OSME Fine Art | www.osme.at
Last updated: 13 October 2026
1. Controller
The controller responsible for the processing of personal data in connection with this website is:
OMS Consulting GmbH
Trading as OSME Fine Art
Tiefer Graben 19
1010 Vienna, Austria
Email: art@osme.at
Website: https://www.osme.at
2. Website Access and Server Logs
When you visit our website, technical information is processed to deliver the website and maintain its security and functionality.
This may include your IP address, date and time of access, requested pages, browser and operating system information, referring website and technical error information.
Purpose: Website delivery, technical operation, security, error detection and prevention of misuse.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interests are the secure and reliable operation of our website.
Technical information is retained for as long as necessary for these purposes, taking account of applicable security and operational requirements. Information required to investigate incidents or establish, exercise or defend legal claims may be retained for longer where legally justified.
3. Website Hosting
Our website is operated using services provided by:
Artlogic Media Limited
1 Pickle Mews
London SW9 0FJ
United Kingdom
https://artlogic.net
Artlogic provides website infrastructure and related technical services and may process personal data in connection with the operation of our website.
Where Artlogic processes personal data on our behalf, the applicable requirements of Article 28 GDPR apply.
Transfers of personal data to the United Kingdom are covered by the applicable European Commission adequacy decision under Article 45 GDPR, to the extent that the transfer falls within its scope.
Artlogic may use additional infrastructure providers and subprocessors. Any transfers outside the European Economic Area must comply with the applicable requirements of Chapter V GDPR.
4. Contact Forms and Artwork Enquiries
When you contact us by email or through our website enquiry form, we process the personal information you provide.
Our enquiry form collects your name and email address and allows you to provide a telephone number and message. It also includes a separate choice concerning the receipt of newsletters.
We process enquiry information to respond to your request, provide information about artworks and services, prepare offers and conduct related business correspondence.
Legal basis:
- Article 6(1)(b) GDPR, where processing is necessary for contractual or pre-contractual measures requested by you.
- Article 6(1)(f) GDPR, for general enquiries and business correspondence, based on our legitimate interest in responding to enquiries and managing business communications.
- Article 6(1)(c) GDPR, where processing or retention is required by law.
Providing your name and email address is necessary to submit an enquiry through our website form. Providing your telephone number is optional. If the necessary contact information is not provided, we may be unable to respond to your enquiry.
Enquiry information is retained for as long as necessary to handle the enquiry and any resulting business relationship, subject to applicable statutory retention requirements and the establishment, exercise or defence of legal claims.
Where correspondence forms part of contractual, accounting or tax records, statutory retention periods may apply, including the generally applicable seven-year period under Austrian law.
5. Newsletters and Electronic Marketing
Our website allows visitors to subscribe to newsletters and electronic marketing communications from OSME Fine Art.
These communications may include information about artworks, new acquisitions, exhibitions, gallery events, available works and related services.
For newsletter subscriptions, we process your email address, name where provided, subscription preferences and information necessary to administer and document your subscription.
Legal basis: Article 6(1)(a) GDPR (consent), in conjunction with § 174(3) of the Austrian Telecommunications Act 2021 (TKG 2021).
Subscription is voluntary. You may submit an artwork enquiry without agreeing to receive newsletters.
Where the conditions of § 174(4) TKG 2021 are met, we may also send electronic marketing communications concerning our own similar products or services to existing customers without obtaining separate prior consent. In such cases, processing of personal data may be based on Article 6(1)(f) GDPR, reflecting our legitimate interest in communicating relevant offers to existing customers.
You may withdraw your consent or object to direct marketing at any time, free of charge, by using the unsubscribe option provided in our marketing emails or by contacting art@osme.at.
Subscription data is retained for the duration of the subscription. Following withdrawal or objection, we may retain limited information necessary to document compliance and prevent further unwanted marketing communications.
6. Cookies and Similar Technologies
Our website uses cookies and similar technologies for website functionality and, where enabled, additional services.
Cookies are small files stored on your device. Similar technologies may be used to store or access information on your device.
Strictly necessary technologies
Technologies that are strictly necessary to provide a service expressly requested by the user may be used without prior consent where the exemption under § 165(3) TKG 2021 applies.
Where associated personal data is processed, the legal basis may be Article 6(1)(f) GDPR, based on our legitimate interest in operating a functional and secure website.
Optional technologies
Other cookies and similar technologies, including those used for non-essential analytics, marketing or third-party integrations, are subject to prior consent where required by law.
Legal basis: Article 6(1)(a) GDPR and § 165(3) TKG 2021.
Where consent is required, the relevant technologies are activated only after consent has been obtained.
You may reject optional technologies or withdraw your consent at any time through the website's cookie settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Information about the cookies and similar technologies actually used, including their purposes, providers and storage periods, is provided through the applicable cookie information and consent interface.
7. Website Analytics
We may introduce Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
If implemented, Google Analytics may process website usage information, online identifiers, browser and device information, approximate geographical information and interactions with our website.
The purpose would be to analyse website usage and improve our website and services.
Where required, processing would be based on consent under Article 6(1)(a) GDPR, together with the applicable requirements of § 165(3) TKG 2021.
Google may process personal data outside the European Economic Area. Any applicable international transfer must comply with Chapter V GDPR.
Further information is available at https://policies.google.com/privacy.
Google Analytics is not currently implemented on this website. The relevant information and consent controls will be updated before activation.
8. External Links and Embedded Content
Our website may contain links to external websites and social media platforms, including Instagram, YouTube and Vimeo.
When you follow an external link, the destination website processes personal data under its own privacy arrangements.
We may also integrate third-party content directly into our website in the future.
If such content is embedded, the relevant provider may receive technical information, including IP addresses and browser information, when the content is loaded.
Where prior consent is required, the content will be activated only after the necessary consent has been obtained.
Relevant information about providers, purposes, retention and international transfers will be provided before such integrations are activated.
9. Recipients of Personal Data
Where necessary for the purposes described in this Privacy Policy, personal data may be disclosed to:
- Website hosting and technical service providers.
- Email, communications and marketing service providers.
- Professional advisers and administrative service providers.
- Public authorities where disclosure is legally required.
Where service providers process personal data on our behalf, the requirements of Article 28 GDPR apply.
10. International Data Transfers
Where personal data is transferred outside the European Economic Area, the transfer must comply with Chapter V GDPR.
Depending on the recipient and destination, transfers may be based on an applicable adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR.
Where applicable, information about the safeguards used and how to obtain a copy may be requested from art@osme.at.
11. Your Rights
Subject to the conditions of applicable law, you have the following rights under the GDPR:
- Access: The right to obtain information about your personal data (Article 15).
- Rectification: The right to request correction of inaccurate personal data (Article 16).
- Erasure: The right to request deletion of personal data (Article 17).
- Restriction: The right to request restriction of processing (Article 18).
- Data portability: The right to receive certain personal data in a structured, commonly used and machine-readable format (Article 20).
- Objection: The right to object to processing based on legitimate interests on grounds relating to your particular situation (Article 21).
- Withdrawal of consent: The right to withdraw consent at any time, without affecting the lawfulness of earlier processing (Article 7(3)).
You have the right to object at any time to processing of your personal data for direct marketing purposes.
Where the conditions of Article 22 GDPR apply, you also have the rights provided in relation to certain decisions based solely on automated processing.
To exercise your rights, please contact art@osme.at.
12. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.
In Austria, the competent authority is:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
Website: https://www.dsb.gv.at
13. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and unlawful disclosure, taking account of the nature of the processing and associated risks.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our website, data processing activities or applicable legal requirements.
The current version is available on www.osme.at.
OMS Consulting GmbH | OSME Fine Art
Tiefer Graben 19, 1010 Vienna, Austria
art@osme.at
www.osme.at