Last updated: August 2026

1. Data Controller

The controller responsible for the processing of personal data in connection with this website is:

Anja Maria Wolf
trading as a66Gallery
Carrer de Cas Majoral 8
07650 Santanyí, Mallorca
Spain

Email: a66gallery@gmail.com
Website: a66gallery.com

2. Applicable Law and General Information

a66Gallery processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”), and other applicable data protection legislation.

Personal data is processed only where necessary for the operation and security of this website, communication with visitors, handling enquiries, providing requested services, fulfilling contractual or legal obligations, or sending the a66Gallery newsletter where consent has been given.

3. Personal Data We Process

Depending on how you interact with a66Gallery and this website, we may process:

* your name;
* your email address and other contact details voluntarily provided by you;
* information contained in enquiries or correspondence;
* your first name, last name, email address and consent information when subscribing to the newsletter; and
* technical information automatically transmitted when accessing the website, such as IP address, browser type, operating system, date and time of access, referrer URL and pages accessed.

We do not intentionally collect special categories of personal data through this website.

4. Website Access and Server Log Files

When you visit this website, technical information may be automatically processed by the hosting provider in order to deliver the website securely and reliably.

This information may include your IP address, date and time of access, requested page or file, browser type and version, operating system, referrer URL and other technical connection data.

The processing of this information is necessary for the technical operation, stability and security of the website.

The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in providing a secure and functional website.

Technical log data is retained only for as long as necessary for these purposes, unless a longer retention period is required by law or necessary for the investigation of security incidents.

5. Contact and Enquiries

If you contact a66Gallery by email or through another communication channel, the personal data you provide will be processed for the purpose of responding to and handling your enquiry.

Where your enquiry concerns the purchase of an artwork, another service, or steps requested by you prior to entering into a contract, the legal basis is Art. 6(1)(b) GDPR.

For general enquiries, the legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in communicating with visitors, collectors, artists and other persons interested in the activities of the gallery.

Correspondence is retained only for as long as necessary for the relevant purpose, subject to applicable statutory retention obligations.

6. Newsletter

If you subscribe to the a66Gallery newsletter, we process your first name, last name and email address for the purpose of sending you information about exhibitions, artists, events and other gallery-related news.

Newsletter subscriptions and subscriber data are managed internally by a66Gallery and are not shared with an external newsletter marketing provider.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time by using the unsubscribe option provided in the newsletter or by contacting a66gallery@gmail.com.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Your newsletter data will be retained for as long as you remain subscribed. After unsubscribing, your data will be removed from the active mailing list unless limited retention is necessary to demonstrate compliance with legal obligations.

7. Cookies and Similar Technologies

This website may use cookies or similar technologies that are strictly necessary for its proper technical functioning, security and presentation.

Where cookies or similar technologies that are not strictly necessary are used, they will only be activated after obtaining the user’s consent where required by applicable law.

Where applicable, users may manage or withdraw their cookie preferences through the cookie settings provided on the website.

8. Service Providers and Recipients

Personal data may be processed by technical service providers acting on behalf of a66Gallery where this is necessary for the hosting, maintenance, administration or security of the website.

Such providers may process personal data only to the extent necessary to provide their services and, where required, on the basis of appropriate data processing agreements.

Newsletter subscriber data is managed internally by a66Gallery and is not provided to an external newsletter marketing service.

a66Gallery does not sell personal data.

Personal data will only be disclosed to other third parties where required by law, necessary for the performance of a contract, necessary for the establishment, exercise or defence of legal claims, or where another lawful basis applies.

9. International Data Transfers

If personal data is processed by a service provider outside the European Economic Area (EEA), a66Gallery will ensure that the transfer complies with the requirements of the GDPR and that appropriate safeguards are in place where required, such as an adequacy decision by the European Commission or appropriate contractual safeguards.

10. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected.

Longer retention periods may apply where required by tax, accounting, commercial or other legal obligations, or where data must be retained for the establishment, exercise or defence of legal claims.

Once the relevant purpose and applicable retention period have expired, personal data will be deleted or anonymised as appropriate.

11. Your Rights

Under the GDPR and applicable Spanish data protection law, you have the right, where the relevant legal requirements are met, to:

* access your personal data;
* request correction of inaccurate or incomplete personal data;
* request deletion of your personal data;
* request restriction of processing;
* object to processing based on legitimate interests;
* withdraw consent at any time where processing is based on consent;
* receive personal data in a structured, commonly used and machine-readable format where the right to data portability applies; and
* lodge a complaint with a competent supervisory authority.

To exercise any of these rights, please contact:

a66gallery@gmail.com

We may request appropriate information where necessary to verify your identity before processing your request.

12. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In Spain, the competent supervisory authority is:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid
Spain

www.aepd.es

13. Data Security

a66Gallery takes appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

This website uses SSL/TLS encryption to protect data transmitted between your browser and the website.

14. External Links

This website may contain links to websites or services operated by third parties.

When you follow an external link, any processing of personal data on the external website is governed by the privacy practices of the respective provider. a66Gallery is not responsible for the privacy practices or content of third-party websites.

15. Changes to this Privacy Policy

a66Gallery may update this Privacy Policy where necessary to reflect changes to the website, its services, technical infrastructure or applicable legal requirements.

The current version of this Privacy Policy will be published on this website.

Last updated: August 2026