Dark Light
English
Cart 0
Cart 0
  • Home
  • Privacy Policy
Legal information

Privacy Policy

Document to be completed This policy is not final yet. Missing: the legal name and tax details of the data controller, the data retention period and the list of providers (hosting and email service). Until they are defined, the reference policy remains the one published on iubenda. Read the privacy policy on iubenda

Last updated: 9 July 2026 (original version of the previous site).

1. Who we are

This site is operated by Under The Arch Gallery, Via Termine 8/d, Sant'Agata sui Due Golfi, 80061 (NA), Italy.

Contact: underthearchag@gmail.com · +39 338 464 9639

To be completed: legal name, VAT number and registered office of the entity acting as data controller under the GDPR.

2. What personal data we collect

We collect personal data only when you provide it yourself, that is when you:

  • send an information or booking request from the site (name, email, phone, optional message and the experience or artwork you are asking about);
  • write to us directly by email or WhatsApp;
  • subscribe to the newsletter (email address);
  • place an order in the shop (billing and shipping details).

3. Why we collect it (legal basis)

  • to reply to your information or booking request (legal basis: your consent / pre-contractual measures taken at your request);
  • to keep track of the requests received (legal basis: legitimate interest in managing our business);
  • to perform the contract in case of purchase and for the related tax obligations (legal obligation).

4. How long we keep it

Data from requests and bookings is kept in our systems for as long as it takes to manage our relationship with you, and is then deleted, except for longer periods required by law (accounting records, for example).

To be completed: the precise retention period, to be decided together with the gallery.

5. Who we share it with

We do not sell or transfer your personal data. We may share it with:

  • the email service provider, solely to deliver request notifications;
  • the hosting provider, which hosts the site and its database;
  • the external booking platform, when you complete an experience booking there;
  • the payment services provider and the courier, in case of purchase.

We do not share your data with advertisers.

To be completed: names and roles of the providers actually used (hosting, email, payments, booking platform).

6. Cookies

This site uses cookies and similar technologies. Some are strictly necessary to make it work; others are set only with your consent. The details are in the cookie policy.

7. Third-party services

  • Google Maps — the map is not embedded in the site: there is only an external link to the gallery's Google listing.
  • Instagram (Meta) — if we embed the feed in future, Meta's privacy policy will apply as well.
  • External booking platform — the data you enter there is processed by the platform operator under its own policy.

8. Your rights (GDPR)

If you are in the European Union or the European Economic Area you have the right to:

  • access the personal data concerning you;
  • have inaccurate data corrected;
  • request the erasure of your data (“right to be forgotten”);
  • object to the processing or request its restriction;
  • receive a copy of your data in a portable format;
  • withdraw your consent at any time (without affecting processing already carried out);
  • lodge a complaint with the Italian Data Protection Authority.

To exercise these rights write to underthearchag@gmail.com.

9. Minors

This site is not aimed at minors and we do not knowingly collect personal data of people under 16.

10. Changes to this policy

We may update this policy: the last updated date at the top reflects the most recent revision.

11. Contact

Questions about this policy or about your data: underthearchag@gmail.com