Last updated: October 2026
This Privacy Policy explains how Archive for Art (“we”, “our” or “us”) collects and uses personal data when you visit archiveforart.com, contact us or request a demo of our platform. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection.
1. Who is responsible for your data
The data controller is [Legal entity name], [Registered address], [Registration number]. For any privacy question or request, contact us at [privacy email address].
2. What data we collect
- Information you give us: when you use our contact form, we collect your full name, email address, institution name and the content of your message. If you contact us by email or phone, we keep what you share with us.
- Technical data: standard server logs such as IP address, browser type, device and the pages requested, which arise from normal operation of the website.
- Cookies: see section 7 and our cookie banner for details and your choices.
3. Why we use your data and on what legal basis
- To respond to your enquiry or demo request (legal basis: your consent, given by ticking the box on our form, and steps taken at your request before entering into a contract).
- To follow up on our business relationship with your institution, such as arranging a demo or sending information you asked for (legal basis: our legitimate interest in conducting B2B sales; you can object at any time).
- To keep the website secure and working (legal basis: legitimate interest).
- To meet legal obligations such as accounting and tax rules, where they apply (legal basis: legal obligation).
We do not sell your personal data and we do not use it for automated decision-making or profiling.
4. Who receives your data
Your data is accessed only by the people at Archive for Art who handle enquiries. We use a small number of service providers who process data on our behalf under appropriate agreements, including our website hosting and email provider, which stores the website database and the mailbox that receives form messages. [List any additional providers, e.g. CRM or scheduling tools.] We may disclose data where the law requires it.
5. International transfers
[Confirm hosting location.] If any personal data is transferred outside the European Economic Area or Serbia, we ensure an appropriate safeguard is in place, such as an adequacy decision or standard contractual clauses.
6. How long we keep your data
- Contact form enquiries and related correspondence: up to [24] months after our last contact with you, unless they lead to a business relationship.
- Customer and contract records: for the duration of the relationship and as long afterwards as the law requires.
- Server logs: for a short period, normally no longer than [12] months.
7. Cookies
We use cookies that are necessary for the website to work and, only with your consent, optional cookies. You can accept, decline or change your choice at any time using the cookie settings on the site. Declining optional cookies does not affect your use of the website.
8. Your rights
Under the GDPR and Serbian law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing already carried out.
To exercise any of these rights, email [privacy email address]. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority. In Serbia this is the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs); in the EU, your national data protection authority.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and backups. No online service can be guaranteed completely secure.
10. Links to other websites
Our website may link to third-party sites. We are not responsible for their privacy practices and recommend reading their policies.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
12. Contact
Archive for Art, [Registered address], [privacy email address].