Legal

Privacy

We collect only what it takes to sell you a work and deliver it. Nothing is sold on, and nobody is followed around the web.

Who processes your data

The data controller is Spletna Galerija, reachable at hello@spletna-galerija.si. Write to that address with any privacy question and to exercise the rights described below.

What we collect and why

On registration, your name, email address and a password we store only as a hash; if you sign in with Google, Google passes us your name and email address. On a purchase, your name, delivery address and email address, so the artist can ship the work and we can invoice. We never see card details: card payments are processed by Stripe, instalments by Leanpay. On an enquiry, your email address and message, which we pass to the artist. Artists additionally entrust us with what we need for payouts and invoices. The server briefly logs IP addresses to detect abuse.

Cookies

We use a single cookie, the one that keeps you signed in. There are no tracking or advertising cookies and no third-party analytics. The photograph of your room that you place a work into stays in your browser; we never receive it.

Who we share it with

The artist whose work you buy receives your name and delivery address, because the artist is the seller. Payments are processed by Stripe and Leanpay, email is sent through Resend, Google is involved when you sign in with Google, and the servers are hosted by Hetzner in the European Union. All of them are bound by contract to protect the data. We do not sell data and do not hand it over for advertising.

How long we keep it

Your account and what is in it stay until you delete it. Order and invoice data is kept for ten years, as tax law requires. Enquiries are kept for two years, server logs for a few weeks.

Your rights

At any time you may ask to see your data, have it corrected, deleted or transferred, and object to its processing. Write to hello@spletna-galerija.si and we answer within a month. If you believe we process data unlawfully, you may complain to the Information Commissioner of the Republic of Slovenia or to the supervisory authority in your own country.

Last updated: September 2026