Privacy policy

Data controller

The data controller is the website publisher, identified in the legal notice. For any question about your data, write to us by e-mail at annabelle.cukierman@gmail.com.

Data we collect

The website only collects the data strictly required, which you provide voluntarily:

• Consignment file: identity, contact details, contact preference and availability, organisation where relevant, photographs and description of the piece, maker, context (an estate in particular), how you heard about the firm and, if you state it, the name of the person who recommended you. These details are sent with your explicit consent.
• Newsletter: your e-mail address, the only information requested, sent directly to Mailchimp, which manages the firm’s mailing list.
• Comments: name and message, published after approval, and e-mail address, never published. An irreversible fingerprint of your IP address and e-mail address is used to limit abuse.

Purposes and legal bases

This data is used solely to answer your inquiries, review the files received and, where you have consented, send you the newsletter. It is never sold nor used for third-party marketing. Processing is based on your consent and on pre-contractual measures related to your request. To organise the firm’s work, a priority is suggested automatically for each file from the details sent: it is validated by a person and never decides on its own what happens next. Public comments allow discussion of our articles and sales: the e-mail address is used only to reply to their author and is never published. This processing relies on the firm’s legitimate interest in allowing these discussions and moderating them.

Retention periods

Files from the “Entrust” process are kept for 24 months after receipt, then deleted automatically, photographs included. A deletion only reaches backups when they expire, within 30 days at most.

Newsletter subscriptions run until you unsubscribe, using the link in every e-mail. Mailchimp then keeps your address, marked as unsubscribed, so that you are no longer written to, until the firm deletes it; on request, it is permanently deleted. A comment stays online until it is removed; its author’s e-mail address, even if the comment was rejected, is kept for 3 years after the last contact, then erased at the next moderation session, and it is deleted when the comment is removed.

To limit abuse, the website does not store your IP address in clear in its database: only an irreversible fingerprint is kept, for a short time, then deleted. Providers’ technical logs (Cloudflare, Resend) may contain your IP address; they are kept for a limited time, under each provider’s own rules.

Recipients and processors

Your data is never sold or rented. It is processed only by the technical providers required to run the website: Cloudflare (website hosting, database, sign-in and file storage), Resend (sending e-mails), Mailchimp (newsletter), Backblaze B2 (storage of encrypted backups) and GitHub (running backups). Each acts as a processor, under its data processing agreement.

Transfers outside the European Union

Cloudflare, a US company, keeps the database and files in the European Union. The website itself runs on its global network: a page may be prepared outside the Union, close to the visitor. These transfers are covered by standard contractual clauses and by the EU-US Data Privacy Framework. Mailchimp, a US company, hosts the newsletter list under the EU-US Data Privacy Framework, with standard contractual clauses as a fallback.

Resend sends the firm’s e-mails from the European Union (Ireland); it keeps account data and sending metadata in the United States, under its data processing agreement, which includes the European Commission’s standard contractual clauses. Backblaze stores encrypted backups in Amsterdam. GitHub runs the backups on its machines, located outside the European Union, under its data processing agreement and standard contractual clauses.

If you consign a piece with the firm

The firm processes your contact details, information on your lots (description, photographs, estimates, reserves, sale results) and your papers (identity document, bank details, company registration extract, signed consignment form) to perform the contract between you: tracking the consignment, offering the piece for sale, paying the sale proceeds, returning the piece. Some documents are also kept to meet the firm’s legal obligations, including accounting obligations.

This data is accessible to the firm’s team. It is passed to the auction houses concerned (table of lots, photographs and, when the firm decides to send them, the papers in the file) and to the specialists to whom a piece is handed (laboratory, stone remover, watchmaker). The technical providers and transfers described above also apply to this data.

Retention period: identity documents, bank details and company registration extracts are kept for 5 years after the end of the relationship; the consignment form and accounting records, for 10 years. Your rights are exercised as set out below.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your personal data.

To exercise these rights, send us your request by e-mail to annabelle.cukierman@gmail.com. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).