twitter

Privacy Policy

Who are we?

Wartski Ltd (UK company number 1416179) of 14 Grafton Street, London, W1S 4DE is the sole Data Controller for the purposes of EU Data Protection Legislation.


How we collect your personal data?

The majority of personal data we store and process comes directly from our customers, such as through email correspondence, online requests, paper correspondence, telephone conversations and face to face interactions. For example:

  • when you purchase an item from Wartski or sell an item to Wartski.
  • when you ask us to prepare a valuation of your property.
  • when you ask us to undertake a repair/alteration to your property.
  • when you make an enquiry about an item of stock or service we provide.
  • when you request to be notified about new items of stock or upcoming exhibitions.
  • when you attend an event at Wartski or visit our stand at an international art fair.
  • when you lend an item to an exhibition organised by Wartski.

We may also obtain information about you from other sources, for example:

  • When someone introduces you to us.

Your image may be collected by Wartski when you visit our shop or visit our stand at one of the international art fairs we attend. We use CCTV for the protection of our staff, our customers and the property that we sell.

We collect data about you through cookies. A cookie is a simple text file that is stored on your computer or mobile device by our website’s server which allows our website to remember your preferences. You can see more detail on cookies here.

What personal data do we process and why?

Below are the types of personal data we process, the purposes for which we use it and the legal grounds for processing it.

Processing transactions and providing requested services.

Examples of personal data collected:

  • Name, title and contact details (including email address, postal address and telephone numbers).
  • Details of the property involved in a transaction or to which the services relate.
  • Records of communications (including email correspondence).
  • Details of the nature of the transaction or service provided.
  • Bank details, bank transfer receipts.

Lawful grounds for processing: Performing a contract

Recording evidence of our compliance with legal requirements (for example, payment of taxes and duties; knowing our customers and preventing money-laundering; protecting cultural heritage when exporting artworks).

  • Name, title and contact details (including email address, postal address and telephone numbers).
  • Details of past transactions (including descriptions of property; evidence of any taxes and duties paid or withheld; licenses or certificates required for transporting an item between borders).
  • Copies of identification documents.

Lawful grounds for processing: complying with legal obligations.

Keeping our staff, customers and property safe.

  • CCTV footage

Lawful grounds for processing: Legitimate interests

Maintaining records of objects to assist with checks on authenticity, provenance and title.

  • Name, title and contact details (including email address, postal address and telephone numbers).
  • Details of the item of property.

Lawful grounds for processing: Legitimate and Public interests

Providing details of forthcoming fairs and exhibitions or to inform you of new acquisitions.

  • Name, title and contact details (including email address, postal address and telephone numbers).
  • Topics/objects of interest to you.

Lawful grounds for processing: Legitimate interests (for existing customers) and Consent (for non-existing customers who request to be contacted with updates about new stock and events).

Who gets to see your personal data?

Your personal data will be processed by Wartski alone.

We do not share your personal data with organisations who wish to use it for their own marketing purposes. We only share data with other organisations where it is necessary to complete a service you have requested us to provide or to comply with our legal obligations (for example, we may share data with our bank, with shipping firms and our financial auditor). Where data is shared, it is done so on the understanding that the information is kept confidential and secure by these companies.

Where we receive a request from a law enforcement authority to provide your data, we will only disclose such information where we are satisfied that the body making the request has the right to seek disclosure and has followed correct processes.

How long will we keep your personal data?

We will retain your personal data for as long as is necessary to complete a transaction, provide the services you have requested and to maintain records to satisfy our legal obligations.   

Records on the ownership of an object to assist with checks on authenticity, provenance and title, will be kept for as long as the record is relevant to our legitimate interest and the public interest.

Protecting your personal data

We take all reasonable and appropriate steps to protect the security and integrity of all personal information provided.

We use a variety of technologies and procedures to help protect your personal details from unauthorised access.

Access, Rectification and Erasure

Residents within the EU have the legal right to make a “subject access request”. If you exercise this right, we are required to provide you with a description and copy of the personal data we hold on you and tell you our reasons for processing it.

As well as your subject access right, you may have a legal right to have your personal data rectified or erased, to object to its processing, or have its processing restricted.

If we are relying on Consent as the grounds for processing your data you may withdraw consent at any time.

Contact Information

If you have any queries regarding Wartski’s processing of your personal data please contact us at wartski@wartski.com or telephone +44 (0) 20 7493 1141.


Complaints

If you have any complaints relating to the processing of your personal data, please contact us at wartski@wartski.com or telephone +44 (0) 20 7493 1141. You may raise a complaint with the UK Information Commissioner (https://ico.org.uk/) or your local regulator if you consider that we have infringed data privacy laws when processing your personal data.