Privacy policy

Privacy Policy
Art!Rex | Curatorial and Management House
Last updated: April 2026

Art!Rex (Artirex Corporate Group commV, BTW BE1005285630), located in Antwerp, Belgium, is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Belgian law. This policy explains what data we collect, why we collect it, how we use it, and what rights you have.

1. Who We Are
The data controller is:

Artirex Corporate Group commV
Trading as Art!Rex | Curatorial and Management House
Antwerp, Belgium
VAT: BE1005285630
Email: info@arti-rex.com
Website: www.arti-rex.com

2. Data We Collect
We collect personal data only when you actively provide it or when it is generated automatically during your visit.

Data you provide directly: When you submit our contact form, we collect your name, email address, and the content of your message.

Data collected automatically: When you visit our website, we collect technical data through cookies and analytics tools, including your IP address (anonymised where possible), browser type, device type, pages visited, and time spent on the site. See our Cookie Policy for details.

3. Purposes and Legal Bases
Responding to enquiries — We use contact form data to respond to your message. Legal basis: legitimate interest (Article 6(1)(f) GDPR) or, where applicable, the performance of a pre-contractual relationship.

Website analytics — We analyse aggregated browsing data to understand how our site is used and improve it. Legal basis: consent (Article 6(1)(a) GDPR), obtained via our cookie banner.

Legal obligations — We may process data where required by Belgian or EU law. Legal basis: legal obligation (Article 6(1)(c) GDPR).

We do not use your data for automated decision-making or profiling.

4. How Long We Keep Your Data
Contact form enquiries are retained for a maximum of two years from the date of last correspondence, unless a longer retention period is required by law or the enquiry results in an ongoing professional relationship. Analytics data is retained in accordance with the retention settings of our analytics provider.

5. Who We Share Data With
We do not sell, rent, or trade your personal data. We may share it with the following categories of trusted third parties, solely to operate our website and business:

Webflow, Inc. — our website hosting and CMS provider, based in the United States. Data transfers are governed by Standard Contractual Clauses (SCCs) as provided by Webflow's Data Processing Agreement.

Analytics providers — such as Google Analytics or equivalent, used under appropriate data processing agreements. Where applicable, IP anonymisation is enabled.

All third-party processors are bound by contractual obligations to process your data only on our instructions and in accordance with GDPR.

6. International Transfers
Some of our service providers are located outside the European Economic Area (EEA), including in the United States. In such cases, transfers are safeguarded by appropriate mechanisms such as Standard Contractual Clauses approved by the European Commission.

7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:

Right of access — you may request a copy of the data we hold about you.
Right to rectification — you may ask us to correct inaccurate or incomplete data.
Right to erasure — you may request that we delete your data, subject to legal retention obligations.
Right to restriction — you may ask us to limit how we use your data in certain circumstances.
Right to data portability — where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
Right to object — you may object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@arti-rex.com. We will respond within 30 days.

If you believe your rights have not been respected, you have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit): www.dataprotectionauthority.be.

8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is hosted on Webflow's secure infrastructure with HTTPS encryption.

9. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Material changes will be communicated via a notice on our website.