Privacy Policy

Privacy Policy

Art & Assets
Website: https://art-and-assets.com
Version: October 2026

1. Introduction

Art & Assets respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how personal information may be collected, used, stored and protected when you visit our website or contact us.

The processing of personal data is subject to applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.

2. Data Controller

The party responsible for the processing of personal data is:

Art & Assets

Business Center 1, M Floor
The Meydan Hotel, Nad A1 Sheba
Dubai, U.A.E.

Legal Representatives:

  • Dirk Helwig – Director & Co-Founder
  • Steffen Prell – Director & Co-Founder
  • Issa Patrick Nasser Österreich – Director & Co-Founder

Email: contact@art-and-assets.com
Phone: +49 175 2385590

For questions concerning the processing of your personal information or requests relating to your privacy rights, please contact us using the email address above.

3. Website Hosting and Server Logs

Our website is hosted using infrastructure provided by IONOS.

When you access the website, technical information is transmitted to the hosting infrastructure as necessary to deliver the requested pages.

Depending on the server configuration, this information may include:

  • Your IP address
  • Date and time of access
  • Requested pages and resources
  • Browser and operating system information
  • Referring website, where transmitted
  • Technical response and error information

This processing supports website delivery, technical operation, troubleshooting and security.

Where the GDPR applies, processing necessary for website security and operation may be based on legitimate interests under Article 6(1)(f) GDPR.

[Confirm the hosting entity, server location, logging arrangements and applicable retention periods.]

4. Contact Form and Business Enquiries

Our website provides a contact form through which you can submit enquiries to Art & Assets.

The form collects:

  • Name
  • Email address
  • Telephone number
  • Company name
  • Message, if provided

The information is used to review your enquiry, respond to you and communicate regarding our services or potential business relationships.

Form submissions are intended to be delivered to:

contact@art-and-assets.com

Where the GDPR applies, the legal basis may be Article 6(1)(b) GDPR for enquiries relating to pre-contractual measures, or Article 6(1)(f) GDPR for other legitimate business communications.

The information is not used for unrelated marketing purposes solely because you submit a contact enquiry.

Enquiry information is retained only for as long as necessary for the relevant communication, business relationship or applicable legal obligations.

[Confirm the actual email provider, mailbox storage arrangements, recipients and retention policy before activating the production form.]

5. Cookies and Browser Storage

The website uses WordPress and sunlounge Core to provide its content and functionality.

During the technical review, no analytics or marketing tracking services were identified within the examined website configuration.

No cookies were observed being set in the examined anonymous HTTP responses. This does not exclude cookies or browser storage arising from particular browser features, interactions or administrative functions.

WordPress may use cookies for authenticated users and administrative functions.

Certain WordPress browser compatibility features may also use temporary session storage.

We do not currently describe any advertising or analytics cookie functionality because no such functionality was established during the technical review.

This section will be updated if the website’s services or storage technologies change.

6. Fonts, Images and Media

The website uses locally hosted fonts, including Open Sans, and locally stored images and graphical resources.

The examined configuration does not require visitors to retrieve these fonts from an external font provider.

Images and media are delivered as part of the website. Technical access information may be processed by the hosting infrastructure as described above.

Photographs showing identifiable individuals may constitute personal data. Such images are published subject to the applicable legal requirements and permissions.

7. Articles and External Links

Our website publishes articles and information relating to art, investment and related subjects.

Articles may include links to external websites or sharing options.

When you choose to follow an external link, the destination website may process personal information according to its own privacy practices.

A normal external link does not, by itself, mean that personal data is automatically transferred to the destination before you activate it.

8. Service Providers and Backups

We use technical service providers to operate, maintain and secure the website.

These services include website hosting and backup infrastructure.

Backups may be stored locally within the hosting environment or in separately configured IONOS Object Storage.

Backups can contain website files, configuration data and database information, potentially including personal data.

Access to backups is restricted to authorized administrators and service providers as appropriate.

Backup data is retained according to applicable operational and legal requirements.

[Confirm actual storage locations, access arrangements, service provider agreements, retention periods and deletion procedures.]

9. International Data Processing

Art & Assets operates internationally and maintains business connections in Dubai.

Website infrastructure and service providers may be located in different countries.

Where personal data subject to the GDPR is transferred outside the European Economic Area, any applicable transfer requirements must be assessed and appropriate safeguards established.

[Confirm the responsible legal entity, actual countries of access, international recipients and applicable transfer mechanisms before publication.]

10. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by applicable law.

Retention depends on the relevant category of information, including:

  • Technical server and security records
  • Business enquiries and correspondence
  • Contractual communications
  • Administrative records
  • Website backups

Where information is no longer required, it is deleted or anonymized in accordance with applicable retention and deletion procedures.

[Insert verified category-specific retention periods or clear retention criteria.]

11. Data Security

We implement appropriate technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure or loss.

These measures include encrypted website connections, access controls, software maintenance and backup procedures.

No method of electronic transmission or storage can guarantee absolute security.

12. Your Privacy Rights

Where the GDPR applies, and subject to the applicable legal conditions, you may have the right to:

  • Request access to your personal data.
  • Request correction of inaccurate information.
  • Request deletion of personal data.
  • Request restriction of processing.
  • Object to certain processing activities.
  • Request data portability where applicable.
  • Withdraw consent where processing is based on consent.

You may also have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, please contact:

contact@art-and-assets.com

Other rights may apply under the laws governing the responsible entity and the relevant processing activities.

13. Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, data processing activities or applicable legal requirements change.

The current version will be made available on this website.

14. Contact

For questions about this Privacy Policy or the handling of personal information, please contact:

Art & Assets

Business Center 1, M Floor
The Meydan Hotel, Nad A1 Sheba
Dubai, U.A.E.

Email: contact@art-and-assets.com
Phone: +49 175 2385590