Samy Halim Art – handwritten signature logo
Instagram Linkedin-in Youtube Envelope

Privacy Policy

Last updated: 28 October 2026

This policy explains how your personal data is collected and used on samyhalim.com, in accordance with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the French Data Protection Act (Loi Informatique et Libertés of 6 January 1978, as amended).

1. Data controller

Samy Halim, artist, sole proprietorship (entrepreneur individuel) – SIRET 489 592 790 00039
28 rue du Président Wilson, 33500 Libourne, France
Email: – Phone: +33 6 45 52 47 92

Given the size of the business, no Data Protection Officer has been appointed. For any question, write to the email address above.

2. Data collected, purposes and legal bases

  • Orders and delivery: first and last name, postal and billing address, email, phone number, order details and, for international shipments, the information required by customs (description and value of goods). Purpose: processing, shipping and invoicing your order, customer service, accounting. Legal basis: performance of the contract and legal obligations (accounting and tax).
  • Customer account: name, email, addresses, order history and password (encrypted). Purpose: giving you access to your orders. Legal basis: performance of the contract.
  • Payment: card details are entered directly on the secure interface of our payment provider and are never stored on this website. We only receive a payment confirmation. Legal basis: performance of the contract; fraud prevention (legitimate interest).
  • Newsletter: email address and, if provided, your name. Purpose: sending news about new artworks, exhibitions and releases. Legal basis: your consent, which you can withdraw at any time via the unsubscribe link in each email. Customers may also receive news about similar artworks (legitimate interest, Article L34-5 of the French Postal and Electronic Communications Code), with the possibility to opt out at any time.
  • Contact: information you send us by email or via the contact page. Purpose: answering your request. Legal basis: legitimate interest.
  • Cookies and similar technologies: see section 7.

3. Recipients and processors

Your data is only accessible to Samy Halim and to the service providers that help run the shop, acting on his behalf and bound by confidentiality and data protection obligations. Your data is never sold or rented.

  • Infomaniak Network SA (Switzerland) – website hosting.
  • Stripe Payments Europe Ltd (Ireland) – online payment.
  • La Poste – Colissimo (France) and its partner carriers in the destination country – delivery. For shipments outside the EU, shipping data is also transmitted to the customs authorities of the destination country.
  • Intuit Mailchimp (United States) – newsletter sending.
  • Google Ireland Ltd (Google Workspace) – email correspondence.
  • Our accountant and the competent authorities, where required by law.

4. Transfers outside the European Union

Switzerland benefits from an adequacy decision of the European Commission. Transfers to the United States (Mailchimp, and possibly Google and Stripe) are carried out under the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. For deliveries outside the EU, the transfer of your shipping data to the carrier and customs of the destination country is necessary for the performance of your order (Article 49(1)(b) GDPR).

5. Retention periods

  • Orders and invoices: 10 years from the end of the financial year (French Commercial Code, Article L123-22).
  • Customer account: until you delete it, or 3 years after your last activity.
  • Newsletter: until you unsubscribe, or 3 years after your last interaction with our emails.
  • Contact requests: 3 years after the last exchange.
  • Cookie consent choices: 6 months; non-essential cookies: 13 months maximum.

6. Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, to withdraw your consent at any time, and to give instructions regarding the fate of your data after your death. To exercise these rights, write to ; we will reply within one month. Proof of identity may be requested if there is reasonable doubt.

If you believe your rights are not respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 – www.cnil.fr.

7. Cookies

Cookies strictly necessary for the website and the shop (cart, login, security, remembering your cookie choices) are placed without consent. Any other cookies or third-party content (for example the Instagram feed) are only activated if you accept them via the cookie banner. You can change your choices at any time via “Manage consent”. Details are given in our Cookie Policy.

8. Security

The website is served exclusively over HTTPS, access to the administration is restricted and protected, and passwords are stored in encrypted form.

9. Minors

The shop is intended for adults. Purchases by minors require the consent of a parent or legal guardian.

10. Changes

This policy may be updated, in particular to reflect legal changes or new services. The date of the last update is shown at the top of this page.