Privacy notice
What personal data we handle, why, for how long, and your rights.
Last updated: 7 October 2026
Draft under legal review. These documents will be finalised before the service is sold.
Two different roles
When you visit this website, request a demo or create an account, Galerie Log [to be completed] decides how your data is used: we are the data controller.
When a gallery stores its contacts, collectors and artists in Galerie Log, the gallery is the data controller and we act only on its instructions, as its processor. If you are a gallery's contact and want to exercise your rights, contact that gallery directly; we will help it respond.
Data we collect as controller
Demo and presentation requests: name, email, organisation, city, role, current software and your message.
Accounts: email address, name in the team, role, sign-in and security logs.
Website visits: technical data needed to deliver pages and protect the service (IP address, browser, pages requested), kept in server logs.
Why we use it, and on what basis
To answer your demo request and follow up on it: our legitimate interest in replying to people who contact us.
To provide the service to customers and their users: performance of the contract.
To secure the service, prevent abuse and keep accounts: our legitimate interest and our legal obligations.
We do not sell personal data and we do not use it for advertising.
How long we keep it
Demo requests: up to three years after the last contact, unless you become a customer.
Account data: for the life of the subscription, then deleted within 90 days, except invoices and accounting records kept for ten years as required by French law.
Server logs: up to 12 months.
Who receives it
Our team, and the providers listed on the sub-processors page, only for the purposes above. Some providers are based outside the European Union, notably in the United States. Transfers rely on the European Commission's standard contractual clauses or, where the provider is certified, the EU-US Data Privacy Framework.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to [to be completed]. We answer within one month. You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.
Security
Data is encrypted in transit and at rest, access is limited by gallery and by role, and the database is backed up daily. See the security page for details.