CP Arts – Privacy Policy
Last updated: September 2025
At CP Arts, we are committed to protecting your privacy and personal information. Personal information that can identify you, which we gather or you provide, is referred to as personal data (“Personal Data”).
This Privacy Policy explains what Personal Data we collect, how we use and handle it, and with whom we may share it. It also describes your legal rights under EU and Czech data protection law.
Our Legal Obligations
We collect and process your Personal Data in accordance with:
-
the EU General Data Protection Regulation (2016/679) (“GDPR”),
-
the Czech Act No. 110/2019 Coll., on the Processing of Personal Data,
-
and other applicable laws regulating the protection of personal data (together, “Data Protection Law”).
What Personal Data Do We Collect?
We may collect and use the following Personal Data:
-
Your name
-
Your email address, telephone number, billing address, and delivery address
-
Payment details (including debit and credit card information)
-
Your contact history and purchase/consignment history with CP Arts
-
Your preferences and interests regarding artworks, exhibitions, and events
-
Information about your use of our website and online services (see “Cookies” below)
How Do We Collect Your Information?
Direct Interactions
Most Personal Data comes directly from you, for example:
-
When you inquire about, purchase, consign, or sell an artwork
-
When you attend an exhibition, art fair, or other CP Arts event in Prague, Offenbach, or elsewhere
-
When you subscribe to our newsletter or request information about artists and artworks
-
When you visit our website or contact us by email or phone
Other Sources
We may also obtain information from:
-
Publicly available sources such as auction results, catalogues, or press coverage
-
Introductions or referrals from artists, collectors, or partners
-
Service providers (e.g. shipping, payment, and logistics companies)
-
Analytics providers such as Google Analytics
-
Art platforms such as Artsy
We may also compile aggregated, anonymised data for statistical purposes.
How and Why We Use Your Personal Data
We will only use your Personal Data where we have a legal basis to do so, including:
-
Legal obligations – to comply with Czech and EU regulatory or tax requirements
-
Contractual necessity – to fulfil agreements with you (e.g. a sale, consignment, or purchase)
-
Legitimate interests – to operate, promote, and improve our services, exhibitions, and communications, provided your rights are not overridden
-
Consent – where you have explicitly agreed (e.g. to receive marketing emails)
We may use your Personal Data for:
-
Processing transactions and responding to your requests
-
Managing client and contact records
-
Sending invitations and updates about exhibitions, events, and catalogues
-
Security purposes, including protecting artworks, staff, and visitors
-
Fulfilling our legal and contractual obligations
Sharing Your Personal Data
We do not sell or rent your Personal Data. We may share it with:
-
Third-party service providers (payment processors, shipping/logistics providers, IT/database providers)
-
Auditors, accountants, and legal advisors
-
Law enforcement or regulatory authorities in the Czech Republic or EU, where required
-
Partners or prospective buyers in the event of a gallery restructuring or business transfer
All service providers are contractually required to handle your Personal Data securely and only for the specified purpose.
Cookies and Analytics
Our website uses cookies and similar technologies to improve user experience and analyse website traffic.
-
Necessary cookies – required for the site to function properly
-
Functional cookies – remembering user settings and preferences
-
Analytics cookies – providing anonymised data on website use
You can control or disable cookies through your browser settings.
Data Retention
We retain your Personal Data only for as long as necessary to fulfil the purposes outlined in this policy, to comply with Czech and EU legal requirements, or to enforce our rights. Data no longer required will be securely deleted or anonymised.
Data Security
We use appropriate technical and organisational measures to protect your Personal Data against unauthorised access, misuse, loss, or disclosure. While we take all reasonable steps to secure your data, we cannot guarantee the absolute security of transmissions over public networks.
Your Rights
Under GDPR and Czech data protection law, you have the right to:
-
Access the Personal Data we hold about you
-
Request rectification of inaccurate or incomplete data
-
Request deletion of your Personal Data (“right to be forgotten”)
-
Restrict or object to the processing of your Personal Data
-
Withdraw your consent at any time (where processing is based on consent)
-
Request the transfer of your data to another controller
You may also lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Prague) if you believe your rights have been infringed.
Changes to This Policy
We may update this Privacy Policy from time to time. Any significant changes will be published on our website or communicated directly to you by email.
Contact
If you have any questions about this Privacy Policy or how CP Arts processes your Personal Data, please contact us:
CP Arts
Email: info@cp-arts.de
Address: Šítkova 233/1,
110 00 Nové Město, Czechia