Who we are
- Operated by
- Founder, Apollonia Robin
- Country
- United Kingdom
Yvis Hausen ("Yvis Hausen", "we", "us") is operated as a sole trader business and is the controller of the personal data described in this policy. You can contact us about privacy at [email protected].
This policy is subject to change. Any updates will be published on this page, with the date of the latest version shown above.
What we collect
When you contact us
If you enquire by email, we collect your name, email address, and anything you choose to tell us, such as your organisation, role and project details.
When you work with us
For clients and prospective clients, we hold business contact details, correspondence, contracts, invoices and payment records.
For artists and collectors
If you submit work or enquire about sourcing, we hold the information you provide, such as portfolios, biographies, collecting interests and, where required by law, identity and due diligence information.
When you browse this website
This website does not use analytics or advertising cookies. Private access codes are checked in your browser and are not sent to or stored by us. Your cookie preferences are stored on your own device. See our Cookie Policy.
How we use it
- To respond to enquiries and manage our relationship with you.
- To prepare proposals and deliver services.
- To manage accounts, invoicing and payments.
- To carry out legally required checks, including anti-money-laundering due diligence for art transactions.
- To keep our website and records secure.
- To comply with legal and regulatory obligations.
We do not sell personal data, and we do not send marketing communications without your consent.
Legal bases
Where UK or EU data protection law applies, we rely on:
- Contract: to take steps at your request before entering a contract, and to perform it.
- Legitimate interests: to respond to enquiries, run our practice and protect our business, balanced against your rights.
- Legal obligation: for record-keeping, tax and due-diligence requirements.
- Consent: where we ask for it, which you may withdraw at any time.
Data we process for clients
When we set up, configure and review advertising systems for clients, we may handle data about their customers, such as hashed customer lists or website events sent through the Meta Pixel and Conversions API. In doing so we act as a processor on the client's instructions, and the client's own privacy notice applies. Questions about that data should be directed to the relevant client.
Who we share it with
We share personal data only where necessary, with:
- Service providers who support our practice, such as email, hosting, file storage and accounting providers, under contracts that protect your data.
- Advertising platforms such as Meta, where required to deliver client campaigns.
- Professional advisers, auditors and insurers.
- Authorities, where the law requires it.
International transfers
Our clients and collaborators may be based internationally, including in London, New York, Paris and Mexico, and some of our providers are located outside the UK and European Economic Area. Where personal data is transferred internationally, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.
How long we keep it
We keep personal data only for as long as needed for the purposes above. Enquiries that do not lead to an engagement are deleted after 24 months. Client and financial records are kept for six years after the engagement ends, to meet legal and tax requirements.
Security
We use appropriate technical and organisational measures to protect personal data, including access controls and encrypted services. No method of transmission is completely secure, but we work to protect your information and to respond promptly to any incident.
Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Ask us to delete your data.
- Restrict or object to our use of your data.
- Receive your data in a portable format.
- Withdraw consent at any time.
Residents of California may also request information about the categories of data we collect and ask us not to sell or share it; we do neither. Residents of Mexico may exercise ARCO rights (access, rectification, cancellation and opposition).
To exercise any right, contact [email protected]. We will respond within the time required by law.
Complaints
If you have a concern, please contact us first. You also have the right to complain to your local data protection authority, which in the UK is the Information Commissioner's Office (ico.org.uk).
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.