Privacy Policy

This Privacy Policy (the "Privacy Policy") is designed to inform you as to how Eden Gallery and its affiliates (collectively, "Eden Gallery", "we", "us", or "our") handle your Personal Data in connection with your visit to our Websites, located at: https://www.galyosef-art.com/, your subscription to receive newsletters and marketing emails, your application for a job, your purchases or transactions with us, offering of services to you as well as any other interaction with us in which you provide your Personal Data to us, and to notify you about your privacy rights and how the law protects such rights.

In this Privacy Policy, the term "Personal Data" means any information about an individual from which that person can be identified.

Capitalized terms not otherwise defined under this Privacy Policy shall have the meaning ascribed to them in our Terms and Conditions.

To the extent that the European General Data Protection Regulation ("GDPR") or the United Kingdom General Data Protection Regulation ("UK GDPR") apply to Personal Data that we process in accordance with this Privacy Policy, we act as a "data controller" with respect to such processing.

We encourage you to read this Privacy Policy carefully and to regularly check this page to review any changes we might make to the terms of this Privacy Policy. This Privacy Policy supplements other policies we may provide as part of our interactions with you or policies you may have received from other controllers and is not intended to override such policies.

When you use our Websites or contact us through them, when you make purchases or enter into transactions with us, or when you otherwise interact with us, we may collect the following types of Personal Data on you:

  • Identity Data includes your first and last name.
  • Contact Data includes your email address, physical address, and telephone number.
  • Transaction Data includes details about your payments and means of payment (e.g., transferring bank account details or payment card details), purchases you have made with us (whether in-person, by phone, digitally, using cryptocurrency or through other means), and other details of products and services you have purchased from us.
  • Candidate Data (relevant to career applicants) includes curriculum vitae (CV) and the data contained therein, notes on meetings, standardized tests, reports, references, interviewer impressions and such industry standard data, as well as other data you share with us or that is made publicly available or available to us on social networks.
  • Marketing Data such as your preferences in receiving marketing from us, or information about your use of our services.
  • Usage Data includes information about how you use or interact with our Websites (such as, when you entered the relevant Website, how long you stayed on the Website and/or a specific page on the Website).
  • Technical Data includes information on your internet connection (such as your IP address and internet service provider name), on the device and software that you are using to access our Websites (e.g., your web browser type and computer operating system).
  • Additional Inquiry Data includes additional information that you may provide when you contact us through the Websites or when you sign up for any of our services.

We also collect, use and share aggregated data such as statistical data for any purpose. Such information does not reveal your identity and therefore is not considered Personal Data. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific feature available through the Website.

Protecting the Privacy Rights of Third Parties
If you provide us any Personal Data relating to others, you must make sure that you have permission to do so.

We use different methods to collect data from and about you including through:

  • Direct interactions. When you use the Websites, make a purchase or transaction with us, contact us through our Websites, or otherwise provide your Personal Data directly to us, you may be asked to provide us with your Identity Data, Contact Data, Transaction Data, Candidate Data and Marketing Data so that we can provide our services to you, process transactions, respond to your questions or requests or otherwise contact you. You may also provide Additional Inquiry Data in such instances.
  • Automated technologies or interactions. As you interact with our Website, we automatically collect the applicable Technical Data and Usage Data. We collect this data by using cookies, server logs, web beacons and other similar technologies.
  • Third parties or publicly available sources. We may receive Technical Data and Usage Data about you from third parties, such as the Usage Data and Technical Data that we receive from analytics providers, and from advertising and marketing partners.

You are not legally obligated to provide any Personal Data to us. Any Personal Data that you choose to provide to us, is provided at your own free will. However, without providing certain data, we may not be able to provide you with certain services available through the Website, or to respond to your inquiries. By using the Website or contacting us, you express your consent to this Privacy Policy and to the collection of Personal Data about you as detailed in this Privacy Policy.

We will commonly use your Personal Data in the following circumstances:

  • Where the processing is necessary in connection with the performance of any contract we have entered into with you or where it is necessary for taking steps at your request prior to entering a contract.
  • Where the processing is necessary for our legitimate interests (or those of a third party), and such legitimate interests are not overridden by your interests, fundamental rights, or freedoms. Legitimate interest means our interest in managing and conducting our business.
  • Where the processing is necessary for compliance with a legal or regulatory obligation.
  • Where you have provided your consent for such processing. Such consent can be revoked at any time.

Purposes for Which We Use Your Personal Data

Below is a description of the ways we use your Personal Data. To the extent that the GDPR and UK GDPR apply, we have mentioned the legal bases we rely on to use your Personal Data, and identified what our legitimate interests are where appropriate:

Purpose/Activity Type of data Lawful basis for processing
Provision of services ● Identity
● Contact
● Marketing
● Transaction 		● Performance of, or entry into, a contract with you
● Necessary for our legitimate interests (to grow our business and manage customer relationships)
Respond to your requests or questions
Manage our relationship with you, including by notifying you about changes to our terms of use or Privacy Policy		 ● Contact
● Additional Inquiry		 ● Performance of a contract with you
● Necessary for our legitimate interests (to grow our business and manage customer relationships)
● Necessary to comply with a legal obligation
Marketing purposes
Deliver relevant and personalized content to you, send service messages
Measure or understand the effectiveness of our marketing efforts		 ● Marketing
● Usage
● Technical
● Contact Data 		● Necessary for our legitimate interests (to grow our business, to inform our marketing strategy and to maintain and secure the services)
● If we have obtained your prior consent (where laws require consent for such communications)
To use data analytics to improve our Websites, products/services, marketing, customer relationships and experiences, including by personalizing and customizing our content ● Technical
● Usage		 Necessary for our legitimate interests (to keep our Websites updated and relevant, to develop our business and to inform our marketing strategy)
To administer and protect our business and our Websites (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) ● Identity
● Contact
● Technical		 Necessary for our legitimate interests (for running our business, network security, and to prevent fraud)
Manage transactions ● Identity
● Contact
● Transaction		 ● Performance of a contract with you
● Necessary for our legitimate interests (to process payments, deliver services and recover debts due to us)
Consider your application for career opportunities at Eden Gallery ● Identity
● Contact
● Candidate		 Necessary for our legitimate interests (recruitment of personnel and handling career applications) and to take steps prior to entering a contract with you
Required by subpoena, law, or other legal process
Necessary to assist law enforcement officials or government enforcement agencies
Necessary to investigate violations of or otherwise enforce our terms of use, to maintain security of the Website and prevent fraudulent or illegal activity
Necessary to protect us from legal action or claims from third parties, including you and/or other users
Necessary to protect the legal rights, personal/real property, or safety of our business, users, employees, and affiliates		 All relevant Personal Data Necessary for our legitimate interests (to defend and enforce our legal rights and to protect and ensure the continuous operation of our Websites)

Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data.

Promotional Offers

You may receive marketing communications from us if you have requested information from us and you have not opted out of receiving marketing communications.

You can change your contact preferences at any time through your account or by sending us an email with your request to: [email protected]. If you wish to stop receiving marketing communications from us, you may ask us to stop sending you marketing communications at any time by following the opt-out link on any marketing message sent to you or by contacting us.

Cookies and Other Tracking Technologies

Our Website uses cookies. A cookie is a small piece of data or a text file that is downloaded to your computer or mobile device when you access certain websites. Cookies may contain text that can be read by the web server that delivered the cookie to you. The text contained in the cookie generally consists of a sequence of letters and numbers that uniquely identifies your computer or mobile device; it may contain other information as well. We and third parties we partner with may store, and access some or all the cookies described below on your device.

Types of cookies:

  • Strictly Necessary Cookies. These cookies are necessary for proper functioning of the Websites, such as displaying content, logging in, validating your session, responding to your request for services, and other functions.
  • Performance Cookies. These cookies collect information about the use of the Websites, such as pages visited, traffic sources, users' interests, content management, and other Websites measurements.
  • Functional Cookies. These cookies enable the Websites to remember a user's choices – such as their language, user name, and other personal choices – while using Websites. They can also be used to deliver services, such as letting a user make a blog post, listen to audio, or watch videos on the Websites.
  • Media Cookies. These cookies can be used to improve the Websites's performance and provide special features and content. They can be placed by third parties who provide services to us or by our Eden Gallery.
  • Advertising or Targeting Cookies. These cookies are usually placed and used by advertising companies to develop a profile of your browsing interests and serve advertisements on other websites that are related to your interests.
  • Session Cookies. These cookies allow websites to link the actions of a user during a browser session. Session cookies permit users to be recognized as they navigate a website so that any item or page changes they make are remembered from page to page. Session cookies expire after a browser session; thus, they are not stored long term.
  • Persistent Cookies. These cookies are stored on a user's device in between browser sessions, which allows the user's preferences or actions across a site (or, in some cases, across different sites) to be remembered. Persistent cookies may be used for a variety of purposes, including remembering users' choices and preferences when using a website or to target advertising to them.

Most web browsers can be set to disable the use of cookies. However, if you disable cookies, you may not be able to access features on our Websites correctly or at all. Further details on how to disable cookies in different web browsers can be found here:

We may also use a technology called web beacons to collect general information about your use of our Website and your use of special promotions or newsletters. The information we collect by web beacons allows us to statistically monitor the number of people who open our emails. Web beacons also help us to understand the behavior of our customers, members, and visitors.

Third parties may use cookies, web beacons, and other storage technologies to collect or receive information from our Websites and elsewhere on the internet, and use that information to provide measurement services and target ads.

Among others, our Websites use the following tracking and analytics services:

Google Analytics. Our Websites may use Google Analytics (or similar service providers) to collect information about the use of our Websites. Google Analytics collects information from users such as age, gender, interests, demographics, how often they visit our Websites, what pages they visit, and what other websites they have used before coming to our Websites. We use the information we get from Google Analytics to analyze traffic, remarket our products and services to users, improve our marketing, advertising, and to improve our Websites. We have enabled Google Analytics advertising features such as remarketing with Google Analytics, Google Display Network Impression Reporting, and Google Analytics Demographics and Interest Reporting. For more information on how Google collects and processes your data, visit https://www.google.com/policies/privacy/partners/. Google provides website visitors the ability to prevent their data from being used by Google Analytics. For more information see: https://tools.google.com/dlpage/gaoptout.

Facebook Pixels and SDKs. We use Facebook pixels or SDKs, which are tools that provide help to website owners and publishers, developers, advertisers, business partners (and their customers) and others integrate, use and exchange information with Facebook for ad targeting. Facebook's ability to use and share information is governed by the Facebook Tools Terms, available at: https://www.facebook.com/legal/technology_terms/. You can prevent your data from being used by Facebook Pixels and SDKs by exercising your choice through these mechanisms: http://www.aboutads.info/choices.

Third-Party Links

The Websites may include links to third-party websites, plug-ins and applications. Clicking on those links or interacting with such content may allow your data to be shared with the relevant third-party. We do not control these third-party websites and are not responsible for their privacy statements; we therefore recommend that you read the privacy policy of every website you visit.

We share Personal Data with third party service providers that provide us services in connection with the purposes listed above.

For example, we may share your Identity Data and Contact Data with providers of shipment or payment services, and share your Identity Data, Contact Data, Marketing, Transaction, Usage Data and Technical Data with web analytics providers, email and marketing service providers and other vendors that assist us in maintaining the Websites (including hosting services). For additional information, please see the description above in the section titled Cookies and Other Tracking Technologies.

We may also share your Personal Data with legal and regulatory authorities to the extent required by applicable law; our professional advisors (e.g. lawyers, accountants) to the extent necessary for the provision of their services to us; and third parties to whom we may choose to sell, transfer, or merge our business (or parts thereof) or our assets, or parties whose business we wish to acquire.

In order to use the Websites, you must be at least 18 years of age, or older, if otherwise required by the laws of the country you reside in. Our Websites is not designed for use by anyone under the age of 18 and we do not knowingly collect Personal Data from children under the age of 18.

If you are a parent or legal guardian and have concerns about your child's privacy, or if you believe that your child may have provided us with their Personal Data, please contact us using the Contact Details below. When you approach us as a parent or legal guardian, we may request that you provide certain information needed to confirm your identity, in order to prevent malicious removal of account information.

We may transfer your Personal Data to countries outside of the country in which you reside (including outside of the European Economic Area (EEA) or the United Kingdom (UK)), that do not necessarily provide the same level of data protection as the country in which you reside and are not recognized by the European Commission and/or UK government as providing an adequate level of data protection.

Our international transfers of Personal Data are done for the performance of a contract or implementation of pre-contractual relations with you, based on your consent, or subject to safeguards that ensure the protection of your Personal Data, such as standard contractual clauses approved by the European Commission and/or the applicable UK authority (when the transfer is outside of the EEA or the UK).

We retain your Personal Data for as long as necessary to fulfill the purposes we collected it for, including for legal or reporting requirements.

In order to determine the appropriate retention period for Personal Data, we consider the following criteria: the volume, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of Personal Data, the purposes for which we collect and process Personal Data, the timeframe during which we may require such Personal Data in connection with potential litigation, and applicable legal requirements.

Certain privacy laws, including the GDPR and UK GDPR, provide users with rights related to their Personal Data. To the extent that such laws apply to your Personal Data, you have the following rights:

  • Request access. This means that you may receive a copy of the Personal Data we hold about you.
  • Request correction. This means that you may ask us to correct or complete inaccurate or incomplete data that we hold about you.
  • Request erasure. This means that you may ask us to delete or remove Personal Data that we hold about you. If we are unable to comply with such a request, we will notify you of the specific legal reasons for our decision.
  • Object to processing. This means that you may object to the processing of your Personal Data where it is used for direct marketing purposes, or where we are relying on a legitimate interest and you feel that such interest is overridden by your rights and freedoms.
  • Request restriction of processing. This means that you may ask us to suspend the processing of your Personal Data if you believe that such data is inaccurate, if our processing is unlawful or if we no longer need to process such data for a particular purpose, but you need us to continue to hold the data.
  • Data Portability. This means that you may request that we transfer your Personal Data to you or to a third party. This right applies where we have obtained and processed the data from you based on your consent or where we used the information to perform a contract with you.
  • Withdraw consent at any time. This means that you may withdraw your consent where we are processing your Personal Data based on your consent.

If you wish to exercise any of the rights set out above, please contact us.

You have the right to make a complaint at any time to data protection authorities. We would, however, appreciate the chance to address your concerns before you approach a data protection authority, so please contact us in the first instance.

What We May Need From You

When you approach us with a request to exercise one of your rights, we may request that you provide us with information needed to confirm your identity as a security measure to ensure that your Personal Data is not disclosed to any person who has no right to receive it.

Time Limit to Respond

We try to respond to all legitimate requests within one month or less, if required by law. Where it takes us more than one month to respond (for example, where your request is particularly complicated or where you have made a number of requests) we will notify you and keep you updated.

If you have a disability and would like to access this policy in an alternative format, please contact us via our Contact Details listed below.

If you have any questions or concerns, please contact us at:

Email: [email protected]
Postal address: 62–66 Bd Louis Blanc, 83990 Saint–Tropez, France

We reserve the right to change this Privacy Policy at any time. If we do so, we will post an updated version of this Privacy Policy so that our users and customers are always aware of what information we collect, use, and disclose. Your continued use of our Websites and services after any change to this Privacy Policy will constitute your acceptance of such change.

This version was last updated in December 2025.

CLOSE

Success!

Everything went smoothly.