Privacy Policy

Applicable Legislation

This Policy incorporates the legal requirements established by the current regulations:

• The GDPR (Regulation (EU) 2016/679 of April 26, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data), the European regulation that unifies data processing rules across all EU countries.

• The LOPD (Organic Law 3/2018 of December 5, on Personal Data Protection, and Royal Decree 1720/2007 of December 21, the implementing regulation of the LOPD), applicable in everything that does not contradict the European data protection regulations.

• The LSSI (Law 34/2002 of July 11, on Information Society Services and Electronic Commerce), which regulates economic transactions performed through electronic means.

We don’t want to bore you, so if you prefer to jump directly to the sections that interest you most, here is the content index.

1. Who are we?
2. What principles guide how we process your personal data?
3. When do we collect personal data and what do we use it for?
4. How long do we keep your data?
5. Can I unsubscribe?
6. Who do we share your data with?
7. We won’t send you SPAM!
8. Your data is protected
9. Right to file a complaint with the Supervisory Authority
10. User data visible on the website

1. Who are we?

Let’s start with the basics: who are you providing your data to? Behind the SAISHO ART brand and the website www.saisho.com is the commercial entity WEARTIFY SL:

• Our Tax ID: B87588406. The company is registered at the Madrid Mercantile Registry: Volume 31932, Page 172, Sheet M-62782, Entry 251.

• You can find us at C/ Dulcinea 47, 28020, Madrid.

• You can write to us at soycoleccionita@saishoart.com

• Our activity: we promote the artistic production published on our platform among creators, rights holders, galleries, and individuals interested in art. We also carry out various online and offline initiatives related to the dissemination of Art in general.

2. What principles guide how we process your personal data?

As part of our firm commitment to keep your information safe, and as required by European regulations, we follow these rules in any processing carried out with the data you provide:

• Principle of lawfulness, fairness, and transparency. We will only process your data if you have given us your consent, and we will inform you beforehand — and whenever you request — about how and why we will use your information.

• Principle of data minimization. We will only ask you for the data strictly necessary to provide you with the service you request or to address any other kind of request you make.

• Principle of accuracy. We adopt all reasonable measures to delete or rectify without delay any personal data that is inaccurate.

• Principle of storage limitation. We will keep your data only as long as necessary to fulfill the purpose for which it was collected, or for the period required to comply with our legal, accounting, and tax obligations. We also periodically review our databases to delete users who have been inactive for a considerable period of time.

• Principle of integrity and confidentiality. We take the necessary technical and organizational measures to guarantee adequate security of your personal data, including protection against unauthorized or unlawful processing, and against accidental loss, destruction, or damage.

• Principle of withdrawal. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out based on your consent prior to its withdrawal.

3. How do we collect personal data and what do we use it for?

We collect your data in 4 different ways, each for a specific purpose, and always with your agreement to provide that data:

1. Through the contact form available on the website. We collect your name, email, and request, and we use this information to respond to your inquiry.

2. Through the artist registration form on our platform. We collect your identification, contact information, banking details, your CV, and your social media profiles. We use this data to promote your artistic production on our platform and through our social networks (current and future). We also need this information to manage the sale of your artworks.

3. Through the collector registration form on our platform. We collect your identification and contact data. We use this data to provide you with the exclusive services and functionalities of our platform for registered users, as well as to manage your purchases.

4. Through the Newsletter subscription form. We collect your name and email, and we use this data to send you commercial electronic communications (via email) such as newsletters, promotions, exclusive resources, and similar communications about our products and services, as well as invitations to events organized by the company. We promise not to bother you!

There are additional purposes for which we process your personal data:

• To ensure compliance with the terms of use and applicable law. This may include developing tools and algorithms that help this website guarantee the confidentiality of collected personal data.

• To support and improve the services offered on this website.

• We also collect non-identifying data obtained through certain cookies that are downloaded to the user's device while browsing this website, as detailed in our Cookies Policy.

• To manage our social networks. The processing of data belonging to those who follow our official social media profiles will be governed by this section, as well as by the terms of use, privacy policies, and access rules of the corresponding social network, and previously accepted by the user. We will process your data to properly manage our presence on each social network, inform about our activities, products, or services, and for any other purpose permitted by the social networks’ policies. Under no circumstances will we use followers' social media profiles to send individual advertising.

4. How long do we keep your data?

As a general principle, the information you provide will be stored only as long as necessary to fulfill the purpose for which you provided your data. Specifically:

1. The data provided through the contact form will be kept until your request has been fully addressed. Once your inquiry is resolved, we will not contact you again unless you have explicitly authorized us to send you newsletters or other commercial communications.

2. Your data as an artist registered on the platform will be kept for as long as necessary to promote your artwork on SAISHO, according to the Artist Terms of Use, as well as to manage your sales and fulfill our legal, accounting, and tax obligations.

3. Your data as a collector registered on the platform will be kept while you remain active on the platform, as long as you do not request to unsubscribe, and—if you make purchases—for the years required to comply with legal obligations. We will periodically review our database of registered collectors and delete records of users who have not accessed the platform for a considerable time. Don’t worry, we will notify you beforehand!

4. Your data as a Newsletter subscriber will be kept until you request to unsubscribe from commercial communications. However, we will periodically review our subscriber database and delete users who have not opened our messages for a considerable period of time.

5. Can I unsubscribe?

Of course! You can unsubscribe from our services whenever you wish. And not only that — you can exercise any of the rights that the law grants you regarding your personal data. Here they are:

• Principle of lawfulness, fairness, and transparency. We will only process your data if you have given us your consent, and we will inform you beforehand — and whenever you request — about how and why we will use your information.

• Principle of data minimization. We will only ask you for the data strictly necessary to provide you with the service you request or to address any other kind of request you make.

• Principle of accuracy. We adopt all reasonable measures to delete or rectify without delay any personal data that is inaccurate.

• Principle of storage limitation. We will keep your data only as long as necessary to fulfill the purpose for which it was collected, or for the period required to comply with our legal, accounting, and tax obligations. We also periodically review our databases to delete users who have been inactive for a considerable period of time.

• Principle of integrity and confidentiality. We take the necessary technical and organizational measures to guarantee adequate security of your personal data, including protection against unauthorized or unlawful processing, and against accidental loss, destruction, or damage.

• Principle of withdrawal. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out based on your consent prior to its withdrawal.

You can find more detailed information about your rights regarding the processing of your personal data on the official EU website.

You can exercise these rights by writing to us via email at soyartista@saishoart.com or soycoleccionista@saishoart.com, indicating the subject “Data Protection” and attaching your identification document (we need to confirm it’s really you). If you are a subscriber to our electronic communications, you can also unsubscribe via the link included in the emails you receive.

In any case, we commit to replying to your request within a maximum period of 1 month.

5. Can I unsubscribe?

Of course! You can unsubscribe from our services whenever you wish. And not only that — you can exercise any of the rights that the law grants you regarding your personal data. Here they are:

• Principle of lawfulness, fairness, and transparency. We will only process your data if you have given us your consent, and we will inform you beforehand — and whenever you request — about how and why we will use your information.

• Principle of data minimization. We will only ask you for the data strictly necessary to provide you with the service you request or to address any other kind of request you make.

• Principle of accuracy. We adopt all reasonable measures to delete or rectify without delay any personal data that is inaccurate.

• Principle of storage limitation. We will keep your data only as long as necessary to fulfill the purpose for which it was collected, or for the period required to comply with our legal, accounting, and tax obligations. We also periodically review our databases to delete users who have been inactive for a considerable period of time.

• Principle of integrity and confidentiality. We take the necessary technical and organizational measures to guarantee adequate security of your personal data, including protection against unauthorized or unlawful processing, and against accidental loss, destruction, or damage.

• Principle of withdrawal. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out based on your consent prior to its withdrawal.

You can find more detailed information about your rights regarding the processing of your personal data on the official EU website.

You can exercise these rights by writing to us via email at soyartista@saishoart.com or soycoleccionista@saishoart.com, indicating the subject “Data Protection” and attaching your identification document (we need to confirm it’s really you). If you are a subscriber to our electronic communications, you can also unsubscribe via the link included in the emails you receive.

In any case, we commit to replying to your request within a maximum period of 1 month.

6. Who do we share your data with?

To improve your user experience and offer you quality service, we sometimes use third-party services and applications. In any case, we are very strict in selecting these providers and take all possible measures to ensure that these third parties also comply with current personal data protection regulations.

We currently use the following external services, which may have access to your data:

• Server and web hosting provider: we use the services of the Spanish company Webempresa SL, you can consult their privacy policy here. On their servers, the data you provide through our web forms is stored, as well as data related to transactions carried out on the platform.

• Cloud file storage provider: we use Google Drive, owned by the US company Google LLC (“Google”), a Delaware corporation with its main office at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043. You can consult the service conditions here. In addition, Google adheres to the EU-US Privacy Shield, whose information is available here, approved by the European Data Protection Board, which ensures compliance with European data protection requirements. Here we store data related to registered artists, transactions (purchases and sales), and marketing actions in which you have expressly agreed to participate.

• Email marketing service provider: we use the services of Mailchimp, owned by the US company The Rocket Science Group LLC, headquartered at 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308. You can consult their Privacy Policy here. Additionally, Mailchimp adheres to the EU-US Privacy Shield, whose information is available here, approved by the European Data Protection Board, ensuring compliance with European data protection regulations.

• Advisory and accounting services: we currently work with ALFIL GESTIÓN ASESORES DE EMPRESAS S.L., located at Calle Goya nº 51, Madrid. We communicate only the essential data they need to perform the actions required to ensure we comply with our accounting and tax obligations (mainly data relating to purchases and sales made on our website). These services are carried out in strict compliance with data protection laws and under a confidentiality agreement signed with us for this purpose.

• Web analytics and performance provider: we use Google Analytics, owned by the US company Google. You can consult its Privacy Policy here. Additionally, Google adheres to the EU-US Privacy Shield, whose information is available hereAs mentioned, Google is part of the EU-US Privacy Shield, which guarantees compliance with European data protection regulations. This service installs a number of files known as “cookies” in your browser that record,

We reiterate that we only transfer data to these companies so they can provide the services we need to offer you an adequate user experience. We will never sell your data to third parties.

Website browsing

When browsing www.saishoart.com, even without registering, non-identifying data may be collected, which may include IP addresses, approximate geographical location, usage logs, and other data that cannot be used to identify the user personally. Non-identifying data also includes information related to your browsing habits obtained through third-party services. This website uses the following third-party analytics services:

• Google Analytics

• Facebook Analytics

We use this information to analyze trends, administer the site, track user movements around the site, and gather demographic information about our overall user base.

Additionally, and only if you have authorized marketing cookies, this anonymous information about your use of our website may be transferred to remarketing service providers — specifically Google Adwords and Facebook Ads.

7. We won’t send you SPAM!

We will never send you commercial electronic communications unless you have previously requested them (by ticking the appropriate box in our forms or subscribing to our Newsletter), as required by the Law on Information Society Services and Electronic Commerce.

And if you have agreed to receive communications, we promise not to overwhelm you — we’ll only send you genuinely interesting content! Believe us, this is a very serious promise 🙂

8. Your data is protected

To protect your personal information, we take reasonable precautions and follow best practices to ensure adequate security of your personal data, including measures to prevent unauthorized or unlawful processing and to prevent accidental loss, destruction, or damage.

If you choose a direct payment gateway to complete your purchase, Saisho Art stores your credit card data. This information is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your transaction data is stored only as long as necessary to complete the purchase transaction. Once completed, your transaction information is deleted.

All direct payment gateways comply with the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint initiative of brands such as Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card information.

9. Right to file a complaint with the Supervisory Authority

If you deem it appropriate, you may file a complaint before the responsible supervisory authority. You can find more information about your rights on the website of the Spanish Data Protection Agency

10. User-visible data on the website

Any registered user may appear — via username, avatar, nickname... — in the Saisho collectors list or any other subdomain of the site, while all other personal or financial information remains protected. Visible information includes any data related to artists and artworks you have shown interest in (by adding works to your collection, purchasing pieces, visiting artist profiles, or any navigation action that Saisho considers relevant).