Privacy Policy

Introduction
We ("we", "us", "our") take the protection of the data of users ("users" or "you") of our website and/or mobile app (the "Website" or the "Mobile App") very seriously and are committed to protecting the information that users provide to us in connection with the use of our Website and/or Mobile App (collectively: "digital assets"). We are also committed to using your data in accordance with applicable law.

This privacy policy explains our practices regarding the collection, use, and disclosure of your data through your use of our digital assets (the "Services") when you access the Services through your devices.

Please read the privacy policy carefully and ensure that you fully understand our practices regarding your data before using our services. If you have read and fully understood this policy and are not in agreement with our practices, you must cease using our digital assets and services. By using our services, you acknowledge the terms of this privacy policy. Continued use of the services constitutes your agreement to this privacy policy and any amendments to it.

This privacy policy will explain:

How we collect data
What data we collect
Why we collect this data
Who we share the data with
Where the data is stored
How long the data is retained
How we protect the data
How we handle minors
Updates or changes to the privacy policy

What data do we collect?
Below is an overview of the data we may collect:

Non-identifiable and non-identifying information that you provide during the registration process or that is collected through the use of our services ("Non-Personal Data"). Non-personal data does not allow us to identify the individual from whom it was collected. This data primarily consists of technical and aggregated usage information.
Individually identifiable information, i.e., information that can identify you or could with reasonable effort identify you ("Personal Data"). The personal data we collect through our services may include information that is requested from time to time, such as names, email addresses, addresses, phone numbers, IP addresses, and more. If we combine personal data with non-personal data, we will treat the combined information as personal data for as long as it is combined.

How do we collect data?
We use the following main methods to collect data:

We collect data through your use of our services. When you visit our digital assets and use our services, we may collect, record, and store usage, session, and related information.
We collect data you provide directly, for example, when you contact us directly via any communication channel (e.g., an email with a comment or feedback).
We may collect data from third-party sources as described below.
We collect data you provide when you log in to our services via a third-party provider like Facebook or Google.

Why do we collect this data?
We may use your data for the following purposes:

To provide and operate our services
To develop, customize, and improve our services
To respond to your feedback, inquiries, and requests and provide support
To analyze demand and usage patterns
For other internal, statistical, and research purposes
To enhance our data security and fraud prevention capabilities
To investigate and enforce violations of our terms and policies and comply with applicable laws, regulations, or legal requests
To send you updates, news, promotional materials, and other information related to our services. You can opt out of receiving promotional emails at any time by clicking the unsubscribe link in these emails.

Who do we share this data with?
We may share your data with our service providers to operate our services (e.g., data storage via third-party hosting services, technical support, etc.).

We may also disclose your data under the following circumstances:
(i) to investigate, detect, prevent, or take action regarding illegal activities or misconduct;
(ii) to establish or exercise our rights of defense;
(iii) to protect our rights, property, or personal safety, as well as the safety of our users or the public;
(iv) in the event of a change in control of our company or one of our affiliated companies (through merger, acquisition, or purchase of assets, etc.);
(v) to collect, store, and/or manage your data via authorized third-party providers (e.g., cloud service providers), as reasonably necessary for business purposes;
(vi) to work jointly with third parties to improve your user experience.

Please note that we may transfer or share non-personal data with third parties at our sole discretion.

Our services may allow social interactions (e.g., posting content, information, and comments publicly and chatting with other users). Be aware that any content or data you provide in these areas may be read, collected, and used by others. We advise against sharing information you do not want to be made public. Uploading or sharing content through our digital assets is at your own risk. We cannot control the actions of other users or members of the public who may access your data or content, and copies of your data may remain accessible on cached or archived pages or if others have copied or stored your content.

Cookies and Similar Technologies
When you visit or access our services, we authorize third parties to use web beacons, cookies, pixel tags, scripts, and other technologies and analytics services ("Tracking Technologies"). These tracking technologies may enable third parties to automatically collect your data to enhance your navigation experience on our digital assets, optimize performance, ensure a customized user experience, and for security and fraud prevention purposes.

To learn more, please read our Cookie Policy.

We will not share your email address or any other personal data with advertising companies or ad networks without your consent.

We may deliver advertisements through our services and digital assets (including websites and applications that use our services), which may also be tailored to you based on your recent browsing behavior across websites, devices, or browsers.

To serve these ads, we may use cookies, JavaScript, web beacons (including transparent GIFs), HTML5 local storage, and other technologies. We may also use third-party ad networks (i.e., third parties that display ads based on your website visits) to display targeted advertisements. These third-party cookies and technologies are subject to the respective third party’s privacy policies.

Where do we store the data?
Non-Personal Data
Our companies, trusted partners, and service providers are located around the world. We store and process all non-personal data collected in various jurisdictions for the purposes described in this privacy policy.

Personal Data
Personal data may be maintained, processed, and stored in the United States, Ireland, South Korea, Taiwan, Israel, and other jurisdictions where required for the proper provision of our services and/or as required by law.

How long do we retain the data?
We retain collected data as long as necessary to provide our services, fulfill our legal and contractual obligations, resolve disputes, and enforce our agreements.

We may correct, amend, or delete inaccurate or incomplete data at our sole discretion.

How do we protect the data?
Our digital assets are hosted on a platform that provides us with the online infrastructure to offer our services. Your data may be stored through the data storage, databases, and general applications of our hosting provider. They store your data on secure servers behind a firewall and provide HTTPS secure access to most areas of their services.

All direct payment gateways offered by us and our hosting provider comply with the PCI-DSS standards set by the PCI Security Standards Council, a joint effort of brands such as Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card data (physical, electronic, and procedural) by our store and its service providers.

Despite the measures and efforts we and our hosting provider take, we cannot and do not guarantee the absolute protection and security of your data. Therefore, we encourage you to set strong passwords and avoid sharing sensitive data that you believe could cause substantial harm if disclosed. Since email and instant messaging are not considered secure forms of communication, please do not share any confidential information via these channels.

Minors
The services are not intended for users who have not reached the legal age of majority. We do not knowingly collect data from children. If you are not of legal age, you should not download or use our services or provide us with any personal information.

We reserve the right to request proof of age at any time to verify that minors are not using our services. If we become aware that a minor is using our services, we may prohibit and block the user and delete any stored data. If you believe that a minor has provided data to us, please contact us as described below.

Children may use our services, but if they want access to certain features, they may need to provide information. Some data may be collected automatically (including via cookies, web beacons, and other technologies). If we knowingly collect, use, or disclose data from a child, we will provide notice and obtain parental consent in accordance with applicable law. We do not require a child to provide more information than is reasonably necessary to participate in an activity.

We may also use a parent’s contact information to communicate about the child’s activities in the services. Parents can view, prohibit further collection of, or request deletion of their child’s data.

Please contact us to access, update, or delete your child’s data. To protect your child, we may require proof of identity. We may deny access to data if we believe your identity is not verifiable. Certain data may not be deleted due to legal obligations.

Legal Use of Personal Data
We use your personal data only for the purposes set out in this privacy policy and only when:

The use of your personal data is necessary to perform or enter into a contract (e.g., providing the services or customer support);
The use of your personal data is required to comply with legal or regulatory obligations; or
The use of your personal data is necessary to support our legitimate business interests (as long as it is done in a proportionate way that respects your privacy rights).

EU Residents' Rights
If you reside in the EU, you may:

Request confirmation whether personal data is being processed, and access your stored personal data and certain supplementary information;
Receive personal data you provided in a structured, commonly used, and machine-readable format;
Request correction of your stored personal data;
Request deletion of your personal data;
Object to the processing of your personal data;
Request restriction of processing; or
Lodge a complaint with a supervisory authority.

These rights are not absolute and may be subject to our legitimate interests and legal requirements.

We may transfer data internationally to affiliates or third parties in connection with providing services. By using the services, you consent to the transfer of your data outside the EEA. If transferred outside the EEA, we ensure an adequate level of protection is maintained, with proper contractual safeguards in place.

California Consumer Privacy Act (CCPA) Rights
If you are a California resident using the services, you may request access to and deletion of your data under the California Consumer Privacy Act (CCPA).

To exercise your rights, please see our contact details below.

We do not sell users' personal data for the purposes and intents of the CCPA.

Users under 18 residing in California can request the deletion of their posted content by emailing us at the address provided below, with “California Removal Request” in the subject. The request must include a description of the content to be removed and enough information for us to locate the material. Incomplete requests may not be processed. Note that removal does not ensure complete or comprehensive deletion (e.g., others may have reposted your content).

Updates or Changes to the Privacy Policy
We may revise this privacy policy at our sole discretion. The latest version will always be posted on the website (see "Effective Date"). Please review this policy regularly. Material changes will be announced on the website. Continued use of the services after notification constitutes your agreement to the updated policy.

Contact
If you have general questions about the services or the data we collect and use, please contact us:

Name: Sanne Vroemen - Frommelt
Address: Rätikonstrasse 3, 9490 Vaduz, Liechtenstein
Email: hello@thebreathgallery.com