Art Inn Dalaran. Privacy policy

Privacy policy

We are committed to protecting your personal data and complying with the EU General Data Protection Regulation (GDPR). This Privacy Policy explains what information we collect when you use our website (an EU-based e-commerce site for selling paintings on the SendPulse platform), why we collect it, and how we process and share it. It also describes your rights under GDPR.

1) Information We Collect
We collect only the personal information necessary to process your orders.

This includes:
Name
Email address
Phone number
Delivery address

We collect this data only when you place an order. We do not collect personal data through any other forms (for example, we have no newsletter or subscription forms).

Under GDPR, this information is considered Personal Data (information that identifies you, such as your name and email) sendpulse.com.

2) How We Use Your Information
We use your personal data solely to fulfil your order and provide customer service. Specifically, we use your data to:

Process and ship your order. We share your name and address with our delivery partner to ensure your paintings are delivered to you.
Contact you about your order. We may email or call you to confirm details or update you on shipping
Fulfil legal obligations. We keep basic order records as required by law (for example, tax or accounting purposes).

3) Legal Basis for Processing
Because we are an EU-based business, we follow GDPR rules. The legal basis for processing your data is the contract we have with you when you place an order. In other words, processing your name, address, etc. is necessary for us to fulfil our contract to sell and deliver paintings to you europa.eu. We do not rely on marketing consent, since we do not send promotional emails or newsletters.

4) Data Storage and Security
Your data is stored securely in our SendPulse CRM system. SendPulse acts as our data processor, meaning they store and process data on our behalf under strict security and confidentiality rules europa.eu. We have a Data Processing Agreement with SendPulse to ensure GDPR compliance.

Only authorised personnel who need the information to fulfil your order have access to your data (for example, order fulfilment staff or the delivery service). We take reasonable technical and organisational measures to protect your data from unauthorised access or loss.

We retain your personal data only as long as necessary to complete your order and meet legal obligations. Once your order is complete and any legal retention period has passed, we will delete or anonymise your data.

5) Cookies and Analytics
Our website uses a small number of cookies to improve functionality and analyse usage:

Functional cookies: These are essential for basic site functions (for example, keeping items in your cart or maintaining a secure session). They do not track you for marketing purposes

Analytical cookies: We use Google Analytics to understand how visitors use our site (pageviews, browsing behaviour, etc.). Google Analytics uses first-party cookies to collect anonymous usage data support.google.com. This helps us improve the website experience. You can opt out of Google Analytics tracking at any time (for example, by using your browser settings or Google’s opt-out add-on).

We do not use advertising cookies or share your information with social media or advertising partners. All cookies and tracking are either strictly necessary or strictly for site analytics.

6) Data Sharing
We do not sell or rent your personal data. The only parties with whom we share your information are:

SendPulse: as described above, to store and process data on our behalf.
Delivery service: we share your name and shipping address with the carrier only to deliver your order.
Legal authorities: we may disclose your information if required by law (for example, to comply with a subpoena or report fraud).

In all cases, third parties are contractually obligated to protect your data and use it only for the stated purposes.

7) Your Rights
Under the GDPR, you have several rights regarding your personal data. You can exercise these rights by contacting us at any time. Specifically, you have the right to:

Access: You can request a copy of the personal data we hold about you, at no cost europa.eu.
Rectification: If any of your personal data is inaccurate or incomplete, you can ask us to correct or update it europa.eu.
Erasure (“Right to be Forgotten”): In certain circumstances, you can request that we delete your personal data (for example, if it is no longer needed to fulfil the order) europa.eu. We will comply unless we have a legal obligation to retain it (such as tax records).
Restriction or Object: You may ask us to restrict processing of your data or object to its processing if you believe it is unlawful or unnecessary.
Portability: If processing is based on your consent or a contract, you can request to receive your data in a common, machine-readable format, or have it transferred to another controller europa.eu.
Withdraw Consent: Where processing is based on consent (e.g., cookies), you can withdraw consent at any time. (Note: Withdrawal of consent does not affect data processed before withdrawal.)

All these rights are provided under GDPR, we will respond to any request promptly (generally within one month as required by law) europa.eu.

8) Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us. (For example, you can email us at the address provided on our website or use our contact form.) We will handle your request in accordance with GDPR guidelines.

9) Policy Updates
We may update this Privacy Policy periodically (for example, if we add new services). When we do, we will revise the “Last updated” date and post the new policy on this page. We recommend reviewing this policy from time to time.

By using our website and placing an order, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. We are committed to transparency about our data practices and will always process your data fairly and in accordance with GDPR.

Last updated: 02.01.2026