Privacy Policy

Marek & Sons Gallery is committed to protecting the privacy of its website users, in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and the European Artificial Intelligence Act (AI Act — EU 2024/1689).

1. Data Controller

SAS MAREK AND SONS

12 rue de la Grange Batelière, 75009 Paris, France
DPO Contact: mielniczuk@me.com

2. Data Collected

We only collect data strictly necessary for our services:

3. Purposes and Legal Bases

4. Artificial Intelligence — AI Act

In accordance with the European AI Act Regulation (2024/1689), we inform you that:

Certain services or features offered may integrate artificial intelligence systems;

These systems may be used in particular for process automation, decision support, content generation, data analysis, or improving user experience;

Where required by regulation, you will be clearly informed of interaction with an artificial intelligence system;

Processing carried out using these systems respects the principles of transparency, security, human oversight, and applicable personal data protection;

No decision producing legal effects or similarly significant effects concerning you is taken solely on the basis of automated processing without human intervention, unless otherwise provided by law or with your explicit consent;

You may contact us for further information on the use of these systems and the safeguards implemented.

5. Retention Period

Personal data is retained only for the duration necessary for the purposes for which it was collected, in accordance with applicable legal and regulatory requirements.

As an indication:

1. contact data is retained for the duration of the contractual relationship or exchanges, then archived for the applicable legal period;
2. billing and accounting data is retained for ten (10) years in accordance with French legal obligations;
3. data related to cookies and trackers is retained in accordance with CNIL recommendations;
4. connection logs and technical data may be retained for security and fraud prevention purposes for a limited and proportionate period.

At the end of the applicable periods, data is securely deleted or anonymized.

6. Data Sharing

We never sell or rent your personal data. It may only be shared with:

1. our technical service providers and subcontractors acting on our behalf (hosting, maintenance, analysis, security, payment, messaging, artificial intelligence, technical support), strictly within the limits necessary for their tasks;
2. administrative or judicial authorities when required by law;
3. our contractual partners when necessary for the performance of a service requested by the user.

All such recipients are subject to confidentiality and security obligations in accordance with the GDPR.

No transfer of data outside the European Union is carried out without appropriate safeguards in accordance with Articles 44 et seq. of the GDPR, in particular via an adequacy decision by the European Commission or the signing of standard contractual clauses.

7. Your Rights (GDPR, Art. 15 to 22)

In accordance with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act, you have the following rights:

1. right of access to your personal data;
2. right to rectification of inaccurate data;
3. right to erasure ("right to be forgotten");
4. right to restriction of processing;
5. right to object to processing of your data;
6. right to data portability;
7. right to withdraw your consent at any time where processing is based on consent;
8. right to define directives regarding the fate of your data after your death.

To exercise these rights, you can contact us at the following address:

mielniczuk@me.com

You will receive a response within a maximum of one (1) month from receipt of your request, subject to verification of your identity if necessary.

If your complaint is not resolved, you may contact the CNIL.

8. Cookies and Trackers

This site uses cookies and other trackers in accordance with Article 82 of the French Data Protection Act and CNIL recommendations.

Cookies strictly necessary for the functioning of the site do not require your consent. Other cookies (audience measurement, personalization, advertising, social networks, etc.) are only placed after obtaining your explicit consent.

You can manage your preferences at any time via the 🍪 icon accessible at the bottom left of each page.

For more information, please consult our cookie policy or our terms and conditions of use.

9. Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risks, in accordance with Article 32 of the GDPR.

These measures include in particular:

1. encryption of exchanges via the HTTPS protocol;
2. restriction of access to authorized persons only;
3. authentication and secure access management;
4. logging of events and sensitive accesses;
5. regular backups;
6. security updates and protection mechanisms against unauthorized access, loss, destruction, or disclosure of data.

Despite our efforts, no electronic transmission or storage system can be guaranteed to be completely secure.

10. Updates

This privacy policy may be modified at any time to reflect legal, regulatory, technical, or functional changes.

The date of the last update appears at the bottom of the document.

We invite you to regularly consult this page to stay informed of the current version. Continued use of the site after the publication of modifications constitutes acceptance of the updated policy.

Last updated: April 2026.