Gagosian’s Data Principles
1. We keep to a minimum the amount of data we hold about you.
2. We use your data to respond to your inquiries and provide you with information that we believe you would like to receive about Gagosian, our artists, available artworks and products, and our events (the lawful basis for this is “legitimate interest”).
3. We use your data to complete transactions with you on our websites and also via our galleries and affiliated businesses (the lawful basis for this is “contract”).
4. We use your data to communicate with you when you signup and opt in to receive information from us (the lawful basis for this is “consent”).
5. We hold your data only for as long as necessary.
6. We apply appropriate security mechanisms to protect your data.
7. Our legitimate business interests are balanced with your interests, rights, freedoms, and your consent.
The European General Data Protection Regulation (“GDPR”) concerns the use and processing of personal information. We are committed to using and processing your information in compliance with the GDPR, wherever you are located. You can find out more about the GDPR from the European Commission’s website.
We are further committed to using and processing your personal information in compliance with the California Consumer Privacy Act (“CCPA”). You can find out more about the CCPA from the California Department of Justice website.
What information does Gagosian collect about me?
We may collect some or all of the following: name, phone number, mailing address, email address, information about your browser, IP address, age, gender, socio-economic status, professional information, data provided by cookies and other similar technologies including your browsing history on our websites, functional data such as registration and system data, as well as additional usage data—for instance, your purchasing history, communication permissions, artist and product preferences, and creative interests or information about your attendance at one of our events.
Why does Gagosian need my information?
We use your data to help us provide the best experience to you, which includes improving (and, where possible, personalizing) your interactions with us. We also use your data to communicate with you, including, for example, to inform you about shows, events, products, and updates; to fulfill contracts; to send you the goods you have purchased; and to collect payments.
In addition, we may use data about you for the following purposes:
– to manage and ensure the integrity of our sales;
– to provide publications, catalogs, and information you request;
– to manage your relationship with us;
– to improve and personalize our websites based on your inferred interests;
– to expand our online audiences; to manage your account, inquiries, and requests;
– to provide, maintain, and protect our digital offerings;
– to protect against risk of fraud;
– to protect and defend our rights and property;
– to comply with legal obligations; and
– for any other purpose that we tell you about specifically when you register or provide data to us.
Can I opt out of sharing my information with Gagosian?
Yes, you do not have to share your information with us and you may opt out from receiving communications from us at any time by contacting us at firstname.lastname@example.org or calling us toll-free at +1 866 467 8688 (service code: 829). We will respect your rights under the GDPR and CCPA in this regard.
How do I delete my personal data and what are the consequences?
You can email email@example.com or call us toll-free at +1 866 467 8688 (service code: 829) to request that your data be deleted. However, deleting your personal data may impact your experience with Gagosian. We will not delete data that is needed to fulfill a contract until that contract is completed or unless we agree to terminate the contract. We will inform you if deleting your data will impact our ability to perform a contract in case this affects your decision.
How long does Gagosian keep my information?
We retain personal data for as long as necessary—to fulfill the transactions you have requested or for other essential purposes (for example, complying with our legal obligations, resolving disputes, and fulfilling our agreements).
How is information stored?
We are committed to protecting the security of your personal data. We store data in a number of places depending on our requirements to access and use it. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. For example, we store the personal data you provide on cloud-based or computer systems that have limited access and are in controlled facilities. Where possible, we avoid storing paper records.
Is Gagosian using cookies to gather information?
How can I contact Gagosian if I have questions or want to make a request concerning my personal information?
If you have any questions or requests regarding our use of your personal information, please email us at firstname.lastname@example.org or call us toll-free at +1 866 467 8688 (service code: 829).
What personal data do we hold and why?
When you contact us to make an inquiry, we will use your name and contact information to respond. We will then use this information to communicate with you in the future.
We may obtain, collect, and update information about you via direct contact with you, from third parties who refer you to us, or automatically via your engagement with Gagosian, including your use of our social media channels.
On request, we can provide you with access to all information, including proprietary information, that we maintain about you (but not other users unless required to do so by law) including unique identifier information (for example, your customer number or password) and contact information (for example, your name, address, and phone number). You can request this information by emailing us at email@example.com or by calling us toll-free at +1 866 467 8688 (service code: 829). We will correct inaccuracies on provision of the correct details or, where relevant, you can do this by changing your registered details online.
How does Gagosian use my information?
Gagosian collects and uses your information to support, improve, and obtain feedback regarding your experiences with us.
The information we collect is used for internal review and to improve the content of our websites and services. It is also used to notify users about updates.
If you submit an employment application to us online through our websites or otherwise, all of the information you submit may be used for any and all purposes ordinarily associated with processing an employment application.
If you do not want to receive emails from us in the future, please let us know by sending an email to firstname.lastname@example.org or calling us toll-free at +1 866 467 8688 (service code: 829).
Who do we share your information with?
We work with third parties in the provision of some of our services and it may be necessary for us to share your information with them in order to provide those services.
On request, and when relevant, we will provide details of which third parties we work with. We will also discuss and agree on any specific security questions or requirements you may have during the provision of our services.
The third parties we work with are encouraged to meet the requirements of the GDPR and CCPA. When we contract with third parties we enter into agreements that encourage GDPR and CCPA compliance.
If we sell an artwork to you, we share the invoice with the artist for their records.
We share your data internally and have a data transfer agreement in place that complies with EU law for sharing data from our branches in the EU to outside of the EU.
An exemption to the above is where we must disclose information to meet certain legal requirements.
We do not sell your data to anybody.
Do I have the right to know what categories of my personal information Gagosian shared with third parties?
Yes, you have the right to know what categories of your personal information we disclosed to a third party.
How long do we store your data for?
We will store your personal information for as long as necessary. For example, we are required by law to keep information about financial transactions for the current financial year plus an additional six years.
We may store your information on our databases for reference and to record any preferences you have communicated to us, for example in relation to your opt-in status to receive marketing communications. We may retain and use information to answer queries or resolve problems, to provide improved and new services, to respect your rights under the GDPR and CCPA, and for any data-retention requirements of the law. This means we may retain information after you cease interacting with us.
We store your information securely to prevent unauthorized use.
What are your rights regarding our use of your personal data?
You can review, edit, or ask us to delete the personal data we hold. You will always have the right to opt out of receiving promotional emails and other types of marketing or sales communication from us. If you opt out, you will also have the ability to opt back in at a later date.
If you wish to stop receiving marketing emails from us, please click on the “Unsubscribe” link included at the bottom of an email. We respect your choice, and we will stop sending you promotional emails once you unsubscribe. It may take up to two weeks to process your request.
Will Gagosian discriminate against me if I make a request related to my personal information?
No, you have the right to nondiscriminatory treatment if you make a data-related request.
Will Gagosian contact me via email alerts, notices, and newsletters?
Gagosian sends marketing information only to those persons it believes it has a legitimate business interest to contact. This means, from time to time, we may send you email newsletters or other notifications. If you supply us with your postal address or telephone number you may receive periodic mailings or calls from us with information on new products and services or upcoming events.
If you wish to stop receiving some, or all, of our marketing communications, follow the instructions included in our emails, contact us at email@example.com, or call us toll-free at +1 866 467 8688 (service code: 829).
Interception of email
Gagosian may intercept email addressed to individuals within Gagosian. We do this to secure your data, to protect our security, to detect and prevent crime, to identify correct recipients of email, and to make sure email is dealt with during staff absence. Gagosian may reject, delay, or remove content from emails that may disrupt our systems or that pose security issues such as viruses.
We may also filter out emails that contain content considered offensive, unwanted, or spam. In certain circumstances, this may affect “innocent” emails. We do our best to reduce such occurrences.
Gagosian has developed and implemented strict policies and processes governing information technology and data-user behavior. These cover areas such as access control, authentication, audit, monitoring, alarms, data storage and backup, transmission standards, and environment integrity.
We use reasonable efforts to install and have appropriate security measures in place in our systems and facilities to protect against the loss, misuse, or alteration of information that we have collected from you.