PRIVACY POLICY
We believe privacy should feel as natural as trust. That’s why we’re transparent about how we handle your data – and we only collect what we need to make this project work.
Below you’ll find everything you might want to know about how we store, use, and protect your information in line with the GDPR. Because Apanage is an evolving project, this Privacy Policy may be refined over time. We will always ensure that any updates remain consistent with our core principles of transparency, artistic independence, and data minimisation.
If anything’s unclear, we’re always happy to help.
Contact us at: privacy@apanage.gallery
1. Who we are
This Privacy Policy applies to all data collected and processed by The Apanage Gallery, represented by William Lindhorst (sole proprietor).
You can contact us at: privacy@apanage.gallery
2. What this is about
We take your privacy seriously. This policy explains which personal data we collect, why we collect it, and how we keep it safe – in accordance with the EU General Data Protection Regulation (GDPR).
3. What Data we collect
Depending on how you interact with Apanage, we may collect:
- Contact data (name, email address)
- Submitted content (artworks, artist statements)
- Participation and payment data (e.g. Stripe or PayPal)
- Website usage data (with consent via Squarespace cookie tool)
- Communication history (emails, support messages, form entries, and direct messages or comments on our social media channels, e.g. Instagram).
- Audit & Research Insights (responses regarding artistic practice, methods, aesthetic preferences, and cultural visions).
We do not collect sensitive personal data (e.g. health, religion, biometric data).
If you participate in Apanage Days, we may also collect billing-relevant data (e.g. country of residence, VAT status) to comply with international tax regulations (e.g. OSS).
4. How we collect Data
Data is collected when you:
- submit the artist registration (e.g. via Google Forms)
- are selected for participation and receive an invoice
- make a payment via a third-party provider (e.g. Stripe, PayPal)
- contact us directly
- interact with our website (via cookies & analytics – see section 6)
- we collect in-depth reflections on artistic practice via the Apanage Audit (powered by Fillout). These responses are technically decoupled from your personal identity to ensure total anonymity during the research phase
For the Apanage Audit, we collect in‑depth reflections on artistic practice, methods, aesthetic preferences and cultural visions. During the research phase, these responses are technically decoupled from your identity and processed in anonymized or aggregated form wherever possible, so that no conclusions can be drawn about individuals.We translate these anonymized, collective insights into cultural intelligence reports. This allows the Apanage Foundation to generate resources through strategic partnerships to fund artist stipends and protect artistic independence. We do not sell personal data; we only share anonymized insights.
We do not collect data from persons under 18 without legal guardian consent.
5. Why we use your Data
We use your data to:
- manage your artist registration and participation
- send invoices and process Contribution payments
- communicate with you during the project
- fulfil legal requirements (e.g. tax retention, accounting)
- display and promote your work (with your permission)
- translate anonymized, collective insights into cultural intelligence reports. This process allows the Apanage Foundation to generate resources through strategic partnerships – within our corporate structure and with ecosystem partners – to fund artist stipends and protect artistic independence. We do not sell personal data; we share anonymized wisdom to foster a more conscious relationship between culture and the economy.
- maintain and improve our internal relationship management with artists, partners, and supporters (CRM), including reasonable segmentation and automation of communication workflows.
The legal basis for data processing is Article 6(1)(b) GDPR – contract performance related to your participation in Apanage Days. In addition to Article 6(1)(b) GDPR (contract performance), we rely on:– Article 6(1)(f) GDPR (legitimate interests) for documenting and communicating Apanage Days and the broader Apanage movement, and– Article 6(1)(a) GDPR (consent) where we explicitly ask for your permission (for example newsletter or optional features).
Submitted artworks may be used in connection with the communication and documentation of current and future editions of Apanage Days. This usage is based on the terms agreed upon during submission and is limited to non-commercial promotional purposes.
6. Third-Party Tools & Services
We work with selected third-party providers to manage participation, communication, and payments. These providers only receive the data necessary for their role in the process.
Currently in use:
- Google Forms (registration form)
- Google Drive (project documentation and file storage)
- Stripe & PayPal (payment processing)
- Meta / Instagram / Facebook (Communication & Internal Client Management): We use the Meta Business Suite for the central management, organization, and categorization (using Labels and internal Notes) of direct messages and comments for the efficient handling of inquiries and for project coordination.
- Shopify: (website hosting, cookie handling, analytics)
- Fillout (Interactive Audits & Forms)
- Baserow (Secure Database Management)
- Make.com (Data Automation & Anonymization)
- Brevo: Used to manage email communication, mailing lists, and interaction data (e.g. from registrations, purchases, or social media inquiries) in a structured way. Brevo acts as our data processor for these purposes in accordance with applicable data protection law.
- Softr & Seal Subscriptions (Member Portal & Subscription Management) (Data Automation & Anonymization)
All providers are either based in the EU or comply with the EU–US Data Privacy Framework or equivalent safeguards.
By submitting your data, you consent to the use of these services for project-related purposes.
7. Cookies & Analytics
We use Shopify's cookie tool to request your consent for cookies. If you agree, we may collect analytics data through Google Analytics and show you relevant ads through Google Ads.
You can manage or withdraw consent at any time via our cookie settings.
8. Your Rights
Under the GDPR, you have the right to:
- access your personal data
- correct inaccurate or outdated data
- request the deletion of your data
- restrict or object to the processing of your data
- receive a copy of your data in a portable format
- lodge a complaint with a supervisory authority
To exercise your rights, contact us at: privacy@apanage.gallery
9. Data Retention & Deletion
We store personal data only as long as necessary for the project purpose or as legally required.
- Data related to participation (e.g. contact details, invoices, submitted files) is deleted no later than 12 months after the end of the respective Apanage Days edition, unless legal retention periods apply.
- Financial and tax-relevant data is retained in accordance with German legal requirements (typically up to 10 years).
- Submitted artworks are deleted after project completion unless their further use was explicitly agreed upon.
- Communication data (e.g. support messages) may be stored longer if legally or operationally necessary.
10. Updates to this Policy
We may update this Privacy Policy from time to time, for example if our processes, third‑party providers, or legal requirements change. The version published on this page is the legally binding version. If we make material changes that affect your rights or the way we use your data, we will inform you through appropriate channels (e.g. email, platform notice, or during the registration process).
Thank you for your trust. We’ll treat your data with the same care we give your art.