Privacy policy

Last updated: January 12th 2026

This Privacy Policy explains how GALLERY WORLD (“Website”, “we”, “us” or “our”) collects, uses, and discloses personal information when you visit galleryworld.at, use our services, make a purchase, or otherwise interact with us in connection with the website (collectively, the “Services”).

References to “you” and “your” mean any user of the Services, whether you are a customer, a website visitor, or another individual whose personal information is processed under this Privacy Policy.

Please read this Privacy Policy carefully.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technical developments, or legal and regulatory requirements. The updated version will be published on the Website with a revised “Last updated” date. Where required by law, we will provide additional notice.

COLLECTION AND USE OF PERSONAL INFORMATION

To provide and operate our Services, we collect personal information from various sources. The type of data collected depends on how you interact with our Website.

In addition to the specific purposes listed below, we may use personal information to communicate with you, improve our Services, comply with legal obligations, enforce our terms, and protect our rights as well as the rights of our users and third parties.

TYPES OF PERSONAL INFORMATION WE COLLECT

“Personal information” refers to data that identifies, relates to, describes, or can reasonably be linked to an individual. The categories of personal information we collect are described below.

INFORMATION YOU PROVIDE DIRECTLY

Contact details: name, postal address, phone number, email address
Order details: billing and shipping address, payment confirmation, contact information
Account information: username, password, and security-related details
Purchase and usage data: viewed products, cart contents, completed purchases
Loyalty points, reviews, recommendations, or gift cards, where applicable
Customer support information: content of messages or inquiries sent to us

Certain features of the Services require the provision of specific information. If such information is not provided, these features may not be available.

AUTOMATICALLY COLLECTED INFORMATION

When you use our Website, we automatically collect certain information through cookies and similar technologies, including:

Device and browser data
IP address
Information about how you navigate and interact with the Website

INFORMATION FROM THIRD PARTIES

We may receive personal information from third parties, including:

Website and e-commerce service providers (e.g. Shopify)
Payment processors that handle transaction data to complete purchases
Analytics and marketing partners, where you interact with our content or advertisements

HOW WE USE PERSONAL INFORMATION

Providing our services

To process orders, handle payments, manage shipping and returns, and administer user accounts.

Marketing and communications

To send promotional messages, offers, or updates, where permitted by applicable law.

Security and fraud prevention

To detect, prevent, and investigate fraudulent, unlawful, or harmful activities.

Customer communication and improvement

To respond to inquiries, provide customer support, and enhance the functionality and performance of our Services.

COOKIES

Our Website uses cookies to ensure proper functionality and improve user experience. Information about cookies used by Shopify can be found in Shopify’s cookie policy.

SHARING OF PERSONAL INFORMATION

We only share personal information with third parties where necessary to fulfill contractual obligations, where there is a legitimate interest, or where disclosure is required by law.

THIRD-PARTY WEBSITES

Our Website may contain links to third-party websites or platforms. We are not responsible for the privacy practices, security, or content of such external sites.

CHILDREN’S DATA

Our Services are not intended for use by children. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us so we can delete the information.

DATA SECURITY AND RETENTION

We implement appropriate technical and organizational measures to protect personal information. However, no method of transmission or storage is completely secure. Please avoid sending sensitive information through unsecured channels.

YOUR RIGHTS

Depending on your place of residence, you may have certain rights regarding your personal information, such as the right to access, correct, or delete your data. These rights apply subject to legal requirements.