Privacy Policy
Controller
The controller responsible for the processing of personal data on this website is:
GALERIE LA PA
Iga Lapa
contact@galerielapa.com
Personal Data
Depending on how you use this website, we may collect and process personal data when you:
Visit and browse the website;
Contact us;
Submit information through a contact form;
Place an order;
Make a payment;
Arrange delivery of a purchase; or
Otherwise communicate with me in connection with my website or services.
We use personal data only for the purposes described in this Privacy Policy and where permitted by applicable data protection law.
Cookies
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.
These necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.
Website Hosting and Operation
This website is hosted and operated using Squarespace.
Squarespace may collect personal information when you visit this website, including information about your browser, network and device, web pages you visited before coming to this website, web pages you view while using this website, and your IP address.
This information is processed to operate, maintain, secure, and improve the website and the Squarespace platform and services.
For more information about how Squarespace processes personal data, please see the Squarespace Privacy Policy.
Visitor Data
When you buy something on this website, we collect personal information from you to fulfill the order. We may collect information like your:
Billing and shipping address
Details relating to your purchase (for example, your shirt size)
Email address
Name
Phone number
We provide this information to Squarespace, our online store hosting provider, so that they can provide website services to us. We also provide this information to our shipping service providers so we can ship your order to you.
Our payment processors will also collect payment information from you.
Block Sumissions
When you submit information to this website via web-form, we collect the data requested in the web-form in order to track and respond to your submissions. We provide this information to Squarespace, our website hosting provider, so that they can provide website services to us and help us manage our relationship with you.
Services, Proposals, Estimates, and Contracts
When you contact us or agree to a service, we collect information necessary to respond to your inquiry, negotiate, prepare proposals or estimates, draft, and execute the service agreement, provide the agreed services, communicate with you, and manage the contractual relationship. We process information where necessary to take steps at your request before entering into a contract and to perform a contract with you.
This information may include your:
Email address
Name
Phone number
Address
Business details
Project information
We process this information where necessary to take steps at your request before entering into a contract, to perform a contract with you, to comply with legal obligations, or where necessary for our legitimate interests.
Shipping and Delivery
When you purchase a physical product on this website, we process personal data necessary to fulfill and deliver your order.
This may include your:
Billing and shipping address
Details relating to your purchase (for example, the product’s weight)
Email address
Name
Phone number
We may share relevant information with shipping and delivery service providers where necessary to deliver your order. We use Squarespace as our website hosting and e-commerce platform. Depending on the processing activity, Squarespace may process personal data on our behalf as a processor or may process certain information as an independent controller for its own purposes.
As you go through checkout, this site may autocomplete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.
The specific shipping provider may vary depending on the delivery method, destination, and other operational requirements. Where required, we will update this Privacy Policy to reflect the relevant service providers used to fulfill and deliver orders.
Analitycs
This website collects personal information to power our site analytics, including:
Information about your browser, network, and device
The web pages you visited prior to coming to this website
Your IP address
This information may also include details about your use of this website, including:
Clicks
Internal links
Pages visited
Scrolling
Searches
Timestamps
We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity.
Transactional Emails
We may email you with messages about your order or account activity. For example, we may email you to tell you that:
You’ve made a purchase
Your order has shipped
It’s not possible to unsubscribe from these messages.
We provide your contact information to Squarespace, our website hosting provider, so they can send these emails to you on our behalf and help us manage our relationship with you.
Marketing Emails
We send marketing emails based on your consent, where required by applicable law. You may withdraw your consent at any time by using the unsubscribe link in the relevant email or by contacting us.
Payments
Depending on the payment method selected, the relevant payment service provider may process personal data such as your name, billing information, payment details, transaction information, and other information necessary to process and verify the payment and prevent fraud.
Payment providers process personal data in accordance with their own privacy policies and applicable data protection laws.
The payment provider may process information such as your name, billing information, payment details, transaction information, and other information necessary to process and verify the payment and prevent fraud. Payment providers process personal data in accordance with their own privacy policies and applicable data protection laws. Squarespace Payments makes use of the following third-party service providers which will also receive your personal information and process it in accordance with their privacy policies:
Stripe - payment processing services. You can read Stripe’s privacy policy at https://stripe.com/privacy.
Sift - fraud monitoring and detection services. You can read Sift’s privacy policy at https://sift.com/service-privacy.
We do not have access to your full payment card details where these are processed directly by the relevant payment provider.
Data Sharing and Recipients
We may share personal data with third parties where this is necessary for the purposes described in this Privacy Policy.
Depending on how you use my website, these recipients may include:
Squarespace, as my website hosting and e-commerce provider;
Payment service providers;
Shipping and delivery providers;
Technical and IT service providers;
Professional advisers, where necessary; and
Public authorities or other recipients where we are legally required to disclose information.
We do not sell your personal data.
Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Certain information may be retained for longer periods where required by legal, tax, or accounting obligations, or where necessary to establish, exercise, or defend legal claims.
The specific retention period depends on the type of information and the purpose for which it was collected.
Data Transfers
Some of the service providers used to operate this website may process personal data outside the European Economic Area (EEA). Personal data may be transferred to recipients in countries outside the EEA. Where such transfers take place, we rely on an adequacy decision of the European Commission or appropriate safeguards, such as Standard Contractual Clauses, as applicable.
Provision of Personal Data
The provision of personal data may be necessary in certain circumstances to enter into or perform a contract with you, such as when processing an order, arranging payment, or delivering a product. Where certain information is required to fulfill an order or provide a service, failure to provide that information may mean that we are unable to process the order or provide the requested service.
Providing personal data for optional purposes, such as marketing communications or certain analytics cookies, is voluntary. Where processing is based on consent, you may choose not to provide consent or withdraw your consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
You may lodge a complaint with the supervisory authority in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
Your Rights
Subject to applicable law, you may have the right to:
Request access to your personal data;
Request correction of inaccurate or incomplete personal data;
Request deletion of your personal data;
Request restriction of processing;
Object to certain processing;
Request data portability, where applicable; and
Withdraw consent where processing is based on your consent.
To exercise your rights, please contact me using the contact form or Email. You also have the right to receive information about the processing of your personal data and, where applicable, to request a copy of your personal data. You may withdraw your consent at any time where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Legal Bases for Protection
We process personal data on the following legal bases, depending on the specific circumstances:
Performance of a contract (Article 6(1)(b) GDPR): Where processing is necessary to process and fulfill orders, provide services, process payments, arrange delivery, or take steps at your request before entering into a contract.
Legal obligation (Article 6(1)(c) GDPR): Where processing is necessary to comply with legal obligations, including tax, accounting, and other statutory requirements.
Consent (Article 6(1)(a) GDPR): Where you have given consent to the processing of your personal data, such as for certain non-essential cookies, analytics, or marketing communications. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Legitimate interests (Article 6(1)(f) GDPR): Where processing is necessary for our legitimate interests, such as operating, securing, and improving our website and business, preventing fraud, and protecting our legal rights, provided that these interests are not overridden by your rights and freedoms.
Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the website, services, legal requirements, or the way in which personal data is processed.
The latest version will always be published on this page.