Privacy Policy

1. Introduction

This Privacy Policy describes the manner in which AimHigh Agency collects, uses, stores, and protects the personal data of visitors and users of the L’Artelier by Kate website.

Protecting your privacy is a fundamental priority for us. For this reason, we aim to process all personal data in a lawful, transparent, and secure manner, and only to the extent truly necessary for the operation of the website, our communication with you, and the handling of your requests.

By browsing the website and submitting your information through the available forms, you acknowledge that you have been informed of this Privacy Policy and that you understand how your data may be processed.

2. Data Controller

The controller of the personal data collected through the website is:

AimHigh Agency
Email: [email protected]
Phone: 211 018 1785

AimHigh Agency is responsible for the management of the website, the operation of the contact forms, and the overall organization of the collection and processing of the data submitted through it. For any matter related to your personal data, as well as for the exercise of your rights, you may contact us using the details above.

3. What personal data we collect

When using the website, we may collect personal data either directly from you, when you voluntarily submit it through a contact form, or automatically through the technical operation of the website and its related systems.

3.1 Data you submit yourself

When you contact us through the website, you may be asked to complete certain information so that we can respond to your request or manage your interest in purchasing an artwork or requesting a custom creation.

This information may include:

• Full name
• Email address
• Contact phone number
• The nature of your interest, such as artwork purchase, custom artwork, or a general inquiry / contact request

Certain fields may be mandatory, because without them it may not be possible for us to communicate with you properly or handle your request. If the required fields are not completed, the form may not be submitted successfully or we may not be able to properly assist you.

3.2 Data collected automatically

While you browse the website, certain technical and functional data may be collected automatically, related to your device, browser, and the way you interact with the website.

Such data may include, indicatively:

• IP address
• Device type
• Browser and operating system
• Date and time of access
• Basic browsing data
• Information related to cookies and similar technologies

This information is used mainly for technical, operational, and security purposes, as well as for improving the overall user experience.

4. The purposes for which we use your data

The processing of personal data collected through the website takes place only for specific, clear, and lawful purposes.

In particular, we use your data in order to:

• Receive and manage the messages you send us
• Respond to inquiries regarding available artworks, custom orders, or general communication
• Take the necessary pre-contractual steps when interest is expressed in a purchase or collaboration
• Manage a possible order
• Support relevant communication before the completion of a purchase or assignment
• Comply with tax, accounting, or other legal obligations where required
• Ensure the proper operation of the website
• Maintain system security
• Prevent malicious use
• Preserve the stability of the platform

At present, the information collected through the website is not used for newsletters or systematic promotional activities without an appropriate legal basis or your prior consent. If such functions are introduced in the future, this Policy will be updated accordingly.

5. Legal bases for processing

The processing of your personal data is based, as applicable, on different legal bases depending on the nature of each request and the purpose of the processing.

In most cases, processing is necessary in order for us to respond to a request that you yourself submit, such as when you contact us regarding an artwork, request information, or express interest in a custom creation. In such cases, processing is necessary for taking steps prior to a possible agreement or for managing a related collaboration.

In other cases, processing is based on our legal obligation, particularly where retaining certain information is required for tax, accounting, or legal reasons.

Certain processing activities may also be based on our legitimate interest, such as for security purposes, technical administration, protection of the website, and the proper functioning of our systems.

Finally, where required by law, such as for non-essential cookies or for future promotional communications, processing will be based on your prior consent.

6. Who has access to your data

Access to your personal data is limited only to those persons and partners who need to process it for the purposes described in this Policy.

For the operation of the website and related systems, technical providers and platforms may be used that process data on our behalf. At this stage, the website and its forms are supported by services such as GoHighLevel and LeadConnector, which are used for the management of communication, leads, forms, and the related technical infrastructure.

Your data may also be disclosed to third parties only where this is necessary for compliance with legal obligations, for the establishment, exercise, or defense of legal claims, or where required by a competent authority or by law.

In all cases, we do not sell, trade, or transfer your personal data to third parties for their own independent advertising purposes.

7. Transfer of data outside the European Economic Area

Some of the technology providers used for the operation of the website or its communication infrastructure may process data in countries outside the European Economic Area.

In such cases, efforts are made to ensure that the transfer takes place with appropriate safeguards and through mechanisms recognized by the applicable legal framework, so that an adequate level of protection of personal data is ensured.

The use of such providers does not mean that your data is used freely or without control. On the contrary, any transfer is limited to the extent functionally necessary and takes place within the framework of the available contractual and regulatory safeguards.

8. Data retention period

We retain personal data only for as long as necessary to serve the purpose for which it was collected, as well as for as long as required by applicable law or by reasonable operational and organizational needs.

Communication requests and the information submitted through the website are generally retained for up to 24 months from the last meaningful communication, so that we can monitor the relevant correspondence and handle any follow-up or recurring requests.

Information related to financial, tax, or accounting obligations is retained for as long as required by the applicable legislation.

Technical data, logs, or security-related information may be retained for the strictly necessary period justified by the operation, stability, and protection of the website and its infrastructure.

After the appropriate retention period has expired, the data is deleted, destroyed, or anonymized, unless there is a lawful reason for further retention.

9. Cookies and related technologies

The website uses cookies and similar technologies for its proper technical operation, secure browsing, and the improvement of user experience.

Some cookies are strictly necessary for the website to function properly and do not require prior consent. Others, depending on the configuration of the website and the active services used, may relate to functional or other non-essential uses and are activated only in accordance with the choices you make through the cookie consent mechanism.

The policy specifically concerning cookies, their categories, duration, and management is described in more detail in the website’s separate Cookies Policy.

10. Security of personal data

We take reasonable and appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration, accidental modification, or unlawful disclosure.

These measures include, as applicable:

• Access restrictions
• Use of secure systems and platforms
• Organizational controls
• Cooperation with providers that state they apply corresponding security and data protection policies

However, it should be noted that no method of data transmission or storage over the internet can be considered completely secure. For this reason, although we make every reasonable effort to protect your information, absolute security cannot be guaranteed in every case.

11. Your rights

In accordance with the applicable personal data protection legislation, you have a number of rights in relation to your data.

Depending on the case, you may request information as to whether we process your personal data, gain access to it, request correction of inaccurate or incomplete information, request its deletion, request restriction of processing, or object to specific forms of processing.

Where applicable, you may also have the right to data portability or the right to withdraw consent, provided that the processing is based on consent.

We will examine each request with due care and in accordance with the applicable regulatory framework. To exercise your rights, you may contact us at:

[email protected]

12. Right to lodge a complaint

If you believe that the processing of your personal data is not carried out in accordance with the applicable legislation, you have the right to lodge a complaint with the competent supervisory authority.

In Greece, the competent authority is the Hellenic Data Protection Authority (HDPA). More information regarding your rights and the complaint procedure can be found on its official website.

13. Minors

The website is not specifically designed for children and is not intended exclusively for minors. We do not knowingly seek to collect personal data from minors in a manner that violates applicable law or without the necessary legal basis.

If it is found that personal data of a minor has been submitted without the necessary conditions being met, reasonable measures will be taken to delete it or otherwise manage the matter in accordance with the law.

14. Links to third-party websites

The website may include links to third-party websites, platforms, or services. These websites operate independently from us and are governed by their own privacy policies, terms of use, and data processing practices.

For this reason, we recommend that before using third-party services or submitting your information to external websites, you read their respective policies carefully.

15. Changes to this Policy

This Privacy Policy may be amended or updated from time to time in order to reflect changes in legislation, technology, the operation of the website, or the services used.

The most recent version will always be available on the website and will include the relevant date of last update. We recommend that you check this page periodically so that you remain informed of any changes.

16. Contact

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights, you may contact us using the following details: