Last updated: 14 October 2026
- Who we are
This website is operated by:
OMS Consulting GmbH / Trading under OSME Fine Art
Tiefer Graben 19
1010 Vienna, Austria
Email: art@osme.at
Website: https://osme.at
OMS Consulting GmbH is responsible for the processing of personal data described in this Privacy Policy.
2. Information we collect and why
Website visits
When you visit our website, technical information such as your IP address, browser information, requested pages and access times may be processed to operate the website, maintain its security and investigate technical problems.The legal basis is our legitimate interest in providing a secure and functioning website (Article 6(1)(f) GDPR).
Technical information is retained only as long as necessary for these purposes, unless a longer period is required by law or to investigate a security incident.
Enquiries and correspondence
When you contact us by email or through our website, we process the information you provide, such as your name, email address, telephone number and message. We use this information to respond to your enquiry, communicate with you and, where relevant, take steps towards or perform a contract.The legal basis is Article 6(1)(b) GDPR, where applicable, or our legitimate interests under Article 6(1)(f) GDPR. Our website enquiry forms may also record IP addresses for security and abuse prevention. The legal basis is Article 6(1)(f) GDPR. We retain correspondence for as long as necessary for the relevant business purpose and any applicable legal obligations.
Client and business records
When we conduct business with clients, we process the personal information necessary to manage transactions, fulfil contracts, maintain business records and comply with legal obligations.The legal bases are Articles 6(1)(b), 6(1)(c) and, where applicable, 6(1)(f) GDPR.
Records subject to Austrian accounting and tax requirements are generally retained for seven years. Longer retention may apply where legally required.
3. Newsletters
We send newsletters and information about artworks, exhibitions and related activities to people who have subscribed or otherwise expressly requested such communications. Subscriptions may be made through our website or directly through communication with us. Where someone requests a subscription outside the website, we may manually add their contact details to our mailing list. The legal basis is consent under Article 6(1)(a) GDPR, unless an applicable legal exception permits communications to existing customers.
You can unsubscribe at any time using the link in our emails or by contacting art@osme.at.
We retain newsletter contact details until you unsubscribe or the information is no longer required. We may retain limited information necessary to respect an unsubscribe request.
4. Cookies and Google Analytics
Our website uses necessary cookies to support its operation.
With your consent, we also use Google Analytics 4 to understand how visitors use the website and improve its content. Google Analytics may process information about page visits, interactions, browser and device information, and online identifiers stored in cookies.
Google Analytics is provided by Google Ireland Limited. The website also contains an analytics configuration used by our website provider, Artlogic.
Optional analytics cookies are used only after you give consent. The legal basis is Article 6(1)(a) GDPR, together with § 165(3) of the Austrian Telecommunications Act 2021.
You can reject optional cookies or change your preferences at any time through the cookie preferences function on our website.
Further information is available in our Cookie Policy.
5. Service providers
We use service providers where necessary to operate our website and business communications. Our website and its content management and mailing functions are provided by Artlogic Media Limited, United Kingdom. We also use Google Analytics, provided by Google Ireland Limited, where you have consented to analytics. These providers may process personal data in connection with the services they supply. We may also disclose personal data where required by law or necessary for the establishment, exercise or defence of legal claims.
6. Transfers outside the European Economic Area
Some service providers may process personal data outside the European Economic Area. Where this occurs, transfers must be covered by an applicable adequacy decision or another safeguard permitted under the GDPR. The United Kingdom is covered by an EU adequacy decision. Transfers involving Google or its service providers may involve other countries, including the United States. You may contact us for information about the safeguards applicable to your personal data.
7. How long we retain information
We retain personal data only for as long as necessary for the purposes described in this policy or to comply with legal obligations.
Retention depends on the type of information and the reason it was collected. Where no fixed legal retention period applies, we determine retention according to the relevant business purpose and any legal claims that may arise.
8. Your rights
Under the GDPR, you may have the right to:
- Access your personal data.
- Request correction of inaccurate data.
- Request deletion of your data.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Receive your data in a portable format where applicable.
- Withdraw consent at any time.
Withdrawal of consent does not affect processing carried out lawfully before withdrawal.
To exercise your rights, contact art@osme.at.
You may also lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna, Austria
https://www.dsb.gv.at
9. Changes to this policy
We may update this Privacy Policy when our processing activities or applicable legal requirements change. The current version will be available on this website.