Privacy Policy

Effective Date: 23.10.2026

1. Introduction

Welcome to the Galerie Sara Lily Perez website Sara Lily Perez. At Galerie Sara Lily Perez, we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you visit our Website or interact with our services. By using our Website, you consent to the practices described in this Privacy Policy.

2. Information We Collect

a. Personal Information: We may collect personal information such as your name, email address, phone number, and postal address when you voluntarily provide it to us when making a purchase, signing up for our newsletter, or contacting us through our Website.

b. Payment Information: When you make a purchase, we collect payment information, including credit card details, but this information is securely processed by our payment gateway provider, and we do not store it on our servers.

c. Browsing Information: We collect non-personal information such as your IP address, browser type, device type, and operating system when you visit our Website. This information helps us improve our Website and tailor our services to your needs.

3. How We Use Your Information

We may use your personal information for the following purposes:

a. Order Processing: To process and fulfill your orders, including communicating with you about your purchase and providing customer support.

b. Marketing and Communication: To send you promotional emails, newsletters, and updates about our products, services, and events, with your consent. You can opt out of these communications at any time.

c. Improving Our Services: To analyze and improve our Website, products, and services, including troubleshooting technical issues and enhancing the user experience.

d. Legal Obligations: To comply with legal obligations, including tax and regulatory requirements.

4. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. However, we may share your information with:

a. Service Providers: We may share your information with third-party service providers who assist us in operating our Website, processing payments, and providing other services. These providers are contractually obligated to safeguard your data.

b. Legal Requirements: We may disclose your information to comply with applicable laws, regulations, or legal processes.

5. Hosting, Cookies and Visitor Statistics

Hosting. Our Website is hosted by Vercel Inc. and its database is provided by Neon (Databricks, Inc.). Both store our data in data centres in Frankfurt, Germany. To deliver the pages to you, the hosting provider necessarily processes your IP address and the technical details of your request and keeps them in short-lived server logs for security and troubleshooting. Both providers are companies based in the USA and act on our behalf under data processing agreements (Art. 28 GDPR). Where data may be accessed from the USA, the transfer is based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework or on the EU standard contractual clauses (Art. 45 and 46 GDPR). The legal basis is our legitimate interest in a secure and reliable Website (Art. 6(1)(f) GDPR).

Cookies. We only use cookies that are needed for the Website to work: to keep you signed in to your account, to remember your shopping cart and to protect our forms against misuse. If you choose light or dark mode, your browser remembers that choice on your device. These are strictly necessary for services you request (Section 25(2) no. 2 TDDDG) and need no consent. We do not use advertising or tracking cookies.

Visitor statistics. To understand which pages are read and how visitors find and use our Website, we collect statistics on our own server. For each page view we record the page address, the time, how the visitor reached us (for example through a search engine, another website or a link with a campaign tag), the domain of the referring website, the country (derived by our hosting provider from the IP address), the type of device (computer, phone or tablet), how long the page was visible, and which links and buttons were clicked (their text and destination only, never anything you type). We do not store IP addresses, we do not set cookies for this purpose, and we do not store anything on your device. To tell visits apart, a code is formed from your IP address and browser details using a key that changes every day; the IP address itself is not stored, and visitors cannot be recognised from one day to the next. Browsers that send a "Do Not Track" or "Global Privacy Control" signal are not counted. The statistics are processed on the servers of our hosting providers in Frankfurt, Germany (Vercel and Neon), are not shared with anyone else, and are deleted after about 13 months. The legal basis is our legitimate interest in understanding and improving our Website (Art. 6(1)(f) GDPR). You have the right to object at any time (Art. 21 GDPR): turn on "Do Not Track" or "Global Privacy Control" in your browser, or contact us.

6. Data Security

We employ industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of data transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to access, rectify, or delete your personal information, as well as to object to or restrict its processing. To exercise these rights or inquire about your personal information, please contact us using the contact information provided in Section 9.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin.

8. Children's Privacy

Our Website is not intended for children under the age of 13, and we do not knowingly collect personal information from individuals under 13 years of age.

9. Contact Us

If you have questions or concerns about this Privacy Policy or the use of your personal information, please contact us at:

Galerie Sara Lily Perez Budapester Str. 48, 10787 Berlin 📧 moc.zerepylilaras@eirelag 📞 030 9700 5007

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will post the updated Privacy Policy on our Website with the effective date of the changes. Please review it periodically. By using our Website, you agree to the terms of this Privacy Policy as well as any subsequent updates.