Privacy Notice

1. Controller

CH Real Estate SRL

Chaussée de Waterloo 690

BE1029.277.589

Email: charly@vue-gallery.com

2. Categories of Personal Data

- Identification and contact data (name, address, email, phone)

- Order and transaction data (purchases of artworks/books, payment confirmations)

- Delivery data (delivery address, courier tracking information)

- Newsletter data (email address, optional name, subscription preferences, interaction statistics)

- Website usage and analytics data (via Squarespace Analytics)

- Server logs (IP address, browser type, access times, pages visited)

- CCTV footage (only when the gallery is closed)

3. Purposes and Legal Bases

- Sales and order fulfilment: performance of a contract (Art. 6(1)(b) GDPR)

- Invoicing and accounting: compliance with legal obligations (Art. 6(1)(c) GDPR)

- Newsletter and marketing communications: consent (Art. 6(1)(a) GDPR)

- Website analytics and improvement: legitimate interest in understanding and improving our services (Art. 6(1)(f) GDPR)

- IT security, fraud prevention and access logs: legitimate interest (Art. 6(1)(f) GDPR)

- CCTV security outside opening hours: legitimate interest in protecting artworks, premises and a

4. CCTV

CCTV cameras operate only when the gallery is closed to the public.

Images are recorded for security and intrusion detection, without audio or facial recognition.

Recordings are kept for a limited period (typically 7–30 days) unless an incident requires longer retention.

5. Recipients and Processors

Personal data may be shared with:

- Squarespace (website hosting and analytics)

- Squarespace Payments / Stripe (payment processing)

- Mailchimp (newsletter management)

- OneTrust (cookie consent management)

- Logistics providers (for delivery of artworks/books)

- Verisure (CCTV logs)

These entities act as controllers, processors or sub-processors and when they are processors or sub-processors, process data on our documented instructions.

6. International Transfers

Some processors (such as Stripe and Mailchimp) are located outside the European Economic Area, in particular in the United States.

Where this is the case, we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, and additional technical and organizational measures where deemed necessary after having considered the legal framework for the protection of personal data in the countries of the exporters.

7. Retention Periods

- Transaction and invoicing data: kept for the duration required by Belgian accounting and tax law (normally 7–10 years)

- Newsletter data: kept until you unsubscribe or withdraw consent

- Website analytics and logs: kept for limited periods according to technical needs and the configuration of Squarespace

- CCTV recordings: typically 7–30 days, unless an incident requires longer retention

8. Your Rights

You have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability and to object to processing in certain cases.

When processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Requests may be sent to: charly@vue.com. We will honour those requests as soon as practically possible.

9. Complaints

You have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit) if you believe that your rights have been infringed or if you are dissatisfied by the way we process your personal data.