Privacy Policy

Last updated: June 2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and other applicable data protection legislation, OOA Gallery informs users of the following:

Data Controller:
OOA Gallery (formerly Out of Africa Gallery)
Owner and Sole Trader: Sorella Acosta Stoefs
Registered as self-employed professional (Autónoma) in Spain
NIF/NIE: ESX9018890S
Address: Carrer de l’Os Blanc, 30
08818 Olivella (Barcelona), Spain
Email: sorella@ooagallery.com
Telephone: +34 618 356 351
Website: ooagallery.com

For any questions relating to this Privacy Policy or the processing of personal data, users may contact OOA Gallery using the details above.

2. Scope of this Policy

This Privacy Policy applies to the website ooagallery.com and all pages operated under that domain.

It does not apply to third-party websites accessible through links contained on this website. OOA Gallery is not responsible for the privacy practices, content or policies of third-party websites.

Users are encouraged to review the privacy policies of any external websites they visit.

3. Personal Data Collected

OOA Gallery may collect and process the following categories of personal data:

  • Identification data, such as name and surname;
  • Contact details, such as email address, telephone number and postal address;
  • Billing and payment information;
  • Shipping and delivery information;
  • Purchase and transaction history;
  • Communications exchanged with OOA Gallery;
  • Newsletter subscription preferences;
  • Technical information generated through website use, including IP address, browser information, device information and cookie-related data where applicable.

Users are requested not to submit sensitive personal data unless specifically required and legally justified.

4. Purposes of Processing

Personal data may be processed for the following purposes:

a) Management of Purchases and Orders

To process purchase enquiries, quotations, orders, invoices, payments, deliveries, customer support and contractual relationships.

b) Communication with Users

To respond to enquiries, requests, quotations, appointment requests and communications received through the website, by email, by telephone or through other communication channels.

c) Newsletter and Marketing Communications

To send information about exhibitions, artists, art fairs, publications, events, acquisitions and gallery activities where the user has given consent or where otherwise permitted by applicable law.

d) Legal and Administrative Compliance

To comply with legal obligations, accounting requirements, tax regulations and applicable legislation.

e) Website Security and Performance

To ensure the proper functioning, security, maintenance and improvement of the website.

5. Legal Basis for Processing

The legal basis for processing personal data may include:

  • Performance of a contract or pre-contractual measures requested by the user;
  • Compliance with legal obligations;
  • Legitimate interests pursued by OOA Gallery, provided such interests do not override users’ rights and freedoms;
  • Consent provided by the user for specific purposes, including newsletter and marketing communications.

Where processing is based on consent, users may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Newsletters and Marketing Communications

Users who subscribe to the newsletter or otherwise consent to receiving communications may receive information regarding:

  • Exhibitions;
  • Art fairs;
  • Artists represented by OOA Gallery;
  • New artworks;
  • Events and cultural activities;
  • Publications and editorial content.

Users may unsubscribe at any time by:

  • Clicking the unsubscribe link included in marketing emails; or
  • Contacting OOA Gallery at sorella@ooagallery.com.

Users may also object at any time to the processing of personal data for direct marketing purposes.

7. Data Retention

Personal data shall be retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations.

In particular:

  • Contractual, invoicing and transaction data may be retained for the period required under Spanish tax, accounting and legal obligations;
  • Marketing data shall be retained until consent is withdrawn or the user objects to direct marketing;
  • Enquiry-related data shall be retained only as long as reasonably necessary to respond to the enquiry and manage any follow-up relationship;
  • Technical and security data shall be retained for the period necessary to ensure website security and proper functioning.

After expiry of the applicable retention period, personal data will be securely deleted or anonymised.

8. Recipients of Data

OOA Gallery does not sell, rent or trade personal data.

Personal data may be shared with trusted service providers where necessary to operate the business, including:

  • Payment processors, including Stripe;
  • Banking and financial service providers;
  • Shipping and logistics providers;
  • Website hosting and gallery management providers;
  • IT service providers;
  • Email and communication service providers;
  • Email marketing providers, where applicable;
  • Professional advisers;
  • Accounting and tax advisers;
  • Public authorities, courts or regulators where legally required.

Such service providers may only process personal data in accordance with OOA Gallery’s instructions and applicable data protection legislation, where they act as processors.

Personal data may also be disclosed where required by law or competent authorities.

9. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Where international transfers occur, OOA Gallery shall ensure that appropriate safeguards are implemented in accordance with Chapter V of the GDPR, including adequacy decisions, Standard Contractual Clauses or other legally recognised safeguards.

10. Data Security

OOA Gallery implements appropriate technical and organisational measures designed to protect personal data against:

  • Unauthorised access;
  • Loss;
  • Alteration;
  • Disclosure;
  • Destruction;
  • Misuse.

Although reasonable efforts are made to protect personal data, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

11. Data Subject Rights

Users have the right to:

  • Access their personal data;
  • Request rectification of inaccurate data;
  • Request erasure of personal data;
  • Request restriction of processing;
  • Object to processing, including processing for direct marketing purposes;
  • Receive personal data in a portable format where applicable;
  • Withdraw consent at any time;
  • Not be subject to automated decision-making where applicable.

Requests may be submitted by email to: sorella@ooagallery.com.

Users may be required to provide proof of identity before a request is processed.

12. Right to Lodge a Complaint

If a user believes that the processing of their personal data does not comply with applicable legislation, they have the right to lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)
Website: https://www.aepd.es

13. Children’s Privacy

This website is intended for a general audience interested in contemporary art and gallery activities.

OOA Gallery does not knowingly collect personal data from children under the age established by applicable data protection legislation without the consent of a parent or legal guardian.

14. Cookies

This website uses cookies and similar technologies.

Detailed information regarding the use of cookies, their purposes and how users may manage their preferences is available in the Cookie Policy.

15. Changes to this Privacy Policy

OOA Gallery reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, business operations or website functionality.

The updated version shall become effective upon publication on the website.

Users are encouraged to review this Privacy Policy periodically.