Last updated: 29 September 2026
This page explains what data ArtFairAvenue collects, why, who it is shared with and how to exercise your rights. Your data is never sold.
Data controller
The data controller is the publisher of the site (see the legal notice). For any question about your data: [email protected].
The data we use
Your account
Email address, name or username, profile photo (optional), language, and your email preferences (notifications, newsletter). If you sign in with Google or Facebook, they send us your name, email and photo. Your password is handled by Google Firebase Authentication: we never have access to it.
Legal basis: providing the service you ask for.
Your listings
Title, description, address and dates of the sale, photos, items and prices. This information is public by nature: anyone can see it and search engines may index it. Do not include personal information you do not want to make public (faces, documents, phone number…).
To make search easier, item photos may be analysed automatically (Amazon Web Services) to suggest keywords; no recognition of people is performed.
Legal basis: providing the service; our legitimate interest for photo analysis.
Messages and offers
Messages and offers exchanged between users are stored so both sides can receive and read them. An email notification may tell you about a new message; you can turn it off in your dashboard.
Legal basis: providing the service.
Contact form and newsletter
The contact form sends us your name, email and message by email so we can reply. Signing up to the newsletter stores your email; you can unsubscribe at any time from your dashboard or by writing to us.
Legal basis: our legitimate interest in replying; your consent for the newsletter.
"New sales near me" alerts
If you create an alert: your email, the place you chose (town and its coordinates) and the radius. Nothing is sent until you confirm your address with the link we email you; after that, at most one email a day, only when a sale is published near that place. Every email has an unsubscribe link.
Legal basis: your consent.
Your location (optional)
If you use "Use your current location" in search, your browser shares your position with us only to sort sales by distance. It is not saved to your account.
Legal basis: your consent (browser permission).
Security and statistics
Forms are protected against bots by Google reCAPTCHA. To count listing views without duplicates, your IP address is held in memory for at most one hour and is not saved. Audience measurement (Google Analytics) only runs with your consent: see the cookie policy.
Legal basis: our legitimate interest in securing the site; your consent for audience measurement.
Who can access your data
Listings are public. Otherwise, only the site's publisher and the following technical providers have access, as needed to run the service:
- DigitalOcean — hosting of the site and database;
- Cloudflare — delivery and protection of the site;
- Google (Firebase) — account sign-in and photo storage;
- Google — reCAPTCHA, and Google Analytics if you have accepted it;
- Amazon Web Services (London) — analysis of item photos;
- IONOS — sending and receiving email.
Some of these providers are based in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses. We may also share data with authorities where the law requires it.
How long we keep it
- Account, listings and messages: while your account is active. When you delete your account, your listings and messages are removed from the site immediately; on request by email, we permanently erase the remaining data, unless the law requires us to keep it.
- Newsletter: until you unsubscribe.
- Alerts: until you unsubscribe; an alert that is never confirmed sends nothing.
- Messages sent through the contact form: as long as needed to handle your request, and at most three years.
- Audience-measurement cookies: 13 months at most.
Your rights
You can access, correct or erase your data, ask for a copy in a portable format, restrict or object to its processing, withdraw your consent at any time and set instructions for what happens to it after your death. Much of this can be done from your dashboard; otherwise write to [email protected]. We reply within one month.
If you believe your rights are not respected, you can complain to the French data protection authority, the CNIL (www.cnil.fr), or to the authority in your country.
Children
Accounts are for people aged 18 and over.
Changes
We will update this page if our practices change; the date at the top shows the latest revision.