This Privacy Policy describes the processing of your personal data by "ContemporArti, 7 Nassington road, London NW3 2TX”, ”we”, ”our” or ”us”. We are the data controller and this policy applies to the processing of your personal data in connection with your choice to pay for the products that you purchase from us through our website,
The below describes what personal data we process and for what purposes, and also the choices you have in connection with such processing.

Personal data processed by us

We only process personal data that we obtain when you pay for purchased products through a the website. We are the data controllers for such personal data that you voluntarily choose to submit in the free text field that is displayed to you when you choose to pay through website, This means that we may process categories of personal data such as
your name but also information about your purchases.

How we use personal data (purpose of processing) and legal basis for the processing

(why the processing is necessary)

We process your personal data to provide our services and products, to fulfil relevant agreements with you and to otherwise administer our business relationship with you. The legal basis we rely on is to fulfil our contractual obligations towards you, to comply with applicable laws and to pursue our legitimate interests.
We will not use your personal data for any other purposes than those set out in this Privacy Policy unless we inform you prior to initiating any processing for new purposes or a purpose that is compatible with the purpose for which we collected the personal data, all in accordance with applicable laws and regulations.
We always process personal data in accordance with applicable law, and we have implemented
appropriate security measures compliant with local information security requirements to protect your personal data from misuse, unauthorized access or disclosure, loss, alteration or destruction.
We will retain your personal data for no longer than permitted under applicable law after which time your personal data will be destroyed or deleted. We only retain your personal data to allow us to process the payment link and ensure compliance with our legal requirements.
We do not carry out any such processing that is defined as solely automated decision making, including profiling, under the General Data Protection Regulation (“GDPR”) that has legal effects or otherwise similarly significantly affects you.
Third parties : We may share your personal data with our service providers (e.g. those storing your personal data or processing the payment of your payment link) in connection with the above purposes. This will be done confidentially and only to the extent permitted by applicable laws.
We do not process personal data obtained from third parties.
We share personal data with iZettle AB, Regeringsgatan 59, 111 56, Stockholm, Sweden in its capacity of personal data controller.
If we share your personal data with data processors we only share them for purposes compatible with the purposes for which we have collected the data.