Privacy policy
GONARTS respects your privacy. This policy explains what personal data we collect through this website, how we use it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.
Data controller
The entity responsible for processing your personal data is GONARTS, based in Porto, Portugal. For any question about your data, write to geral@gonarts.com.
What data we collect
We only collect the data you give us directly: your name, email, phone number and the content of the messages you send through our enquiry, exhibition notification or newsletter forms. We also collect technical browsing data, such as device type, browser and pages visited, through cookies and similar technologies, as described in our Cookie Policy.
How we use your data
• To answer your enquiries about works and services. • To manage our commercial relationship, including proposals, sales, shipping and installation. • To send the newsletter and updates about exhibitions and experiences, where you have given us permission. • To improve how the website works and what it offers. • To meet our legal, tax and accounting obligations.
Legal basis
We process your data on the basis of your consent (newsletter, notifications and non essential cookies), steps taken at your request before entering into a contract and the performance of that contract (enquiries and purchases), compliance with legal obligations, and our legitimate interest in keeping the website secure and improving our services.
How long we keep your data
We keep data only for as long as needed for the purpose it was collected for. Enquiries are kept for up to two years after our last contact. Newsletter data is kept until you unsubscribe. Billing data is kept for the period required by law.
Sharing your data
GONARTS does not sell or rent your personal data. We may only share it with service providers who help us operate, such as website hosting, newsletter delivery, shipping companies, insurers and accountants. All of them are contractually bound to protect your data and to use it only for the stated purposes. Whenever a provider is located outside the European Economic Area, we ensure appropriate safeguards are in place.
Your rights
You may at any time request access to your data, its correction or deletion, restriction of or objection to its processing, and data portability. You may also withdraw your consent, without affecting any processing carried out before then. To exercise any of these rights, write to geral@gonarts.com. We will reply within one month. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD), at www.cnpd.pt.
Newsletter
You can unsubscribe from the newsletter at any time, using the link in every email or by writing to geral@gonarts.com.
Security
We use appropriate technical and organisational measures to protect your data against loss, unauthorised access or misuse.
Changes to this policy
This policy may be updated whenever necessary. The date of the latest update is always shown at the top of this page.