Privacy Policy

This Privacy Policy explains how RizzutoGallery processes personal data when you visit www.rizzutogallery.com (the website), write to us through the contact form or an artwork enquiry, or subscribe to our newsletter. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).

You can browse the website without giving us any personal data. We do not use advertising trackers or social media plug-ins. Statistics cookies are used only if you accept them.

1. Data controller

The data controller is Oliveri Eva, sole proprietorship (ditta individuale) trading as RizzutoGallery, Via Maletto 5, 90133 Palermo, Italy. VAT no. IT06769750826 · Tax code LVRVEA68M62G283K · REA PA-414499 · Certified email (PEC): oliverieva@pec.it. Email: info@rizzutogallery.com. Telephone: +39 091 6496654.

The Düsseldorf space (Ackerstraße 34, 40233 Düsseldorf, Germany; dus@rizzutogallery.com) is operated by the same data controller.

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR.

2. What data we process and why

  • Browsing data. When you open a page, the server receives your IP address, date and time, the page requested, browser type and referring page. Purpose: delivering the website and keeping it secure. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). Retention: server logs are deleted after 14 days, unless needed to investigate a specific security incident.
  • Contact form and artwork enquiries. Your name, email address, the gallery you write to (Palermo or Düsseldorf), your message and, for an enquiry, the work or exhibition concerned. Your message is sent by email to the gallery you chose; it is not stored on the website. Purpose: replying to you. Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR) or our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR). Retention: the email is kept for 24 months after our last contact, longer only if it leads to a sale (accounting and tax records, generally 10 years).
  • Newsletter. Your email address, the name you give us (optional) and the record of your subscription. You subscribe by ticking a consent box that is never pre-ticked. Purpose: sending news about exhibitions, artists and fairs a few times a year. Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 130 Italian Privacy Code). You can withdraw it at any time with the unsubscribe link in every email. Retention: until you unsubscribe; proof of consent and of unsubscription for up to 5 years afterwards.
  • Statistics (Google Analytics 4), only with your consent. If you click «Accept» in the cookie banner, Google Analytics measures how the website is used (pages viewed, approximate location, device, duration). IP addresses are not stored by Google Analytics 4; advertising features and Google signals are switched off. Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 122 Italian Privacy Code). Retention: 2 months in Google Analytics. Details in our Cookie Policy.

Please do not send us special categories of data (for example health data): they are not needed for any purpose.

3. Who receives your data

Only the gallery's directors and authorised staff. We also use these providers, bound by a data processing agreement under Article 28 GDPR:

  • Hosting of the website and of the contact form service: Hostinger International Ltd., on servers located in the European Union.
  • Email for info@rizzutogallery.com, dus@rizzutogallery.com and web@rizzutogallery.com, through which contact messages are sent and received: Hostinger International Ltd.
  • Voxmail, the newsletter platform (sending and subscription management).
  • Google Ireland Limited (Google Analytics 4), only if you accept statistics cookies.

We do not sell your data and do not share it for third-party marketing.

4. Transfers outside the European Economic Area

Google may process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023); Standard Contractual Clauses also apply. No other transfer outside the EEA is planned.

5. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing (Articles 7 and 15–22 GDPR). Write to info@rizzutogallery.com: it is free, and we reply within one month.

You may also lodge a complaint with a supervisory authority: in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it); in North Rhine-Westphalia the LDI NRW (www.ldi.nrw.de), or the authority of the country where you live or work.

6. Minors

The website is addressed to adults. The forms and the newsletter are reserved for people aged at least 14, the age set by Italian law for consent to information society services (Art. 2-quinquies Italian Privacy Code).

7. Changes

We may update this policy; the date below shows the latest version. Last updated: 15 October 2026.

Be the first to know.

Openings, new exhibitions and fairs in Palermo and Düsseldorf, a few times a year.