Privacy

1 · Preamble

Protecting your personal data matters to us. We process your data exclusively in accordance with the applicable data protection provisions, in particular the General Data Protection Regulation (GDPR) and the relevant national data protection rules. In this privacy policy we tell you which personal data is collected when you use our website, the purposes for which it is processed, and the rights you have as a data subject.

Under Art. 4 (1) GDPR, personal data means any information relating to an identified or identifiable natural person. A natural person is regarded as identifiable if they can be identified directly or indirectly.

2 · Controller

The controller for the processing of personal data within the meaning of Art. 4 (7) GDPR is:

JMES WORLD GmbH
Rheinsberger Str. 76/77
10115 Berlin
Deutschland
info@jmesworld.com

3 · Processing when you visit the website

When you open our website, technically necessary data may be processed. This may include in particular:

• IP address of the accessing device
• date and time of access
• pages and content requested
• browser type and browser version
• operating system
• referrer URL
• technical connection and access data

Processing serves the technical provision, security and stability of our website as well as the detection and correction of technical faults.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and reliable provision of our online offering.

4 · Artist profiles and artworks

JMES WORLD presents artists and their artistic work on its website. Personal information may be published in this context, in particular:

• name or artist name
• information about the artistic practice
• biographical information
• artist portraits and other photographs
• information on individual artworks
• links to websites or social media profiles

Publication serves to present, communicate and promote the artists and their work.

Depending on the individual case, the processing and publication of personal data is based in particular on consent pursuant to Art. 6 (1) (a) GDPR, on a contractual basis pursuant to Art. 6 (1) (b) GDPR or, where the statutory conditions are met, on a legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Consent once given may be withdrawn at any time with effect for the future.

5 · Your rights as a data subject

Subject to the statutory conditions, you have in particular the following rights:

• access to the data stored about you pursuant to Art. 15 GDPR
• rectification of inaccurate or incomplete data pursuant to Art. 16 GDPR
• erasure of your personal data pursuant to Art. 17 GDPR
• restriction of processing pursuant to Art. 18 GDPR
• data portability pursuant to Art. 20 GDPR

Where we process personal data on the basis of Art. 6 (1) (f) GDPR, you may object to that processing at any time on grounds relating to your particular situation, pursuant to Art. 21 GDPR. Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise your rights you can contact us at any time using the contact details given above. You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

6 · Contacting us

If you contact us by email, we process the personal data you send us, in particular your email address and the information you provide. Processing serves to handle your enquiry and, where applicable, to carry out pre-contractual or contractual measures.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures. In other cases processing is based on our legitimate interest in handling enquiries pursuant to Art. 6 (1) (f) GDPR.

The data is deleted once your enquiry has been conclusively dealt with, provided that no statutory retention obligations or other legitimate grounds for further storage apply.

7 · Hosting by Vercel

Our website is hosted and technically provided via Vercel. In the context of hosting, technical data such as IP addresses as well as access and connection data may be processed.

Where Vercel processes personal data on our behalf, this is done on the basis of the applicable data protection agreements. The legal basis for the use of hosting is Art. 6 (1) (f) GDPR. Further information can be found in Vercel's privacy policy.

8 · Link to Instagram

Our website contains a link to our Instagram profile. Merely visiting our website does not, through an ordinary external link, establish a connection to Instagram. Only when you click the link do you leave our website and reach Instagram's offering.

The privacy provisions of the respective platform operator apply to any subsequent processing by Instagram. Should Instagram content be embedded directly into our website in future, this privacy policy will be amended accordingly.

9 · Cookies and similar technologies

This website sets no cookies and uses no comparable technologies such as local storage, tracking pixels or fingerprinting. There is no audience measurement, no analysis of usage behaviour and no creation of user profiles. Consent under § 25 TDDDG is therefore not required, and no cookie banner is displayed.

Should technologies requiring consent be used in future, we will obtain your consent in advance and amend this privacy policy.

10 · Recipients of personal data

Personal data is passed on to third parties only where this is necessary to fulfil the purposes stated or where there is a legal basis for doing so. Recipients may include in particular:

• hosting and IT service providers
• technical service providers
• providers of integrated services
• further service providers whose support is necessary for the operation of our online offering

Where service providers process personal data on our behalf, we conclude corresponding data processing agreements pursuant to Art. 28 GDPR where legally required.

11 · Storage period

As a rule we store personal data only for as long as is necessary for the respective purpose. Storage beyond that period may take place where statutory retention obligations exist or where the data is needed to assert, exercise or defend legal claims.

Once the respective storage purpose ceases to apply, the data is deleted, provided that no legal or other permissible grounds for further storage exist.

12 · Changes to this privacy policy

We reserve the right to amend this privacy policy if our website, the technical services we use or the legal framework change. The current version published on our website applies in each case.