Confidentiality

in parvo collects the minimum amount of data possible, and only to connect visitors and artists. This site uses no advertising, tracking cookies, or profiling.

Data Controller

Thomas Perrin, site publisher — contact@inparvo.art

Your Messages to Artists

Data: name, e-mail, delivery country, message, number of copies.
Why: to transmit your request to the relevant artist, at your request (pre-contractual measures), and to acknowledge receipt.
Duration: deleted from the gallery after 30 days; only an anonymous trace (date, artwork, follow-up) is kept for tracking availability.
Recipient: the artist, who receives your message by e-mail and becomes solely responsible for the use they make of it to respond to you and, if applicable, to conclude the sale.

Artist Applications

Data: civil and artist identity, e-mail, phone number (never published), city, presentation, links, possibly SIRET, artist photo and artwork photos.
Why: to review the application (pre-contractual measures).
Duration: an unsuccessful application is deleted, with its photos, one year after the response.

Featured Artists

Data: those from the application, artwork availability, modification requests, and the electronic signature of the agreement (name entered, date, text version, IP address, browser).
Why: to execute the distribution agreement (present the artworks, transmit requests, send reminders) and to be able to prove the signature (legitimate interest).
Duration: during the collaboration; the proof of signature is kept five years after its end. Public information is removed from the site within 30 days after the end of the collaboration.

Site Operation and Security

Data: action log (logins, modifications), list of e-mails sent (recipient and subject), technical data processed by anti-bot protection (IP address, browser).
Why: site security and proof of operations (legitimate interest).
Duration: 12 months for the log and the list of e-mails.

Backups

The website's database is backed up daily: daily backups are kept for 30 days, and a monthly backup is kept for 12 months. Therefore, data deleted from the site may still exist in a backup for up to 12 months before being permanently removed.

Who has access to your data

The website publisher, and the relevant artist for messages intended for them. Data is never sold or transferred. The website relies on technical subcontractors:

Cloudflare (hosting, database, photo storage, anti-bot protection); its servers may be located outside the European Union, notably in the United States, where Cloudflare is certified under the EU–US Data Privacy Framework;
Brevo (sending automated emails), whose data is hosted within the European Union;
OVH (gallery messaging), in France.

Cookies

Only one cookie is placed, and solely for artists and the team who log into their space: strictly necessary, it maintains the connection and therefore does not require consent. No cookies are placed for visitors.

Your rights

You can request access to your data, its correction, erasure, restriction of processing, or portability, and object to processing based on legitimate interests, by writing to contact@inparvo.art. A response will be provided within one month. If you believe your rights are not being respected, you can file a complaint with the CNIL.