Last updated: 4.07.2026
Privacy policy
Small Gallery operates this website, including all related information, content, features, tools, products and services, in order to provide you with a curated art viewing and shopping experience (the “Services”).
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through our website or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through our website or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.
For the purpose of applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Slovenian Data Protection Act (ZVOP‑2), the data controller is:
TRGOVINA Z UMETNIŠKIMI IZDELKI, VASILISA NESTEROVA S.P.
Jurčičev trg 3
1000 Ljubljana
Slovenia
Email: info@smallgallery22.com
TRGOVINA Z UMETNIŠKIMI IZDELKI, VASILISA NESTEROVA S.P.
Jurčičev trg 3
1000 Ljubljana
Slovenia
Email: info@smallgallery22.com
When we use the term “personal information”, we refer to any information that identifies or can reasonably be linked to you.
Depending on how you interact with the Services, we may collect and process the following categories of personal information:
Depending on how you interact with the Services, we may collect and process the following categories of personal information:
- Contact details – name, billing address, shipping address, country of residence, phone number, email address.
- Financial information – limited payment details (such as transaction ID, payment status). Full card details are processed only by our payment service providers and are not stored on our systems.
- Account information – username, password, preferences, and settings when you create an account or subscribe to our newsletter.
- Transaction information – artworks and prints you view, add to your cart or wishlist, purchase, return, exchange, or cancel, as well as past transactions.
- Communications – information you include in communications with us (emails, contact forms, customer support inquiries).
- Device information – technical data about your device and connection (IP address, browser type and version, operating system, device identifiers).
- Usage information – information about how you interact with the website (pages viewed, time on page, clicks, referring pages), including through cookies and similar technologies.
We may collect personal information from:
- Directly from you – when you create an account, fill in forms, place orders, contact us, subscribe to our newsletter or otherwise provide your information.
- Automatically – when you use the website, through cookies and similar technologies placed on your device (see Cookie section, if applicable).
- Service providers – for example, payment processors, email service providers, analytics tools and hosting providers that support our website and operations.
- Partners and third parties – for example, logistics partners such as DHL or marketing tools that help us communicate with you.
Depending on how you interact with us, we may use your personal information for the following purposes:
Provide, Tailor and Improve the Services
Marketing and Advertising
Security and Fraud Prevention
Provide, Tailor and Improve the Services
- Processing orders, payments and shipments.
- Managing your account, wishlists, and order history.
- Providing access to digital content and information about artworks.
- Remembering your preferences and items you are interested in.
- Handling returns and customer support requests.
- Improving our website and Services, including through analytics and user feedback.
Marketing and Advertising
- Sending you newsletters, updates about exhibitions or new works, and promotional offers by email (only where permitted by law and, where required, based on your consent).
- Showing you non‑intrusive online advertising related to our artworks and services.
Security and Fraud Prevention
- Providing a secure browsing and shopping environment.
- Detecting, investigating, and preventing fraudulent or malicious activities.
- Protecting our rights, the rights of our customers and the security of the Services.
- Responding to your inquiries and requests.
- Providing customer support and updates on your orders.
- Sending important notices, such as changes to our policies or security alerts.
- Complying with applicable laws and regulations.
- Responding to lawful requests from public authorities.
- Establishing, exercising, or defending legal claims.
We may disclose your personal information to:
- Service providers – such as website hosting (Tilda), payment processors (e.g. Stripe, PayPal, or bank providers), email marketing tools, analytics tools, and logistics partners (e.g. DHL). These providers process data only on our instructions and under appropriate data protection agreements.
- Business partners – for example, couriers or framing partners involved in preparing and delivering your order.
- Professional advisers – lawyers, accountants, or auditors, where necessary.
- Public authorities – where required by law or to protect our rights.
- In connection with business transfers – for example, in case of a merger or transfer of our business, in accordance with applicable law.
Our website is built and hosted using Tilda. Tilda may process certain technical and usage data (such as IP address, device and browser information, basic analytics) to provide hosting, security, and statistics for our website.
We also use third‑party service providers for:
We also use third‑party service providers for:
- payment processing,
- email delivery and newsletters,
- website analytics,
- shipping and logistics.
Our Services are not intended for children under the age of majority in their jurisdiction. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us and we will take steps to delete such information.
We implement appropriate technical and organisational measures to protect your personal information, taking into account the state of the art, the costs of implementation and the nature, scope and purposes of processing. However, no system is completely secure.
We retain your personal information only for as long as necessary for the purposes described in this Privacy Policy, including:
We retain your personal information only for as long as necessary for the purposes described in this Privacy Policy, including:
- to maintain your account;
- to provide the Services and complete transactions;
- to comply with legal obligations (e.g. accounting and tax);
- to resolve disputes and enforce agreements.
Depending on applicable law and your country of residence, you may have the following rights in relation to your personal information:
We may need to verify your identity before responding to your request and may be permitted to deny your request in some cases, in line with applicable law.
- Right of access – to obtain confirmation whether we process your personal data and to receive a copy.
- Right to rectification – to request correction of inaccurate or incomplete data.
- Right to erasure – to request deletion of your personal data, subject to legal obligations.
- Right to restriction – to request that we limit processing in certain circumstances.
- Right to data portability – to receive your data in a structured, commonly used and machine‑readable format and to transmit it to another controller.
- Right to object – to object to processing based on our legitimate interests, including profiling, at any time on grounds relating to your particular situation.
- Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time (this will not affect the lawfulness of processing before withdrawal).
We may need to verify your identity before responding to your request and may be permitted to deny your request in some cases, in line with applicable law.
If you have concerns about how we process your personal information, please contact us first. We will do our best to address your concerns. You also have the right to lodge a complaint with the competent data protection authority. In Slovenia, this is the Information Commissioner (Informacijski pooblaščenec).
Information Commissioner (IP‑RS)
Website: https://www.ip-rs.si/en/
Information Commissioner (IP‑RS)
Website: https://www.ip-rs.si/en/
Your personal information may be transferred to and processed in countries outside your country of residence, including countries outside the European Economic Area (EEA). Where we transfer personal data outside the EEA or the UK, we will rely on appropriate safeguards such as Standard Contractual Clauses or other mechanisms recognised by the GDPR, unless the destination country has been recognised as providing an adequate level of protection.
We may update this Privacy Policy from time to time, for example to reflect changes in our practices or legal requirements. When we make changes, we will update the “Last updated” date and, where required by law, we will inform you through the website or by email.
If you have any questions about this Privacy Policy or our privacy practices, or if you would like to exercise your rights, please contact us at:
"Small Gallery", TRGOVINA Z UMETNIŠKIMI IZDELKI, VASILISA NESTEROVA S.P.
Jurčičev trg 3
1000 Ljubljana
Slovenia
Email: info@smallgallery22.com
"Small Gallery", TRGOVINA Z UMETNIŠKIMI IZDELKI, VASILISA NESTEROVA S.P.
Jurčičev trg 3
1000 Ljubljana
Slovenia
Email: info@smallgallery22.com