Privacy & Data Governance Policy

1. Preamble & Scope of Governance

Rankripplepremiere Antiquités & Patrimoine SAS (referred to herein as "Rankripplepremiere", "the Organization", "we", "us", or "our") operates the web platform rankripplepremiere.buzz as a specialized reference catalog and curatorial consultation portal for French antique markets, decorative arts, and heritage appraisal.

Because antique acquisition and high-value appraisal frequently involve sensitive estate details, ownership records, and cross-border transport data, we enforce rigorous technical and organizational safeguards to ensure absolute collector confidentiality and data sovereignty.

2. Categories of Information We Collect

We process personal and appraisal data only when lawful, proportional, and directly related to the provision of our curatorial services:

• Direct Identity & Contact Information: Name, professional salutation, legal entity affiliation, email address, physical correspondence address, and telephone coordinates submitted via appraisal inquiries.
• Provenance & Artifact Submission Data: Photographic materials of artwork/furniture, hallmark notes, dimensions, known provenance histories, seller invoices, and acquisition documentation uploaded for specialist examination.
• Technical Browsing & Geolocation Telemetry: Anonymized IP addresses, browser fingerprint types, referring URL paths, session durations, and regional access points used to calibrate server load and defend against automated scraping attacks.
• Collector Preference Records: Opt-in selections regarding our bi-monthly Gazette des Brocantes and localized flea market guide bookmarks.

3. Legal Bases for Data Processing (GDPR Article 6)

We process your personal information strictly under the following lawful mechanisms:

• Contractual Performance (Art. 6(1)(b)): To execute requested appraisal assessments, deliver customized itinerary guides, and facilitate private market accompaniment.
• Legitimate Interests (Art. 6(1)(f)): To maintain platform security, prevent unauthorized reproduction of our proprietary research monographs, and enhance user experience.
• Explicit Consent (Art. 6(1)(a)): For digital dispatch subscriptions and non-essential analytical cookies. You may revoke consent at any moment without prejudice.
• Legal Compliance (Art. 6(1)(c)): To fulfill French and European anti-money laundering (AML) directives and cultural heritage export regulations when facilitating asset valuations.

4. Third-Party Data Processors & Cross-Border Transfers

Rankripplepremiere does NOT sell, rent, monetize, or trade your personal information or appraisal dossiers to any data broker or commercial advertiser. We share data solely with vetted technical sub-processors under strict Data Processing Agreements (DPAs):

• Cloud Infrastructure: European-based tier-4 data centers with ISO/IEC 27001 certification and AES-256 server-side encryption.
• Logistics Partners: Certified art handlers and customs brokers (e.g., Camard, Hedley's) strictly when requested by the collector to calculate international white-glove crating and freight quotes.
• Analytics: Privacy-compliant telemetry engines configured with strict IP anonymization and zero cross-site tracking capabilities.

5. Data Retention & Archival Schedules

General inquiry communications are retained for twenty-four (24) months following the conclusion of correspondence. Formal appraisal dossiers and authentication certificates are maintained in an encrypted offline archive for seven (7) years to support legal provenance continuity for the collector. Analytical logs are automatically purged after twelve (12) months.

6. Your Statutory Rights Under GDPR & CCPA

As a data subject in the European Economic Area or California, you possess comprehensive statutory rights:

• Right of Access (GDPR Art. 15): Obtain confirmation as to whether your personal information is being processed and receive a comprehensive copy of all stored dossiers.
• Right to Rectification (Art. 16): Demand correction of inaccurate, obsolete, or incomplete historical records.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request permanent deletion of your personal records where continued storage is no longer legally mandated.
• Right to Restriction of Processing (Art. 18): Restrict processing during ongoing disputes regarding data accuracy.
• Right to Data Portability (Art. 20): Receive your submitted records in a structured, machine-readable format (JSON/CSV).
• Right to Object (Art. 21): Object at any time to direct communications or processing grounded in legitimate interest.

7. Data Protection Officer & Exercise of Rights

To exercise any statutory right or submit a formal inquiry concerning data governance, address your correspondence to our Data Protection Officer: