PRIVACY POLICY

(pursuant to Articles 13 and 14 GDPR)

Baranow Art Gallery GmbH

(operator of the BWORLDART platform)

Krottenbachstraße 103

A-1190 Vienna

Austria

Email: info@bworldart.com

1. Introduction

The protection and lawful processing of personal data is of high importance to us.

This Privacy Policy explains how Baranow Art Gallery GmbH, acting as the operator of the

BWORLDART platform, collects, processes, and protects personal data.

This policy applies to personal data processed through:

• the BWORLDART website
• user accounts on the platform
• communications with users
• related services provided by the platform

The platform connects artists, galleries, collectors, and art buyers worldwide.

2. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Baranow Art Gallery GmbH

(operator of the BWORLDART platform)

Krottenbachstraße 103

A-1190 Vienna

Austria

Email: info@bworldart.com

3. Categories of Personal Data Processed

We may process the following categories of personal data.

3.1 Identification Data

• Full name
• Date of birth (if required)
• Nationality
• Identity verification information (if legally required)

3.2 Contact Data

• Email address
• Phone number
• Billing address
• Shipping address

3.3 Payment and Transaction Data

• Bank account details
• Payment confirmation information
• Transaction history
• Escrow payment data

Payments are processed through secure payment providers.

3.4 Artist and Gallery Information

• Portfolio information
• Biography or gallery description• Artwork data
• Certificates of authenticity
• Business registration information (if applicable)
• Tax identification numbers (if required)

3.5 Technical Data

• IP address
• Browser type
• Device information
• Cookies and usage analytics

4. Purposes and Legal Basis of Processing

Personal data is processed for the following purposes.

4.1 Contract Performance

(Art. 6(1)(b) GDPR)

• Managing user accounts
• Processing artwork purchases
• Managing subscription services
• Coordinating logistics and delivery
• Communication between users
• Order management and support

4.2 Legal Obligations

(Art. 6(1)(c) GDPR)

• Tax and accounting requirements
• Anti-money laundering regulations
• Regulatory compliance

4.3 Legitimate Interests

(Art. 6(1)(f) GDPR)

• Platform security
• Fraud prevention
• Platform improvement
• Analytics and performance monitoring
• Protection of intellectual property rights

4.4 Consent

(Art. 6(1)(a) GDPR)

• Newsletter subscription
• Marketing communications
• Optional profile information

Users may withdraw consent at any time.

5. Sources of Personal Data

Personal data may be obtained:

• directly from users
• during platform registration
• through transactions on the platform
• from publicly available sources (if required for verification)

6. Recipients of Personal Data

Personal data may be shared with:• payment service providers (e.g., Stripe)

• banks
• logistics and shipping companies
• insurance providers
• IT service providers
• legal advisors
• tax authorities where required by law

Data is shared only to the extent necessary for platform operation or legal compliance.

Where service providers process data on our behalf, this is done under Article 28 GDPR (data

processing agreements).

7. International Data Transfers

As BWORLDART operates internationally, personal data may be transferred outside the European

Economic Area.

Such transfers occur only:

• based on adequacy decisions of the European Commission
• through appropriate safeguards under GDPR
• where necessary for the performance of a contract

8. Data Retention

Personal data is retained:

• as long as necessary for contractual obligations
• as required by tax and commercial regulations
• as long as warranty or liability claims may arise

After the expiration of legal retention periods, personal data is deleted or anonymized.

9. Financial Processing and Escrow Payments

Payments for artworks are processed through secure payment providers.

The platform may temporarily hold funds in escrow to ensure transaction security.

Financial information is stored only as long as required by applicable financial and tax regulations.

10. Automated Decision-Making

BWORLDART does not use automated decision-making or profiling within the meaning of Article

22 GDPR.

11. Cookies and Analytics

The website uses cookies and similar technologies for:

• technical functionality
• platform security
• analytics
• improving user experience

Detailed information about cookies is provided in the Cookie Policy.

Users may adjust cookie settings at any time through their browser or cookie banner.

12. Your Rights Under GDPR

Under GDPR, users have the right to:

• access their personal data (Art. 15 GDPR)
• correct inaccurate data (Art. 16 GDPR)
• request deletion of personal data (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• request data portability (Art. 20 GDPR)
• object to data processing (Art. 21 GDPR)
• withdraw consent at any time (Art. 7(3) GDPR)

Requests may be submitted via the contact email listed above.Identity verification may be required before fulfilling requests.

13. Complaints

If you believe that your data is processed unlawfully, you have the right to lodge a complaint with

the competent supervisory authority.

In Austria:

Austrian Data Protection Authority

Barichgasse 40–42

1030 Vienna

Austria

14. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal, technical, or operational

changes.

The latest version will always be available on the BWORLDART website.