Last updated: 21 October 2026

Who is responsible for your data

The data controller is Tilsitt Gallery, Lda operating as Tilsitt Gallery, Rua de Miguel Bombarda 171, 4050-381 Porto, Portugal. For any question about your personal data, write to info@tilsittgallery.com.

What we collect and why

Inquiries about an artwork

When you ask about an artwork, we collect your name, your email address, your phone number if you give it, your message and the artwork concerned. We use this information only to answer your request and, if you wish, to follow up on a possible purchase. The legal basis is your consent, given when you tick the box on the form, and the steps taken at your request before a possible sale.

Your request is sent to the gallery by email and kept in the website’s administration area, which only the gallery team can access. You also receive an automatic email with the details and price of the artwork, in the language of the website as you viewed it (or of your browser). To prevent abuse, a coded form of your IP address (never the address itself) is kept for one minute to limit repeated submissions, and for up to one hour to limit the number of automatic emails; it is then deleted. If the form cannot be sent because of an error and your browser does not run JavaScript, what you typed is kept for ten minutes so you do not have to type it again.

Emails and phone calls

If you contact us directly by email or phone, we use your details only to reply to you and to handle your request.

Browsing the website

Like any website, our server records technical information (IP address, browser, pages visited, date and time) in security logs. These logs are used only to keep the website safe and working, and are deleted automatically by our hosting provider.

We do not sell your data, we do not use it for advertising, and we will only send you news about the gallery if you have asked for it.

How long we keep your data

  • Inquiries without a purchase: up to 3 years after our last exchange, then deleted.
  • Data related to a sale: for the period required by Portuguese accounting and tax law.
  • Server security logs: a few weeks at most.

Who can see your data

Your data is accessible only to the gallery team. It is stored by our web hosting provider, Trofatec, on servers located in the European Union, and is protected against spam by CleanTalk, which checks form submissions. These providers act on our behalf and may not use your data for any other purpose. We may share information with a carrier or insurer only when needed to deliver an artwork you have purchased.

Cookies and third-party content

This website does not use advertising or tracking cookies of its own. It sets only technical cookies: one that remembers your choice in the cookie banner, and those used by the gallery team when they log in to manage the website. Some pages show content from other services, which may set their own cookies and receive your IP address:

  • YouTube: videos on artwork pages are loaded from YouTube only when you click play. From that moment, YouTube may set cookies and receive your IP address.
  • Google Maps: the map on the Contact page is loaded only once you accept cookies in the banner, or click “Show the map”.
  • Translation: the language selector uses Google Translate (through GTranslate) to display pages in other languages, when you choose a language.

These services are governed by Google’s own privacy policy (policies.google.com/privacy). You can block or delete cookies at any time in your browser settings.

Your rights

Under the General Data Protection Regulation (GDPR), you can at any time ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and withdraw your consent. Simply write to info@tilsittgallery.com; we will reply within one month.

If you believe your rights have not been respected, you can lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).

Changes to this policy

We may update this policy, for example if we add a newsletter or a new service to the website. The date at the top of the page shows the latest version.