legitimate interests pursued by PosterDrops and that it is our assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. article 6(1)(f) in the GDPR. Our legitimate interests constitute customer support.

Contact person at a gallery, vendor or another business partner

As a contact person at a gallery, vendor or another business partner, we process your personal data when you communicate with us, e.g. via emails in connection with our existing contractual relation with the gallery you represent or the company you are employed with or in connection with the conclusion or termination of a contract. We process ordinary personal data about you, including your name, email address, telephone number, address, your position with the company, etc.

The processing of your personal data is necessary in order for us to fulfil our contractual obligations towards your employer or the gallery you represent. The legal basis for such processing of your personal data is that the processing is necessary for the purposes of legitimate interests pursued by PosterDrops and that it is our assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. article 6(1)(f) in the GDPR. Our legitimate interests constitute fulfilment of our contractual obligations, maintaining and enhancing customer relationships, deliver a social market place for interactions between art buyers and galleries, invoicing for the services your company provides to PosterDrops and/or vice versa, communicating with you if you have any questions related to our services or vice versa, and for documentation purposes in the event we agree on matters relating to our services in writing via email. In addition to this, it is also in your interest that we can offer you a good experience when you visit PosterDrops website and make use of the various options offered on the website.

In some cases, processing of personal data is necessary in order to comply with a legal obligation to which PosterDrops is subject, for instance in relation to the obligation on the preservation of accounting records pursuant to the Danish Bookkeeping Act. In such case, the legal basis for the processing is article 6(1)(c) in the GDPR.

Newsletter subscription

If you subscribe to our newsletter, PosterDrops will process your name and email address. The purpose of the processing of your personal data is to provide you with our newsletters.

The legal basis for such processing of your personal data is that the processing is necessary for the purposes of legitimate interests pursued by PosterDrops and that it is our assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. article 6(1)(f) in the GDPR. Our legitimate interests constitute marketing of PosterDrops services, including maintaining and enhancing customer relationships.

Recipients of your personal data

Where relevant, PosterDrops may disclose or transfer your personal data to vendors, business partners or other collaborators for business purposes.

Certain recipients process personal data on behalf of PosterDrops and may only process your personal data in accordance with documented instructions given by PosterDrops and further terms and conditions stated in a data processor agreement entered into with PosterDrops. These data processors are not permitted to process your personal data for their own purposes.

Transfer of your personal data to a third country (outside of eu/eea)

In certain cases, PosterDrops will transfer your personal data to third countries outside of EU/EEA, for instance the U.S. If your personal data are transferred to such third countries, PosterDrops will ensure that such transfer will be carried out in accordance with applicable data protection legislation so that an adequate level of protection is ensured. If the personal data are transferred to recipients established in so-called ”unsafe” third countries that are not approved by the EU-Commission, we ensure an adequate level of protection for instance by entering into the EU-Commission"s standard contractual clauses or by transferring personal data to recipients that adhere to approved certification mechanisms such as the EU-U.S. Privacy Shield Agreement in case of transfers to the U.S.

If in exceptional cases, none of the above legal bases apply, PosterDrops will obtain your explicit and prior consent to the transfer of your personal data to the specific third country.

Storage of your personal data

PosterDrops will only store your personal data as long as it is deemed necessary to fulfil the purposes for the processing of your personal data.

If you have a member account on our website, we will store your personal data as long as you have a member account. If you choose to delete your account, we will delete the personal data about you shortly thereafter, unless we deem it necessary to continued storage of your personal data for a specific period for documentation purposes.

If you are a contact person of our customer, a gallery, vendors, business partners, etc., PosterDrops will store personal data about you until termination of the contractual relationship (if any), as long as we communicate, or until it is no longer necessary for the establishment, exercise or defence of a legal claim.

PosterDrops will store your personal data to the extent it is necessary for bookkeeping purposes such as personal data related to invoicing. Such personal data will be stored for a period of 5 years from the expiry of the fiscal year which the accounting records relate to. The purpose is to comply with the obligations in the Danish Bookkeeping Act.

Your rights

We have implemented a number of measures to protect your personal data and ensure your rights. As a data subject, you can exercise the rights listed below. However, some of the rights only apply under certain circumstances.

The Danish Data Protection Agency has prepared guidelines regarding the data subjects’ rights. The guidelines can be accessed here. However, please note that the guidelines are only available in Danish.

Right of access

You have the right to request access to, including the disclosure of a copy of, the personal data that we process about you as well as the right to receive information on:

the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries and in that connections the necessary measures carried out prior to the transfer;
the envisaged storage period or the criteria used to determine that period;
the existence of the right to request rectification, erasure, restriction or objection against processing of your personal data, including especially processing of personal data in connection with direct marketing purposes;
the right to lodge a complaint with the Danish Data Protection Agency;
where your personal data are obtained from if the personal data are not collected from you; and the existence of automated decision-making, including profiling, and as a minimum meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Right to rectification

You have the right to have inaccurate personal data about yourself rectified as well as the right to request completion of incomplete personal data concerning you.

Right to erasure (”right to be forgotten”)

Under certain circumstances you have the right to obtain from PosterDrops the erasure of personal data concerning your, for instance if the processing is based on your explicit consent and you withdraw this consent.

Right to restriction of processing

You have the right to restrict PosterDrops processing of your personal data, for instance, in the event you dispute the accuracy of the personal data.

Right to data portability

When our processing of your personal data is carried out automatically and is based on your consent or a contract with you, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and the right to transmit those personal data to another data controller, if this is technically feasible.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to our processing of your personal data which is based on point (e) or (f) of Article 6(1) in the GDPR. This applies at any time where personal data are processed for direct marketing purposes.

Right to not be subject to automated individual decision-making

You have the right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to withdraw a consent

If you have given us your consent to the processing of your personal data, you have the right to withdraw such consent at any time. However, the withdrawal of your consent will not affect the lawfulness of processing of your personal data based on consent before its withdrawal.

Questions or complaints

If you have any questions relating to this Privacy Policy, you wish to exercise your rights as mentioned above, or you disagree with the way we process your personal data, you can contact PosterDrops by using the contact information provided in section 1 of this Privacy Policy.

You can also file a complaint to the Danish Data Protection Agency, which is an independent public authority that is, inter alia, responsible for monitoring and enforcing the application of the GDPR. The Danish Data Protection Agency"s contact information is available on its website: www.datatilsynet.dk.

Amendments to this privacy policy

This Privacy Policy will be updated and modified periodically, as well as when necessary due to changes in applicable data protection legislation and practice and, thus, we recommend that you keep yourself updated of such changes.

Date of last change to this Privacy Policy:

19.11.21