Privacy Policy

Last updated: May 2026

Gallery 024 highly values the protection of your personal data. In this privacy policy, we aim to provide clear and transparent information about how we handle personal data. We make every effort to safeguard your privacy and therefore handle personal data carefully. Gallery 024 always complies with applicable laws and regulations, including the General Data Protection Regulation (GDPR).

1. Data Controller

Gallery 024
van Welderenstraat 10
6511 MK Nijmegen
Phone: 024-3030040
Email: info@gallery024.com
Chamber of Commerce number: [Fill in Chamber of Commerce number]

2. What personal data do we process?

Gallery 024 processes the following categories of personal data, depending on your use of our services:

  • First and last name
  • Address details (billing and shipping address)
  • Phone number
  • Email address
  • Payment details (processed via our payment providers; we do not store full payment details ourselves)
  • IP address and device data
  • Browsing behavior on our website (via cookies and similar technologies)
  • Order history and account details
  • Correspondence with Gallery 024

3. Purposes and legal bases of processing

We process your personal data for the following purposes:

  • Performance of the agreement: processing orders, deliveries, payments, and returns (legal basis: performance of a contract, Art. 6 para. 1 lit. b GDPR).
  • Customer contact: answering questions and providing service (legal basis: performance of a contract and legitimate interest).
  • Newsletter and marketing: sending our newsletter, offers, and information about new collections (legal basis: your consent, Art. 6 para. 1 lit. a GDPR — you can unsubscribe at any time).
  • Legal obligations: complying with tax and administrative obligations (legal basis: legal obligation, Art. 6 para. 1 lit. c GDPR).
  • Improvement of our website and services: analyzing visitor behavior to optimize our website and offerings (legal basis: legitimate interest).
  • Fraud prevention and security: protecting our customers and our company against misuse (legal basis: legitimate interest).

4. Disclosure to third parties

Gallery 024 does not sell your data to third parties. We only provide your personal data to third parties if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With parties that process your data on our behalf (processors), we conclude a processing agreement to ensure the same level of security and confidentiality.

The following categories of recipients process data on our behalf:

  • Our webshop platform Shopify (hosting and order processing)
  • Payment providers (such as Mollie, Stripe, iDEAL)
  • Carriers and courier services (for delivery of orders)
  • Email marketing services (for sending newsletters, only with consent)
  • Analytics and advertising partners (only with cookie consent)
  • Accounting and administrative offices

5. Transfer outside the EEA

Some of our processors are located outside the European Economic Area (EEA), for example, in the United States. When we transfer personal data to countries outside the EEA, we do so only on the basis of an adequacy decision approved by the European Commission, standard contractual clauses, or another appropriate safeguard in accordance with the GDPR.

6. Cookies

Our website uses cookies and similar technologies. A cookie is a small text file that is stored on your device when you visit our website. We use the following types of cookies:

  • Functional cookies: necessary for the website's operation (e.g., for the shopping cart and login function). No consent is required for these.
  • Analytical cookies: to analyze and improve website usage (e.g., via Google Analytics, anonymized where possible).
  • Marketing and tracking cookies: to display relevant advertisements on other websites. These are only placed after your explicit consent.

You can manage your cookie preferences at any time via the cookie settings at the bottom of our website. You can also block or delete cookies via your browser settings.

7. Retention period

Gallery 024 does not retain personal data longer than strictly necessary to achieve the purposes for which it was collected. We apply the following retention periods:

  • Customer and order data: 7 years after the last order, in accordance with tax retention obligations.
  • Account data: until you delete your account or it has been inactive for an extended period.
  • Newsletter data: until you unsubscribe.
  • Correspondence: maximum 2 years, unless longer retention is necessary.
  • Analytical data: in accordance with the settings of the analytics service used, typically 14 to 26 months.

8. Security

Gallery 024 takes appropriate technical and organizational measures to protect personal data against loss, unauthorized access, unwanted disclosure, and alteration. This includes SSL encryption of our website, access restrictions to personal data, and regular security updates.

If you have the impression that your data is not properly secured or there are indications of misuse, please contact us at info@gallery024.com.

9. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: you can request which personal data we process about you.
  • Right to rectification: you can have inaccurate data corrected.
  • Right to erasure: you can request the erasure of your data, insofar as we are not legally obliged to retain it.
  • Right to restriction of processing: you can request the restriction of processing.
  • Right to object: you can object to processing based on a legitimate interest.
  • Right to data portability: you can request to receive your data in a structured, commonly used, and machine-readable format.
  • Right to withdraw consent: if processing is based on your consent, you can withdraw it at any time.

You can exercise these rights by sending a request to info@gallery024.com. To prevent misuse, we may ask you to adequately identify yourself. We will respond to your request as soon as possible, but no later than within four weeks.

10. Filing a complaint with the Dutch Data Protection Authority

Gallery 024 also wishes to inform you that you have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority. You can do this via the following link: https://autoriteitpersoonsgegevens.nl.

11. Changes to this privacy policy

Gallery 024 reserves the right to amend this privacy policy at any time. Changes will be published on this page, with a new effective date. We advise you to consult this privacy policy regularly.

12. Contact

Do you have questions about this privacy policy or about the processing of your personal data? Please contact us:

Gallery 024
van Welderenstraat 10
6511 MK Nijmegen
Phone: 024-3030040
Email: info@gallery024.com