Skip to content
ARTDENTIFIED

Privacy policy

ARTDENTIFIED ApS, CVR 46698452, Denmark, is the data controller for personal data collected through this site. We process personal data in accordance with the GDPR and the Danish Data Protection Act. You can reach us at hello@artdentified.com.

Data we collect

  • Account data: name, email, password (stored encrypted), profile details and, for artists, biography, CV, images and links.
  • Order data: artworks purchased, prices, delivery and billing address, phone number, order and shipping history, invoices and settlement statements.
  • Payment data: handled by Stripe. We receive confirmation, the last four digits of the card and payout details; we never store full card numbers.
  • Correspondence: enquiries, applications and support messages you send us.
  • Usage data: IP address, device and browser type, pages viewed and, if you have consented to analytics or marketing cookies, the identifiers set by those tools.

Why we use it, and on what legal basis

  • Operating your account and completing orders: performance of a contract (art. 6(1)(b)).
  • Payouts, settlement statements and bookkeeping: legal obligation (art. 6(1)(c)), including the Danish Bookkeeping Act.
  • Fraud prevention, security and improving the platform: legitimate interests (art. 6(1)(f)).
  • Newsletters, and analytics or marketing cookies if we later use them: your consent (art. 6(1)(a)), which you can withdraw at any time.
  • Establishing or defending legal claims: legitimate interests (art. 6(1)(f)).

We never sell personal data, and we do not use automated decision-making or profiling with legal effect.

Who we share it with

We share data only with suppliers who process it on our behalf under a data processing agreement: our hosting and infrastructure provider, our database, authentication and file storage provider, our email delivery provider, Stripe for payments and payouts, and shipping partners for delivery. A current list of sub-processors is available on request. If we later add analytics or marketing tools with your consent, those providers will also receive data only to the extent covered by your consent. When you buy an artwork, the artist receives the information needed to ship and invoice the work. We also disclose data where required by law or by a public authority.

Stripe acts as an independent controller for parts of the payment and anti-money-laundering processing it carries out, in accordance with its own privacy policy. Our accountant and, where relevant, our legal advisers may also receive data as separate controllers subject to professional duties of confidentiality.

Where the data comes from, and what is required

We collect data directly from you, and from your use of the platform. Payment and verification details are received from Stripe. Account, order and, for artists, identity and payout details are necessary to conclude and perform the contract; without them we cannot create an account, complete an order or pay out a sale. Providing consent to newsletters or to any future analytics or marketing cookies is entirely voluntary.

Given the nature and scale of our processing we are not required to appoint a data protection officer. Data protection questions are handled by the contact address above.

Transfers outside the EU/EEA

Some suppliers process data outside the EU/EEA. Such transfers take place on the basis of the European Commission’s standard contractual clauses or an adequacy decision, together with supplementary safeguards where needed.

How long we keep it

Account data is kept while your account is active and deleted within 12 months of closure. Accounting material, including orders, invoices and settlement statements, is kept for five years from the end of the financial year, as required by the Danish Bookkeeping Act. Correspondence is kept for up to three years, and marketing consent until it is withdrawn. If we later use analytics cookies, the data will be kept for up to 24 months.

Security

We apply appropriate technical and organisational measures, including encrypted transmission, access control, row-level access restrictions in our database and regular review of permissions. In case of a personal data breach that poses a risk to you, we notify the Danish Data Protection Agency and, where required, you directly.

Your rights

You have the right to access your data, to have inaccurate data corrected, to have data deleted, to have processing restricted, to object to processing based on legitimate interests, to data portability, and to withdraw consent at any time without affecting processing carried out before withdrawal. Write to hello@artdentified.com and we aim to respond within 48 hours on weekdays. Requests to exercise your data protection rights are handled within the applicable statutory deadline, normally one month.

You can also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.

Children

The platform is not directed at children. You must be at least 18 years old to create an account.

Cookies

See our cookie policy for details of the cookies we use and how to change your choices.

Changes to this policy

We may update this policy as the platform develops or as legal requirements change. The current version is always published here with the date below, and we notify registered users by email of material changes before they take effect.

Last updated: September 2026.