Privacy Policy

This Privacy Policy explains how Sumfinidade Lda (“Trinkhaus Fine Art”, “we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website and purchase our products.

1. Data Controller

The controller of your personal data is:

Sumfinidade Unipessoal Lda (ZFM)
Rua dos Murças, N.º 15, 2.º Andar, Sala H
9000-058 Funchal, Portugal
NIF: 515 876 420
Email: privacy@trinkhausfineart.com

2. Categories of Data Collected

We process the following categories of personal data:

• Order and account data: name, address, contact details, order history.
• Payment data: processed securely by Stripe and WooCommerce Payments. We do not store credit card numbers.
• Newsletter data: email addresses and interaction data if you subscribe via MailerLite.
• Technical and usage data: cookies, IP addresses, browser/device details, pages visited.
• Tracking data: via Facebook (Meta) Pixel and Google Analytics.
• Communication data: messages sent by email (via Gmail).
• Fulfilment data: details shared with print labs and shipping providers to deliver your order.
• Hosting data: log files processed by our hosting provider Siteground.

3. Purposes and Legal Bases

We process personal data for:

• Contract performance – to process and ship orders (Art. 6(1)(b) GDPR).
• Legal obligations – tax and accounting records (Art. 6(1)(c)).
• Legitimate interests – marketing analytics, fraud prevention, site security (Art. 6(1)(f)).
• Consent – email marketing via newsletter signup, cookie tracking (Art. 6(1)(a)).

4. Sharing of Data

We share data only as necessary with:

• Payment processors: Stripe, WooCommerce Payments.
• Marketing & analytics: Meta (Facebook) Pixel, Google Analytics.
• Newsletter provider: MailerLite.
• Hosting & infrastructure: Siteground, Gmail.
• Order fulfilment: print laboratories and shipping providers to deliver artworks. All providers act as processors under GDPR or equivalent safeguards (e.g. SCCs for US transfers).

5. Data Retention

We keep order and invoice data for the statutory retention period (generally 10 years under Portuguese tax law).

Newsletter and marketing data are retained until you withdraw consent.

Technical logs are retained for security purposes up to 12 months.

After retention periods expire, data are deleted or anonymized.

6. International Transfers

Where data are transferred outside the EU (e.g., Stripe, MailerLite, Meta, Google), such transfers are safeguarded by Standard Contractual Clauses or other GDPR-compliant mechanisms.

7. Your Rights

Under GDPR, you have the right to:

• Access your data.
• Rectify inaccurate data.
• Request deletion.
• Restrict processing.
• Data portability.
• Object to processing (including marketing).
• Withdraw consent at any time.
• Lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Portugal.

8. Cookies

Our site uses cookies for:

• Essential functions: WooCommerce cart/session.
• Analytics: Google Analytics.
• Marketing: Facebook/Meta Pixel. You can disable cookies in your browser or withdraw consent via our cookie banner.

9. Contact

For all privacy questions:

Email: privacy@trinkhausfineart.com

Or write to the above business address.