Privacy Policy

This policy explains how personal data are processed when you visit the Salon Palermo website, subscribe to the newsletter or write to the addresses given on the website. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).

Salon Palermo is a RizzutoGallery project. You can browse the website without giving us any personal data. We use no advertising tools and no social media plug-ins; statistics cookies are used only if you accept them.

1. Data controller

The data controller is Oliveri Eva, owner of RizzutoGallery and of the Salon Palermo project, Via Maletto 5, 90133 Palermo, Italy, VAT no. IT06769750826. Email: info@rizzutogallery.com · Telephone: +39 091 6496654.

The gallery's Düsseldorf space: Ackerstraße 34, 40233 Düsseldorf, Germany · dus@rizzutogallery.com.

No Data Protection Officer has been appointed, as this is not required under Article 37 GDPR.

2. What data we process and why

• Browsing data. When you open a page, the server receives your IP address, date and time, the page requested, browser type and referring page. Purpose: delivering the website and keeping it secure. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: server logs are deleted after 14 days, unless needed to investigate a specific security incident.
• Newsletter. First name, last name, email address, language and the record of your consent (date, time, IP address of the request and of the confirmation, page of the form, version of the accepted wording). You subscribe by ticking a box that is never pre-ticked and by confirming through the link we email you (double opt-in). Purpose: sending you news about Salon Palermo and RizzutoGallery's programme a few times a year. Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 130 Italian Privacy Code), which you can withdraw at any time with the link in every email or by writing to us. Retention: until you unsubscribe; proof of consent and of unsubscription for 5 years. Unconfirmed requests are not recorded: the link expires after 48 hours.
• Emails you send us. If you write to the addresses on the website, we process the data in your message to reply. Legal basis: pre-contractual steps at your request or our legitimate interest in replying (Art. 6(1)(b) and (f) GDPR). Retention: 24 months after the last contact, unless the law requires longer (for example for accounting).
• Statistics (Google Analytics 4), only with your consent. If you click «Accept» in the cookie banner, Google Analytics measures in aggregate form how the website is used (pages viewed, approximate location, device, duration). Google Analytics 4 does not store IP addresses; advertising features and Google signals are switched off. Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 122 Italian Privacy Code). Retention: 2 months in Google Analytics. Details in our Cookie Policy.

Please do not send us special categories of data (for example health data): they are not needed for any of these purposes.

3. Who receives your data

Only the gallery's directors and authorised staff. We also use these providers, appointed as processors under Article 28 GDPR:

• the hosting provider of the website and its database;
• the email provider used to send the newsletter confirmation email;
• Voxmail, the platform used to send the newsletter and manage subscriptions;
• Google Ireland Limited (Google Analytics 4), only if you accept statistics cookies.

We do not sell your data and do not share it for third-party marketing.

4. Transfers outside the European Economic Area

Google may process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023); Standard Contractual Clauses also apply. Any other transfer outside the EEA would take place only with the safeguards of Articles 44–49 GDPR.

5. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing (Articles 7 and 15–22 GDPR). Write to info@rizzutogallery.com: it is free, and we reply within one month.

You may also lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the country where you live or work.

6. Minors

The website is addressed to adults. The newsletter is reserved for people aged at least 16.

7. Changes

We may update this policy; the date at the bottom of the page shows the version in force.