Privacy Policy

This Privacy Policy explains how waveL art collects, uses, and protects your personal data when you visit our website or get in touch with us.

01Who we are

waveL art is a PR agency and art consultancy based in Athens, Greece and Luxembourg. For the purposes of the EU General Data Protection Regulation (GDPR) and applicable national law, waveL art is the data controller responsible for your personal data.

waveL art · Athens — Luxembourg
Email: hello@wave-l.com
Phone: +352 621 968 002 · +30 698 072 3215

02Scope of this policy

This policy applies to personal data we collect through the website wavelart.com, through our contact channels (email, phone, and contact forms), and in the course of providing our consultancy and PR services. It does not apply to third-party websites we link to, which operate under their own privacy policies.

03The personal data we collect

Information you give us

When you complete our contact form or write to us, we may collect:

your first name (and surname, if you provide it);
your email address;
your phone number;
the service or area you are interested in (Artists, Galleries, Curators, Collectors, Businesses, Institutions);
the content of your message and any details you choose to share about your project, collaboration, or partnership.

Information we collect automatically

When you visit the website, our servers and cookies may collect technical data such as your IP address, browser type and version, device information, the pages you view, and the date and time of your visit. For details, please see our Cookie Policy.

Information from third parties

If you interact with us through social media (for example Instagram or LinkedIn), we may receive limited information in line with the privacy settings of those platforms.

04Why we process your data and our legal bases

We only process personal data where we have a lawful basis to do so under Article 6 GDPR:

Consent — when you submit an enquiry, subscribe to communications, or accept non-essential cookies. You may withdraw consent at any time.
Performance of a contract / pre-contractual steps — to respond to your request and to provide our services to you or the organisation you represent.
Legitimate interests — to operate, secure, and improve our website, to manage our client and professional network, and to communicate about our work, provided your rights do not override those interests.
Legal obligation — where we must retain or disclose data to comply with the law.

05How we use your data

to respond to your enquiries and discuss potential projects, collaborations, or partnerships;
to provide, manage, and develop our consultancy and PR services;
to send you relevant updates and news where you have agreed to receive them;
to maintain, secure, and improve the website and our services;
to comply with our legal and regulatory obligations.

06Who we share your data with

We do not sell your personal data. We may share it with:

Service providers (processors) who act on our behalf, such as our website hosting provider and email and communication tools. These providers may only process your data on our instructions and under appropriate safeguards.
Professional partners within our network, but only where relevant to a project and, where required, with your consent.
Authorities or advisers where disclosure is necessary to comply with the law, exercise or defend legal rights, or protect the security of our services.

07International transfers

We are based in the European Union. Where any of our service providers process personal data outside the European Economic Area (EEA), we ensure an adequate level of protection through mechanisms recognised under the GDPR, such as a European Commission adequacy decision or Standard Contractual Clauses.

08How long we keep your data

We retain personal data only for as long as necessary for the purposes set out in this policy. Enquiry data is generally kept for the duration of our correspondence and for a reasonable period afterwards; client and contractual records are kept for the period required by applicable accounting and legal obligations. When data is no longer needed, we securely delete or anonymise it.

09Your rights

Subject to the conditions set out in the GDPR, you have the right to:

access the personal data we hold about you;
request correction of inaccurate or incomplete data;
request erasure of your data ("right to be forgotten");
request restriction of, or object to, our processing;
receive your data in a portable format (data portability);
withdraw your consent at any time, without affecting prior lawful processing.

To exercise any of these rights, please contact us at hello@wave-l.com. You also have the right to lodge a complaint with a supervisory authority — in Luxembourg, the Commission nationale pour la protection des données (CNPD); in Greece, the Hellenic Data Protection Authority (HDPA).

10How we protect your data

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. No method of transmission over the internet is completely secure, but we work to safeguard your information and to address any incident promptly.

11Children

Our website and services are intended for professionals and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

12Third-party links

Our website may contain links to external sites, including those of artists, galleries, partners, and social platforms. We are not responsible for the content or privacy practices of those sites and encourage you to review their policies.

13Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version, with its "last updated" date, will always be available on this page.

14Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at hello@wave-l.com.