Privacy Policy


pursuant to art. 13 of Regulation (EU) no. 679/2016 (or 'GDPR')

Dear user,

access to the site does not require typing in one's personal details. To use the online service ('Shop' section) and to have access to other additional services ('Contact' section), you must also enter, if requested, your personal data in the appropriate sections of the site.

'Sangiorgio Arte Srl' with headquarters in Via Sparano 79, 70121 Bari (IT, Bari Business Register no. 254759247
VAT number 08067390727, E-MAIL:; PEC: -TEL: 080/5468864 protects the confidentiality of personal data and guarantees them the necessary protection from any event that could put them at risk of violation.

As required by the European Union Regulation n. 679/2016 (or GDPR), and in particular to the art. 13, the information required by law relating to the processing of personal data is provided below to the user (or interested party).


Who we are and what data we process (Article 13, paragraph 1, letter a, Article 15, letter b GDPR)

'Sangiorgio Arte srl' operates as Data Controller and can be contacted at the e-mail address: and collects and/or receives information concerning the interested party, such as:

Personal data

name and surname (possibly), company name, e-mail address(es) and telephone number (possibly)

Telematic traffic data

Log (possibly)source IP address

'Sangiorgio Arte srl' does not require the interested party to provide so-called "particular" data, or, according to the provisions of the GDPR (art. 9), personal data revealing racial or ethnic origin, political opinions, religious beliefs or philosophical or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sex life or sexual orientation of the person. In the event that the service requested from 'Sangiorgio Arte srl' requires the processing of such data, the interested party will receive specific information in advance and will be asked to give specific consent.

SanGiorgioArte also uses the whatsapp instant messaging platform in order to make communication more immediate with those among your contacts who have expressed their consent to receive information on the organization of exhibitions and events organized at their headquarters.

This service can be used free of charge and is provided in compliance with current legislation on the protection of personal data and in the manner defined in this document.

The user declares to have read and accepted this privacy policy; to authorize, for this reason, the SanGiorgioArte Gallery to send messages.

At any time, the user can request not to receive information via whatsapp instant messaging.


For what PURPOSES do we need the data of the interested party (art. 13, 1st paragraph GDPR)

The data are used by the Data Controller to follow up on contact requests forwarded by the Data Subject in the specific 'Contacts' section of the website to possibly provide assistance as well as to fulfill the legal ('Shop' Section) and regulatory obligations to which the Data Controller is required according to the activity carried out. In no case does 'Sangiorgio Arte srl' resell the personal data of the interested party to third parties or use them for undeclared purposes.

In particular, the data of the interested party will be processed to carry out the preliminary activities and consequent to the request for management of requests for information and contact ('Contacts' section) as well as for the fulfillment of the contract ('Shop' section) and any other legal obligation deriving from the aforementioned requests.

Legal basis of these treatments it is the legitimate interest of the owner, in particular the fulfillment of the services/services inherent to the request for information/reports by the interested party or the purchase of products.

The processing of personal data of the interested party takes place to implement the aforementioned services.

The data controller does not use automated processes, including profiling, to achieve the purposes set out in this information.

Communication to third parties and categories of recipients (art. 13, 1st paragraph GDPR)

The data may be communicated to duly appointed internal and external subjects who carry out activities on behalf of the data controller.

Communication to non-EU third countries is not envisaged and dissemination is not envisaged (e.g. social networks, websites, etc.).

The legal basis of these treatments is the fulfillment of the services inherent to the relationship established, compliance with legal obligations and the legitimate interest of 'Sangiorgio Arte srl' to carry out the treatments necessary for these purposes.


What happens in the event that the interested party does not provide his data identified as necessary for the purpose of carrying out the requested service? (Article 13, 2nd paragraph, letter e GDPR)

The collection and processing of personal data is necessary to follow up on requests/reports from the interested party. If the interested party does not provide the personal data expressly provided for as necessary within the form for the purchase of the products, the Data Controller will not be able to proceed with the treatments related to the management of the aforementioned activities (requests/reports).

  • How we process the data of the interested party (art. 32 GDPR)

The Data Controller provides for the use of adequate security measures in order to preserve the confidentiality, integrity and availability of personal data of the interested party and imposes similar security measures on third party suppliers and Managers to guarantee the confidentiality of personal data and to avoid undue access by unauthorized parties as well as for purposes of protecting the corporate assets and security of the offices and systems of 'Sangiorgio Arte srl'.

  • Where we process the data of the interested party.

The personal data of the interested party are stored in IT and telematic archives (possibly also on paper) located in countries where the GDPR is applied (EU countries).

  • Data retention time of the interested party (art. 13, 2nd paragraph, letter a GDPR).

The Data are processed and stored for the time required by the purposes for which they were collected. Therefore:

    • Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.

    • Personal data collected for purposes related to the legitimate interest of the owner will be retained until the satisfaction of this interest. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

When the treatment is based on the User's consent, the Owner can keep the Personal Data for longer until said consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

  • The rights of the interested party (articles 15 - 20 GDPR).

The interested party has the right to ask the data controller to access his personal data or to rectify or cancel/oblivion them or limit the processing that concerns him, or has the right to oppose their treatment, in addition to the right to request data portability. The request can be made by email: at the address:; or by registered letter with return receipt to the address: Galleria SanGiorgioArte, Via Sparano n. 79, 70121 Bari, or by pec to the address:, with subject: "Request by the interested party" specifying in the request the right that the data subject wishes to exercise (cancellation, rectification, portability, oblivion, etc.), together with a valid e-mail/pec address to which the reply should be sent. The data controller or, anyone appointed by the same, will proceed to satisfy the request within 30 days from the date of receipt. If the answer is complex, the time could be extended to a further 30 days, subject to timely communication to the interested party. If he deems it appropriate to assert his rights, he has the right to lodge a complaint with the competent supervisory authority, corresponding to the national Privacy Guarantor, based in Piazza Venezia n. 11 – 00187 Rome or by e-mail by following the instructions in the following link