Privacy policy

Last Updated: 09, June 2026.

At Henneberg Art, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website (www.henneberg.ie) or make a purchase from our online shop.

1. Important Information & Who We Are

Henneberg Art is the "data controller" for the information collected on this website. This means we are responsible for deciding how and why your personal data is processed.

If you have any questions about this Privacy Policy or wish to exercise your legal data protection rights, you can contact us at:

  • Business Name: Henneberg Art

  • Postal Address: 60 Rose Hill, Wicklow, A67 C439, Ireland

  • Contact Email: henneberg.art@gmail.com

2. The Data We Collect About You

"Personal data" means any information about an individual from which that person can be identified. We may collect, use, and store the following types of data:

  • Identity Data: Your first name and last name.

  • Contact Data: Your billing address, delivery address, email address, and telephone number.

  • Financial Data: Payment card details (note: we do not store this data; it is processed directly by our secure third-party payment processors like Stripe or PayPal).

  • Transaction Data: Details about payments to and from you, and details of artworks or products you have purchased from us.

  • Technical & Usage Data: Your IP address, browser type, operating system, and details about how you use and navigate our website.

3. How and Why We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your data under the following legal bases:

  1. Performance of a Contract: We need to process your Identity, Contact, and Financial Data to fulfill your order, process your payment, and arrange delivery of your artwork.

  2. Legitimate Interests: We use Technical and Usage Data to improve our website experience and monitor web traffic.

  3. Consent: If you explicitly sign up for our newsletter or updates, we will use your Contact Data to send you marketing emails. You can opt out of this at any time by clicking the "unsubscribe" link.

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data with third parties for marketing purposes. However, to operate our business and fulfill your orders, we must share relevant data with trusted service providers:

  • E-commerce & Web Platforms: The platform that hosts our website and shop.

  • Payment Gateways: Secure payment processors (e.g., Stripe, PayPal) to handle your transactions safely.

  • Delivery & Courier Services: Postal and shipping partners (e.g., An Post, DHL, DPD) so they can deliver your physical goods to your address.

  • Analytics Providers: Services like Google Analytics that help us understand how visitors interact with our site.

All third-party service providers are required to respect the security of your personal data and treat it in accordance with GDPR requirements.

5. International Data Transfers

If any of our third-party service providers transfer your data outside the European Economic Area (EEA) (for example, web servers located in the US), we ensure that appropriate safeguards are in place (such as EU Standard Contractual Clauses) to guarantee your data receives an equivalent level of protection.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. Access to your personal data is strictly limited to those who have a business need to know.

7. Data Retention

We will only keep your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or tax reporting requirements. For tax purposes, Irish law requires us to keep basic transaction information for up to 6 years after a purchase.

8. Your Legal Rights Under GDPR

As an EU resident, you have the following rights regarding your personal data:

  • Access: The right to request a copy of the personal data we hold about you.

  • Correction: The right to ask us to correct any inaccurate or incomplete data.

  • Erasure ("Right to be Forgotten"): The right to ask us to delete your personal data when it is no longer needed.

  • Restriction or Objection: The right to object to or restrict the processing of your data under certain conditions.

  • Data Portability: The right to request the transfer of your data to another organization.

  • Withdraw Consent: The right to withdraw consent at any time where we rely on consent to process your data (such as newsletter subscriptions).

To exercise any of these rights, please email us at the contact address listed in Section 1. We will respond to your request within one month.

9. Right to Lodge a Complaint

If you believe that your data has not been handled correctly, you have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority for data protection (www.dataprotection.ie). We would, however, appreciate the chance to deal with your concerns before you approach the DPC, so please contact us first.