GDPR Compliance Notice

This GDPR Compliance Notice is provided in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) to explain how mediha.art collects, processes, and protects personal data of users located within the European Economic Area (EEA).

1. Data Controller

mediha.art acts as the data controller for the processing of personal data within the scope of this notice.

2. Personal Data We Collect

Depending on your interaction with our website, we may collect and process the following personal data:
• Full name
• Email address
• Contact messages and correspondence
• Certificate verification and authenticity inquiries
• Technical data such as IP address and browser information

3. Purpose of Processing

Personal data is processed for the following purposes:
• Responding to user inquiries and communication requests
• Managing artwork certification and authenticity verification
• Providing information about artworks, collections, and services
• Ensuring website security and functionality
• Complying with legal and regulatory obligations

4. Legal Basis for Processing

We process personal data based on one or more of the following legal bases defined under Article 6 of the GDPR:
• The data subject’s explicit consent
• Performance of a contract or pre-contractual steps
• Compliance with legal obligations
• Legitimate interests pursued by the data controller

5. Data Sharing and Transfers

Personal data is not shared with third parties except where necessary for technical service providers or where required by law. Personal data is not transferred outside the EEA unless appropriate safeguards are in place.

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements. After this period, data is securely deleted or anonymized.

7. Your Rights Under GDPR

Under GDPR, you have the right to:
• Access your personal data
• Request rectification of inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time

8. Exercising Your Rights

To exercise your GDPR rights or for any questions regarding this notice, please contact us via email:
info@mediha.art