I. PRIVACY AND DATA PROTECTION POLICY
In compliance with current legislation, BLACKLIGHT ART GALLERY (hereinafter, also referred to as the Website) commits to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.

Laws Incorporated into This Privacy Policy
This privacy policy is adapted to Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it respects the following laws:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons concerning the processing of personal data and the free movement of such data (GDPR).
• Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007, of December 21, approving the Regulation implementing Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller
The controller of the personal data collected on BLACKLIGHT ART GALLERY is: BLACKLIGHT ART GALLERY, SL, with Tax ID: B70936315, registered in the Commercial Registry of Valencia with the following details: Volume: 11546, Book: 8824, Page: 166, Section: 8, Sheet: V217490, represented by BLACKLIGHT ART GALLERY (hereinafter, the Data Controller). Contact details are as follows:

Address: Calle Reina Doña Germana 20 Bajo Izq
Phone: 639601469
Email: info@gallerybl.com

Register of Personal Data
In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by BLACKLIGHT ART GALLERY through forms on its pages will be incorporated into and processed in our file to facilitate, expedite, and fulfill the commitments established between BLACKLIGHT ART GALLERY and the User or to maintain the relationship established in the forms filled out by the User, or to respond to a request or inquiry. Additionally, in accordance with the GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.

Principles Applicable to the Processing of Personal Data
The processing of the User’s personal data will adhere to the following principles outlined in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights:

1. Lawfulness, Fairness, and Transparency: The User’s consent will always be required after fully transparent information about the purposes for which personal data is collected.
2. Purpose Limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
3. Data Minimization: Only the strictly necessary personal data will be collected in relation to the purposes for which they are processed.
4. Accuracy: Personal data must be accurate and kept up to date.
5. Storage Limitation: Personal data will only be retained for as long as necessary for the purposes of processing.
6. Integrity and Confidentiality: Personal data will be processed in a manner that ensures its security and confidentiality.