Privacy Policy 

Last updated: 01/2026

1. Controller

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) is:

MEVE Gallery
Graz, Austria

2. General information 

We take the protection of your personal data very seriously. We process personal data exclusively in accordance with the GDPR and applicable Austrian data protection laws. 

This Privacy Policy explains the nature, scope, and purpose of the collection and use of personal data when you visit our website, contact us, or purchase products through our online shop. 

 

3. Personal data 

“Personal data” means any information relating to an identified or identifiable natural person, such as name, address, email address, IP address, or payment information. 

 

4. Data processing when visiting our website 

When you visit our website, the following data may be processed automatically: 

  • IP address
  • date and time of access
  • browser type and version
  • operating system
  • referring URL
  • pages visited

This data is processed for the purpose of: 

  • ensuring website functionality and security
  • improving website performance and user experience
  • preventing misuse and fraud

Legal basis:
Art. 6(1)(f) GDPR (legitimate interest) 

5. Contact by email or contact form 

If you contact us by email or via a contact form, we process the personal data you provide (e.g. name, email address, message content) solely for the purpose of responding to your inquiry. 

Legal basis:
Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures)
Art. 6(1)(f) GDPR (legitimate interest in communication) 

6. Online shop and orders 

When you place an order through our online shop, we process the following data: 

  • name
  • billing and shipping address
  • email address
  • payment information
  • order details

This data is required to process your order, deliver products, handle payments, and comply with legal obligations. 

Legal basis:
Art. 6(1)(b) GDPR (performance of a contract)
Art. 6(1)(c) GDPR (legal obligation) 

7. Payment service providers 

Payments are processed via external payment service providers (e.g. credit card providers, PayPal). We do not store full payment data ourselves. 

Payment providers process your data under their own responsibility in accordance with their privacy policies. 


8. Newsletter (if applicable) 

If you subscribe to our newsletter, we process your email address and any additional data you voluntarily provide. 

Subscription is based on a double opt-in procedure. 

You may unsubscribe at any time by clicking the unsubscribe link in the newsletter or by contacting us at [email protected]. 

9. Cookies 

Our website may use cookies to ensure proper functionality and improve user experience. 

You may restrict or disable cookies through your browser settings. Please note that disabling cookies may limit website functionality. 

10. Third-party services and links 

Our website may contain links to third-party websites. We have no control over the content or data processing practices of those websites and accept no responsibility for them. 

11. Data retention 

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by statutory retention obligations under Austrian or EU law. 

12. Data security 

We implement appropriate technical and organizational security measures to protect personal data against loss, misuse, unauthorized access, disclosure, or alteration.