Politique de confidentialité

Date processing and management of cookies

In force on 15 september 2022


Preamble :

This policy is drafted in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal Data and on the free movement of such Data (hereinafter the "GDPR"), and in accordance with the provisions of French Data Protection Act n°78-17 of 6 January 1978 amended by Act n°2018-493 of 20 June 2018 (hereinafter the « French Data Protection Act ».

This privacy policy may be amended by the Controller. Any changes shall be published on this page. Any amendments may concern the processing of new Users’ Data and may be the consequence of a legislative change. In the event of amendments to Data processing procedures, the User shall be informed.


1. Definitions


User: means any natural person which makes any of the following activity:

  • visits and navigates on the Website;
  • may contact the Controller;
  • deposits his/her email address as an Artist in order to receive calls for applications to participate in Events;
  • deposits his/her email address as an Organizer to know the artists interested to participate in Events.

Website: means the website published by the Controller at the following URL address: https://www.staamgallery.com

Data: means the User Data collected through the Website for the purposes detailed below.  

Controller: The company Simon & Colin’s, a simplified stock company, whose registered quarters are located at 679 avenue de la République, 59 000 LILLE, registered before the French Commercial Register of Lille, under number 883 294 241, represented by Mr. Ludovic SIMON, duly empowered for this purpose.

Organiser: means the natural or legal person, represented by its legal representative or any person duly empowered, public or private, acting as a professional, which means the individual who acts for purposes that fall within the scope of the commercial activity, or any association whose activity is the organisation of events, who registered on the Marketplace to allow Artists to participate at the Event promoted by the Organiser by responding to Calls for Application.     

Artists: refers to visual artists who create works in the following artistic fields: photography, painting, sculpture, collages, etc., and are individuals who have passed the age of eighteen (18) years, or are represented by their legal guardian, and who register on the Marketplace in order to be able to respond to the Calls for Applications in the context of their professional activities or for leisure purposes.  

Calls for Application: refers to the advertisements promoted on the Marketplace by the Organisers and to which the Artists may respond in order to be selected to participate in the Event. The Calls for Applications are open for a certain period. The start and end dates to apply are specified in the advertisement.

Events: means the events organised by the Organisers to which the Artists may participate after having responded to a Call for Applications and only if they have been selected by the Organiser.

Platform: means the Marketplace published on the present Website under the commercial name «Staam up», allowing the connection between the Artist and the Organisers.


2. Purpose of the Privacy Policy


The purpose of this Privacy Policy is to inform the User about how his/her Data are processed by the Controller.

The User may contact the Controller by oral or written means as explained in article 6 below in order to exercise his/her rights in relation to their Data.


3. Implementation of the Processing

The Controller implements the processing of personal Data in accordance with the provisions of the GDPR and the French Data Protection Act.

The controller, who is the person the User may contact, is: Mr. Ludovic SIMON.

Email: contact@staamup.com


4. Collected Data, place of collection and purposes of Processing


4.1 Collected Data

Regarding the Artists:

  • email address;   
  • name and surname; 
  • phone number;
  • postal address;
  • works created by the Artist; 
  • previous events to which he/she has participated;  
  • reward on his/her work;
  • background;
  • tiltles and files of his/her works.    

Regarding the Organisers:

  • name and surname of the legal representative or authorised representative in the case of a company; 
  • full name of the natural person acting as a freelancer;  
  • email address;
  • postal address;
  • e-mail address of the contact where the Event shall take place.   

In the event that the Organiser wishes to create an Event for which he or she wishes to collect Entry Fees, the Organiser shall also be required to provide the following additional information:

  • telephone number;
  • RIB;
  • SIREN or SIRENE number;
  • RNA number for associations; 
  • statutes of the company or association;
  • two pieces of identification.

Regarding Users that require information from the Platform:

  • e-mail address.

4.2 Place of collection:

The Data are collected directly by the Controller on this Website when the User:  

  • Register his/her email address; or
  • Wishes to create an account in order to respond to Calls for application as an Artist; or
  • Wishes to create an account in order to advertise Calls for application as an Organiser. 

4.3 Purposes of the Processing:

The Processing is implemented:  

  1. allow the Artists to create an account in order to respond to Calls for application;
  2. allow the Organiser to create an account in order to enter in contact with the Artists;
  3. answer to the User’s request after receiving a contact request.  


5. Legal basis of the Processing

Users’ Data are collected on the following legal basis:

  1. to allow the execution of the service required by the User when creating an account on the Website;  
  2. to answer to the Users’ request when contacting the Controller.

As a result, and in accordance with Article 6 of the GDPR, from the moment the User creates an account on the Website or contacts the Controller, he/she consents to the use of his/her Data in order to allow the Controller to execute the service or answer to his/her request.


6. Length of data retention


The Data are kept for the duration of the contractual relationship between the User and the Controller.

The Data are deleted from the Website as soon as the User has deleted his/her account.

Afterwards, the Artist’s Data shall be deleted from the Marketplace files within THIRTY (30) Days from the date of the last Event to which the Artist have participated.

The Organiser's Data shall be deleted from the Marketplace files within THIRTY (30) Days from the date of the last Event carried out by the Organiser.

The User’s Data shall be archived for reasons of legal certainty, particularly in the context of litigation for the establishment, exercise or defense of the legal rights of each of the Parties.

The User’s Data relating to order management, invoicing and payment are kept for a period of 10 years from the end of the contractual relationship.


7. Rights of the User


In accordance with the provisions of article 14 of the GDPR, the User is informed that he/she has the following rights in relation to his/her own Data:

  • Right of access: means the right to obtain the list of Data processed by the Controller;  
  • Right of rectification: means the right to request from the Controller the rectification of Data in case the Data is inaccurate or incomplete;
  • Right of erasure: the right of requesting from the Controller the erasure of the Data at the end of the contractual relationship, except in cases of the Controller needing to keep the Data for the recognition; exercise or defence of the rights;
  • Right to withdraw consent: means the right for the User to withdraw his/her consent given for the Processing of his/har Data when the Processing has not a legal basis, which means for any other reasons than the performance of the services required from the User;  
  • Right of opposition: means the right to oppose the use of Data for commercial purposes in particular;
  • Right to Data portability: means the possibility of the User obtaining from the Controller a Data transfer to another Controller and, if technically possible, to obtain a copy of the Data;
  • Right to restriction of processing: means the right for the User to contest the accuracy of the Data and requires from the Controller to sustain the Processing during the time of the verification of the accuracy ; the restriction of the Data in case of unlawful Processing; the Data retention for establishment, exercise or defence of legal claims or for the protection of the rights;
  • Right to lodge a complaint: means the right to lodge a complaint with the French Data Protection Authority (CNIL) or with any data protection supervisory authority. 

The exercise of all the aforementioned rights is exercised by the User directly with the Controller  by writing to the Controller at the following email address: contact@staamup.com in enclosing the copy of his/her ID Card.

Where the User makes the request by electronic means, the information shall be provided in a commonly used electronic form, unless otherwise required by the User which can receive the information by oral means after verification of the User’s identity. 


8. Data security

The Controller undertakes to take all appropriate measures to ensure the security and confidentiality of the Data whether it is at the time of Data collection on the Website or while processing the Data within its information system.

On the Website, the Data collection are secured by means of the https protocol.

In the same way, the Controller ensures the security of the Data contained in its files so that no unauthorised third party can have access to both the level of computer security and the physical security of its premises.


9. Use of cookies

9.1 Défintion of cookies

Cookies are small files that are deposited on the User's terminal when he/she visits a website. Cookies may be deposited by the Controller or by third parties’ websites as social networking sites.

Article 32-II of the French Data Protection Act which provides that tracers (cookies and others) requiring the prior consent of the User may not be deposited or read on the terminal of the User until s/he has given his/her consent.

However, an exception to the User's prior consent is provided by the directive with respect to storage or technical access which exclusively intends to effect or facilitate the transmission of a communication, which is strictly necessary for the provision of a service of the information society and expressly requested by the User. These include cookies technical allowing to ensure security and an optimal navigation on the Website.

In accordance with the provisions of these texts, the Controller informs the User, through the display of a banner on the homepage of the Website, that the Controller or third parties use cookies. Therefore, the Controller requires from the User that he/she manages his/her preferences as explained below:

The consent of the User is valid for a period of THIRTEEN months.


9.2 Type of cookies used and consent of the User:

As soon as the User browses the Website, cookies are used for the purposes detailed below for each type of cookie.

With the exception of technical cookies, the User may disable these cookies. The User may accept or reject them on a case-by-case basis or refuse all cookies at one time.

  • Technical cookies for navigation: these cookies are essential to browse the Website and allowing the use of the services offered on the Website.
  • Cookies for audience measurement purposes: these kinds of cookies make possible to measure the use and performance of the Website, to establish statistics, volumes of use and use of the Website's services (content visited, User's journey) to optimise the ergonomics of the Website and offer products and services.

Except for technical cookies, the User shall give his/her consent for the use of cookies for audience measurement purposes and can therefore accept or refuse them by clicking on the following link: EN : https://www.staamgallery.com/en/my-parameters


10. Transfer of Data to third parties and outside the European Union


At the date of this Privacy Policy, the Controller transfers the Data to his web service provider for the purpose of hosting and maintaining the Website.

The Controller does not transfer the Date outside the French territory.

However, due to the necessity of treatment of his/her response to a Call for application, the Artist communicates his/her Data to the Organisers, who may be located in any country. As a result, the Artist may directly contact the Organiser in order to exercise his/her rights over his/her Data.

The Artist is informed that some countries do not have the same levels of rights and guarantees on the protection of personal data as the protection offered by European rules.


11. Governing Law


This Policy is drafted in accordance with the GDPR and the French Data Protection Act provisions. 

Any dispute relating to the interpretation and execution of this Policy shall be subject to these texts.

However, in the event of a dispute and with regard to the provisions of Regulation No. 593/2008 of 17 June 2008 on the law applicable to contractual obligations (known as the Rome I Regulation), this choice of law may not result in depriving the User of the protection afforded by the provisions to which it may not be derogated from by virtue of the law that would have been applicable in the absence of choice of law.

In the event of any dispute arising out of the performance of these Privacy Policy, the Parties will make their best efforts before settling the dispute amicably. In the event of a complaint, the User may send his request to the Controller to the address indicated in Article 1 above.

The User is informed that he/she can lodge a complaint with the French Data Protection Authority (CNIL). He/she may also contact his/her local Data protection authority.

Failing to find an amicable solution, all disputes concerning both their validity, their interpretation, their execution, their termination, their consequences shall be submitted to the competent courts with regard to Article 17 of the Regulation (EU) No 1215/2012 of 12 December 2012 on jurisdiction and the recognition and enforcement of judgments in civil and commercial matters (Brussels I bis recast Regulation).

original artwork
with certificate of authenticity
by specialists
Free returns
up to 14 days after receipt
Secure payments
by credit card or bank transfer