Privacy policy
PRIVACY POLICY
Last updated: October 2, 2026
Mrs. Red Art operates this website (the “Site”) to present original artworks, fine art prints, portrait commission information and related artistic content.
The Site currently operates on an enquiry-only basis. Purchases and payments cannot be completed directly through the Site.
This Privacy Policy explains how personal data is collected, used, stored and disclosed when you visit or use the Site, submit an enquiry, subscribe to communications where available, or otherwise communicate with us.
The Site is powered by Shopify.
1. DATA CONTROLLER
The data controller responsible for the processing of personal data described in this Privacy Policy is:
Data Controller: Veres Mihály Györgyné
Website/brand: Mrs. Red Art
Email: info@mrsredart.com
2. PERSONAL DATA WE COLLECT
Depending on how you interact with the Site, we may process:
- your name and email address;
- other contact information you voluntarily provide;
- the content of enquiries, messages or other communications you send to us;
- information relating to an artwork or commission enquiry;
- marketing or communication preferences, where applicable;
- IP address, browser type, device information and network information;
- information about how you interact with and navigate the Site;
- technical logs, security information and cookie or consent preferences.
We do not currently collect payment card details or process online payments through the Site.
Please do not provide sensitive or special-category personal data in an enquiry unless it is genuinely necessary.
3. HOW WE COLLECT PERSONAL DATA
Personal data may be collected directly from you when you contact us, submit an enquiry, subscribe to communications or otherwise provide information voluntarily.
Certain technical information is collected automatically when you access or use the Site, including through cookies and similar technologies.
We may also receive technical information through Shopify and service providers used to operate, secure and maintain the Site.
4. HOW WE USE PERSONAL DATA AND OUR LEGAL BASES
Where the General Data Protection Regulation (“GDPR”) applies, personal data is processed only where there is an appropriate legal basis.
Artwork and commission enquiries
We process information you provide in order to respond to questions concerning artworks, availability, commissions and related matters.
Where an enquiry concerns a possible future purchase or commission, processing is necessary in order to take steps at your request before potentially entering into a contract. The legal basis is Article 6(1)(b) GDPR.
General correspondence
Where a communication is not related to a potential contract, personal data may be processed on the basis of our legitimate interest in responding to correspondence and communicating with visitors. The legal basis is Article 6(1)(f) GDPR.
Operation and security of the Site
Technical data may be processed where necessary to operate, secure and maintain the Site, prevent misuse, diagnose technical problems and ensure reliable functionality.
The legal basis is our legitimate interest in maintaining a secure and functional website under Article 6(1)(f) GDPR and, where applicable, compliance with legal obligations under Article 6(1)(c) GDPR.
Cookies and similar technologies
Strictly necessary cookies and similar technologies may be used where required for the operation, security and functionality of the Site.
Where applicable law requires consent for non-essential cookies or similar technologies, such technologies are used only on the basis of the required consent. The legal basis for the associated processing of personal data is Article 6(1)(a) GDPR.
You may withdraw or modify your consent through the cookie or privacy preference controls available on the Site.
Marketing communications
If you voluntarily subscribe to marketing or newsletter communications, your contact information is processed on the basis of your consent under Article 6(1)(a) GDPR.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Legal obligations and legal claims
Personal data may also be processed where necessary to comply with an applicable legal obligation or to establish, exercise or defend legal claims.
5. LEGITIMATE INTERESTS
Where processing is based on legitimate interests, those interests may include responding to enquiries, maintaining the Site, protecting the Site against misuse or security threats, keeping appropriate records of communications and establishing, exercising or defending legal claims.
We do not rely on legitimate interests where the interests or fundamental rights and freedoms of the individual override those interests.
6. COOKIES AND SIMILAR TECHNOLOGIES
The Site may use cookies and similar technologies for website operation, security, privacy preferences and other functionality.
Strictly necessary technologies may be used without consent where permitted by applicable law.
Non-essential cookies and similar technologies that require consent will be subject to the applicable consent requirements.
You may review or change your available cookie preferences through the privacy or cookie controls provided on the Site.
7. DISCLOSURE OF PERSONAL DATA
Personal data is disclosed only where necessary for the purposes described in this Privacy Policy.
Recipients or categories of recipients may include:
- Shopify, which provides the website platform and related infrastructure;
- email and communications service providers used to receive and respond to enquiries;
- technical, hosting, security and IT service providers acting on our behalf;
- professional advisers where reasonably necessary;
- public authorities or other recipients where disclosure is required by applicable law or is necessary to establish, exercise or defend legal rights.
Service providers acting on our behalf may process personal data only for the relevant purposes and subject to applicable data-protection requirements.
8. SHOPIFY
The Site is hosted and powered by Shopify. Shopify processes certain technical and other personal data in connection with visitors’ access to and use of Shopify-powered websites.
Where Shopify processes personal data on our behalf, it does so in accordance with its contractual data-processing obligations.
Shopify may also process certain personal data in its own capacity where it independently determines the purposes and means of processing, including in connection with Shopify consumer services. Such processing is governed by Shopify’s applicable privacy notices.
9. INTERNATIONAL DATA TRANSFERS
Shopify and certain service providers operate internationally. As a result, personal data may be processed outside Hungary or the European Economic Area (“EEA”).
Where personal data protected by the GDPR is transferred outside the EEA, transfers are subject to safeguards required by applicable data-protection law. Depending on the destination and circumstances, these safeguards may include an adequacy decision of the European Commission, Standard Contractual Clauses approved by the European Commission or another lawful transfer mechanism.
10. DATA RETENTION
Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected and for any period required by applicable law.
The criteria used to determine retention periods include the nature and duration of our communication with you, the time required to respond to and follow up on an enquiry, applicable legal obligations and whether information is required for the establishment, exercise or defence of legal claims.
Where processing is based solely on consent, such as optional marketing communications, personal data will generally be processed until consent is withdrawn or the information is no longer required for that purpose, subject to any applicable legal retention requirements.
11. YOUR RIGHTS
Where the GDPR applies, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request erasure of personal data where the legal requirements are met;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain personal data in a structured, commonly used and machine-readable format and request its transmission where the right to data portability applies;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a competent data-protection supervisory authority.
These rights are subject to the conditions and exceptions provided by applicable law.
If you are located in Hungary, you have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
Individuals located in other jurisdictions may have additional rights under the laws applicable to them.
12. PROVIDING PERSONAL DATA
You do not need to provide your name, email address or other contact details simply to browse the publicly available content of the Site. However, certain technical data may be processed automatically when you access the Site.
If you choose to submit an enquiry, sufficient contact information, normally including an email address, is necessary for us to respond. If the information necessary to communicate with you is not provided, we may be unable to respond to your enquiry.
Providing consent for optional marketing communications and non-essential cookies is voluntary.
13. AUTOMATED DECISION-MAKING
Mrs. Red Art does not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.
14. SECURITY
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
No electronic transmission or storage system can be guaranteed to be completely secure.
15. THIRD-PARTY WEBSITES
The Site may contain links to independent third-party websites or services, including social media platforms.
If you follow such a link, the third party may process personal data in accordance with its own privacy practices. Mrs. Red Art is not responsible for the privacy practices of independent third-party websites or services.
16. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated where necessary to reflect changes to the Site, our processing activities, technology or applicable legal requirements.
When the Privacy Policy is updated, the revised version will be published on the Site and the “Last updated” date will be changed accordingly.
17. CONTACT
If you have questions about this Privacy Policy, wish to exercise your privacy rights or have a question concerning the processing of your personal data, please contact:
Data Controller: Veres Mihály Györgyné
Website/brand: Mrs. Red Art
Email: info@mrsredart.com