1. Who We Are

MalinArt is an online art gallery based in the Republic of Moldova, offering original artworks by contemporary artists to collectors worldwide.

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), MalinArt is responsible for the processing of personal data collected through this website.

Website: malinart.md
Contact: malinarttatiana@gmail.com

2. Personal Data

We CollectDepending on how you use our website, we may collect:

• your name;
• email address;
• telephone number;
• billing and shipping address;
• information you provide through contact or inquiry forms;
• information necessary to process and deliver an order;
• newsletter subscription information;
• technical information relating to your visit, such as device, browser and website usage information, where collected through cookies or analytics technologies.

We only collect personal data that is reasonably necessary for the relevant purpose.

3. How We Use Your Personal Data

We may process your personal data to:

• respond to inquiries and messages;
• process and manage artwork purchases;
• arrange shipping and delivery;
• communicate with you regarding an order;
• provide customer support;
• maintain records required for accounting, tax or other legal obligations;
• send newsletters, art updates and promotional offers where you have consented to receive them;
• operate, secure and improve the website;
• understand how visitors use the website, where permitted by applicable law.

4. Legal Basis for Processing

Where the GDPR applies, we process personal data on one or more of the following legal bases:
Contractual necessity — when processing is necessary to process an artwork purchase, payment, delivery or other request made by you.
Consent — for example, when you voluntarily subscribe to marketing emails or where consent is required for certain cookies or similar technologies.
Legal obligation — when we are required to retain or process information to comply with applicable accounting, tax or other legal requirements.
Legitimate interests — where necessary for the legitimate operation, security and improvement of our business and website, provided that those interests do not override your rights and freedoms.
These distinctions matter under GDPR: consent is not required for every processing operation—for example, information necessary to fulfill an online order may be processed because it is necessary for the contract.

5. Orders and Payments

When you purchase artwork, we use the information necessary to process your order, communicate with you and arrange delivery.
Payments may be processed through third-party payment providers such as PayPal or through bank transfer.
MalinArt does not store your complete payment-card details when payment is handled directly by an external payment provider. Payment providers process information according to their own privacy policies and applicable data protection requirements.

6. Shipping

To deliver purchased artworks, necessary personal information may be shared with postal services, couriers and logistics providers.
Depending on the destination and shipping method, these may include services such as EMS/Poșta Moldovei, DHL or UPS.

Information shared may include your name, delivery address, telephone number, email address and other information required for shipment, customs clearance or delivery.

7. Newsletter and Marketing Communications

If you subscribe to the MalinArt newsletter, we may use your email address to send information about new artworks, artists, exhibitions, gallery news and special offers.

Marketing communications are sent on the basis of your consent where required by law.
You may unsubscribe at any time by using the unsubscribe option provided in the communication or by contacting MalinArt.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Cookies and Analytics

MalinArt may use cookies and similar technologies necessary for the operation of the website and, where applicable, analytics or other tools that help us understand website usage.
Where applicable law requires consent for non-essential cookies, such technologies will be used only after the appropriate consent has been obtained.

More detailed information about cookies may be provided in a separate Cookie Policy or cookie notice.

9. Sharing Your Personal Data

We do not sell your personal data.

Personal information may be disclosed only where reasonably necessary to service providers involved in operating the website and fulfilling your requests, including:

• payment providers;
• postal and courier companies;
• website hosting and technical service providers;
• email/newsletter service providers;
• accounting or professional service providers where necessary;
• public authorities where disclosure is required by law.

Service providers receive only the information reasonably necessary to perform the relevant service.

10. International Data Transfers

Because MalinArt operates internationally and sells artworks to collectors worldwide, personal information may in some circumstances be processed or transferred outside your country of residence.
Where GDPR requirements apply to an international transfer of personal data, appropriate legal mechanisms and safeguards will be used where required.
GDPR specifically requires the privacy information to address transfers to third countries where applicable.

11. How Long We Keep Personal Data

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting and tax requirements.
Order and transaction information may therefore be retained for longer periods where required by applicable law.

Information submitted through general inquiries will not be retained longer than reasonably necessary for handling the inquiry and related correspondence.

Newsletter information is retained until you unsubscribe or otherwise withdraw your consent, subject to any minimal records that may need to be maintained to respect your opt-out request.

This follows the GDPR principle that personal information should not be kept longer than necessary.

12. Your Data Protection Rights

Where the GDPR or other applicable data protection legislation applies, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete information;
• request deletion of your personal data in applicable circumstances;
• request restriction of processing;
• object to certain processing;
• request portability of your data where applicable;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent data protection supervisory authority.

These rights may be subject to limitations or exceptions under applicable law.
To exercise your rights, please contact MalinArt using the contact information below.

13. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.
However, no method of transmitting or storing information online can guarantee absolute security.

14. Third-Party Websites

The MalinArt website may contain links to third-party websites, platforms or services.
MalinArt is not responsible for the privacy practices of independent third parties. We encourage visitors to review the privacy policies of those services before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes in our website, services, technology or applicable legal requirements.

The date of the latest revision will be displayed at the top of this page.

16. Contact

For questions concerning this Privacy Policy or the processing of your personal data, or to exercise your data protection rights, please contact:

MalinArt
Republic of Moldova
Email: malinarttatiana@gmail.com
Website: malinart.md