Privacy Policy, updated: 28/03/2026

OVERVIEW

This Privacy Policy describes how AIDEMI (“AIDEMI”, “we”, “us” or “our”) collects, uses, stores, shares and otherwise processes personal data when you visit www.aidemi.eu (the “Website”), contact us, purchase artworks or products, submit an inquiry, book or request the use of our space, subscribe to our newsletter, attend our events, or otherwise interact with us. We are committed to handling personal data in a transparent, lawful and secure manner, in accordance with applicable data protection laws, including Regulation (EU) 2016/679 (“GDPR”) and applicable Spanish data protection legislation.Please read this Privacy Policy carefully to understand how we process your personal data.

SECTION 1 – DATA CONTROLLER

The controller responsible for the processing of your personal data is: Arnau Casado
Trading name: AIDEMI
Address: Carrer María 6, 08012 Gràcia, Barcelona, Spain
Email: info@aidemi.eu
Tax ID / VAT / CIF / NIF: 39412661E

SECTION 2 – PERSONAL DATA WE MAY COLLECT

Depending on how you interact with us, we may collect and process the following categories of personal data:

Identity and contact data
Such as your name, email address, phone number, postal address, company name, job title, and other contact details you provide.

Order and transaction data
Such as details of artworks, products or services purchased, billing and delivery details, payment status, invoice information, shipping details, and transaction history.

Booking and event data
Such as details relating to your inquiry or booking request, proposed dates, intended use of the space, technical requirements, insurance information, guest or attendee details, and related logistics.

Communication data
Such as the content of emails, contact form submissions, inquiries, proposals, reviews, testimonials, references, attachments, and any other information you send to us.

Marketing data
Such as your subscription preferences, consent choices, newsletter sign-up information, and records of whether you open or interact with our communications.

Technical and usage data
Such as IP address, browser type, device information, operating system, referring URLs, pages viewed, session data, log files, approximate location derived from IP, and cookie-related information.

Social media and third-party platform data
If you contact us through social media or third-party platforms, we may receive the information you choose to share with us through those services.We do not intentionally collect special categories of personal data unless this is necessary for a specific lawful purpose and permitted by law.

SECTION 3 – HOW WE COLLECT YOUR DATA

We may collect personal data:directly from you, when you contact us, place an order, subscribe, send an inquiry, submit a booking request, or otherwise interact with us;automatically, through cookies, server logs, and similar technologies when you use the Website;from service providers involved in payment processing, shipping, hosting, analytics, communications or technical support;from publicly available sources or third-party platforms, where relevant to your request or interaction with us.

SECTION 4 – PURPOSES OF PROCESSING AND LEGAL BASES

We process personal data only where we have a valid legal basis to do so. Depending on the context, we may process your data for the following purposes:

To respond to inquiries and communicate with you.

Including responding to contact form submissions, booking requests, rental inquiries, curatorial proposals, sales inquiries, and general communications.
Legal basis: your request for pre-contractual steps, our legitimate interests in managing communications, or your consent where required.

To process orders and provide our products or services
Including managing purchases, confirming bookings, fulfilling orders, arranging delivery, issuing invoices, and providing customer support.
Legal basis: performance of a contract or steps taken at your request prior to entering into a contract.

To manage payments, accounting, compliance and fraud prevention
Including verifying transactions, keeping financial records, complying with tax and accounting obligations, and protecting against misuse or fraud.
Legal basis: performance of a contract, compliance with legal obligations, and our legitimate interests in protecting our business.

To manage our space rental and event operations
Including evaluating requests, planning activities, maintaining safety, coordinating vendors, and administering our physical space and related operations.
Legal basis: performance of a contract, pre-contractual measures, legal obligations, and legitimate interests.

To send newsletters and marketing communications
Including updates about exhibitions, events, artworks, publications, or services, where permitted by law.
Legal basis: your consent where required, and in some cases our legitimate interests where permitted by applicable law. You may object to direct marketing at any time.

To operate, improve and secure the Website
Including analytics, troubleshooting, testing, maintenance, performance monitoring, and protecting the Website and users against abuse or security incidents.
Legal basis: our legitimate interests, and consent where cookies or similar technologies require it. We implement measures appropriate to the risk.

To establish, exercise or defend legal claims
Including where needed to protect our rights, property, staff, collaborators, artists, visitors or business interests.
Legal basis: our legitimate interests and, where applicable, compliance with legal obligations.Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

SECTION 5 – IF YOU DO NOT PROVIDE YOUR DATA

Where we need personal data in order to respond to your request, process an order, confirm a booking, comply with legal obligations, or provide services, your failure to provide that data may mean that we cannot fully respond to you, complete the transaction, or provide the requested service.

SECTION 6 – RECIPIENTS OF PERSONAL DATA

We may share your personal data, where necessary and appropriate, with: website hosting and IT service providers; payment service providers; shipping, courier and logistics providers; booking, event or production support providers; newsletter, CRM and email communication platforms; analytics, cookie and website performance providers; accountants, auditors, legal advisers, insurers and other professional advisers; public authorities, regulators, courts or law enforcement bodies where required by law or necessary to protect our rights. We do not sell your personal data. Payment card details are generally processed directly by our third-party payment providers and are subject to their own privacy and security practices.

SECTION 7 – INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside the European Economic Area.Where personal data is transferred outside the EEA, we will seek to ensure that appropriate safeguards are in place in accordance with applicable law, including adequacy decisions adopted by the European Commission or appropriate contractual safeguards such as the European Commission’s Standard Contractual Clauses, together with any supplementary measures required where appropriate. You may contact us to request more information about such safeguards.

SECTION 8 – DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected, including for the purposes of satisfying legal, accounting, tax, reporting, operational or dispute-resolution requirements. As a general guideline: inquiry data may be kept for 24 months after our last meaningful contact, unless a longer period is necessary; customer, order and booking data may be kept for the duration of the relationship and thereafter for the period required by applicable legal, tax and limitation rules; invoice and accounting records may be kept for the period required by applicable law; marketing data may be kept until you unsubscribe, withdraw consent, or object; technical data and cookies may be retained in accordance with our cookie settings and applicable retention periods; data relevant to legal claims may be retained until the relevant matter is fully resolved and any applicable limitation period has expired. Where retention is no longer necessary, we will delete, anonymise, or securely restrict the data as appropriate.

SECTION 9 – YOUR RIGHTS

Subject to applicable law, you may have the right to: request access to your personal data; request rectification of inaccurate or incomplete data; request erasure of your personal data; request restriction of processing; object to processing based on legitimate interests; object at any time to the processing of your data for direct marketing purposes; request portability of the personal data you have provided to us, where applicable; withdraw your consent at any time, where processing is based on consent; not be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you, unless permitted by law. To exercise your rights, please contact us at info@aidemi.eu. We may ask for information necessary to verify your identity before responding.In many cases, these rights are free to exercise, and requests should generally be answered within one month, subject to lawful extensions where the request is complex or numerous. If you believe your data protection rights have been infringed, you also have the right to lodge a complaint with the competent supervisory authority. In Spain, this is generally the Agencia Española de Protección de Datos (AEPD).

SECTION 10 – COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies and similar technologies to operate the Website, remember your preferences, analyse traffic, improve performance, and, where applicable, support marketing or embedded third-party services.Some cookies are technically necessary for the Website to function properly and may not require consent where they are strictly necessary to provide the service requested by the user. Other cookies, including analytics, preference or advertising cookies, may require your consent before being placed, depending on how they are used. You can manage your cookie preferences through our cookie banner or settings tool, and you may also configure your browser to block or delete cookies. Blocking certain cookies may affect the operation of parts of the Website. For more detailed information, please see our Cookie Policy: [insert link].

SECTION 11 – THIRD-PARTY WEBSITES, PLATFORMS AND EMBEDDED CONTENT

Our Website may contain links to third-party websites, social media pages, payment services, maps, embedded content, or other tools operated by third parties. We are not responsible for the privacy, security or data practices of those third parties. Your use of third-party services is subject to their own terms and privacy policies, and we encourage you to review them carefully.

SECTION 12 – CHILDREN’S PRIVACY

Our Website and services are not directed to children. We do not knowingly collect personal data from children where consent from a parent or legal guardian is required under applicable law. If you believe that a child has provided us with personal data inappropriately, please contact us so that we can take appropriate steps. In Spain, consent-based processing for children under 14 generally requires parental or guardian consent.

SECTION 13 – DATA SECURITY

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, and other unlawful forms of processing, taking into account the nature of the data and the risks involved.However, no method of transmission over the internet or method of electronic storage is completely secure, and therefore we cannot guarantee absolute security.

SECTION 14 – CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time in order to reflect legal, technical, operational or business changes.The most current version will always be posted on this page with the updated “Last updated” date. Your continued use of the Website after any such update will be subject to the revised Privacy Policy.

SECTION 15 – CONTACT

If you have any questions, requests or concerns regarding this Privacy Policy or the way we process personal data, please contact us at:

AIDEMI
Carrer María 6, 08012 Gràcia, Barcelona, Spain
info@aidemi.eu