Privacy policy

This page is also available in French: Politique de confidentialité.

Last updated: 7 November 2026

1. Controller

Executionists, trading under the business name “Mie Gallery”
12773 Caswell Avenue, #104, Los Angeles, CA 90066, USA
Email: info@miegallery.com · Phone: +1 310 435 7452

Representative in the European Union (Article 27 GDPR)
Executionists, trading as “Mie Gallery”, has designated the following representative in the European Union under Article 27 of the General Data Protection Regulation (GDPR):

Cloudkasten GmbH
Seestr. 20 G
50374 Erftstadt, Germany
Email: shopify-9576022094@rep4.eu
Verify the designation: https://rep4.eu/verify/bd3b3b4d-2e93-4e93-afad-a51f7607087f/

Data subjects residing in the European Union may contact our representative with any question about the processing of their personal data and the exercise of their rights under the GDPR.

2. Overview

This policy applies to our sites for customers in France, miegallery.com/fr-fr and miegallery.com/en-fr. We process personal data only to the extent necessary to operate the site, process your order and answer your enquiries, or on the basis of your consent.

We are established in the United States and process your data there. When you give us your data directly, that alone is not a transfer to a third country within the meaning of Chapter V GDPR. When we pass your data on to other recipients outside the European Union, that can be such a transfer, even if the recipient is also established in the United States. The GDPR applies to our processing because this offer is directed at customers in France.

Recipients outside the European Union and basis of the transfer.

• Shopify Inc., Canada (shop platform, section 3): for Canadian organisations within the scope of the Canadian data protection law PIPEDA, there is an adequacy decision of the European Commission. Shopify also processes data in other countries. Shopify's data processing addendum provides binding corporate rules for certain transfers within the Shopify group and the European Commission's standard contractual clauses for other transfers (shopify.com/legal/dpa).
• United Parcel Service (UPS) and United States Postal Service (USPS), USA (delivery, section 6): passing on your name, address and contact details is necessary to deliver your order (Article 49(1)(b) GDPR).
• Google LLC, USA (our mailbox info@miegallery.com and reCAPTCHA, section 8; audience measurement and advertising, section 10), Meta Platforms, Inc., USA (section 10) and Intuition Machines, Inc. (hCaptcha), USA (section 8): according to their own statements, these companies are certified under the EU-U.S. Data Privacy Framework, which is the subject of an adequacy decision of the European Commission. For the online withdrawal function (section 8), Fly.io, Inc. and Twilio Inc. (SendGrid), USA, service providers of Visionz GmbH, are likewise certified under that framework according to their own statements.

On request to info@miegallery.com you can obtain a copy of the safeguards or information on where they are available.

3. Hosting and shop platform

Our site runs on the Shopify platform. Our contracting party is Shopify Inc., 151 O'Connor Street, Ottawa, Ontario, Canada. Shopify processes the data on our behalf (Article 28 GDPR). If you use Shop Pay, Shopify processes your data to that extent as a separate controller. When you visit, technically necessary data is processed, such as the IP address, the date and time of access, the pages viewed, the browser and the operating system. The legal basis is our legitimate interest in a secure and functioning service (Article 6(1)(f) GDPR).

4. Cookies and consent

We use strictly necessary cookies without consent, for example for the cart and the language choice (Article 82 of French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties). We use all other cookies and similar technologies, in particular for audience measurement and advertising, only with your consent (Article 82 of the same law; Article 6(1)(a) GDPR). You give or refuse it through our cookie banner; refusing is as easy as accepting. You can withdraw your consent at any time, for the future, using the “Cookie preferences” link at the bottom of every page.

5. Orders and payment

When you place an order, we process the data entered at checkout: name, delivery and billing addresses, email address, phone number, prints ordered and payment information. The legal basis is the performance of your order (Article 6(1)(b) GDPR). This data is necessary for the order; without it we cannot carry it out.

Payment is processed by Shopify Payments. Your payment data (for example card data) is processed by Shopify and by the payment providers Shopify uses; we do not receive your full card details. Technical data such as the IP address may be checked to prevent fraud (Article 6(1)(f) GDPR). If you use Apple Pay, Google Pay, Shop Pay or PayPal, the privacy terms of those providers also apply.

How long we keep order data is set out in section 12.

6. Delivery and customs clearance

For delivery, we pass your name, delivery address, email address and phone number to the carrier we use: United Parcel Service (UPS) or the United States Postal Service (USPS), which hands the parcel over to La Poste in France. The legal basis is the performance of your order (Article 6(1)(b) GDPR) and our legitimate interest in delivery (Article 6(1)(f) GDPR).

As your order is imported from the United States, the shipping documents contain the data needed for the customs declaration (name and address of the recipient, description and value of the goods). It is passed to the customs authorities via the carrier (Article 6(1)(b) and (c) GDPR).

7. Customer account

If you create a customer account, we store your details and your orders so that you can view them. The legal basis is Article 6(1)(b) GDPR. You can have your account deleted at any time by writing to info@miegallery.com.

8. Contact by email or form

When you write to us, we process your data to answer your enquiry (Article 6(1)(f) GDPR; for enquiries about an order, also Article 6(1)(b)). To combat spam, Shopify uses a captcha service on forms (Google reCAPTCHA or hCaptcha). Technical data such as the IP address is passed to the provider (Article 6(1)(f) GDPR).

Withdrawal through our online form. If you withdraw using the “Withdraw from contract” function, we process your name, your email address, your order number, the related order data (items ordered and address) and, if given, your reason for withdrawal and the date and time of receipt, in order to process the withdrawal and acknowledge its receipt (Article 6(1)(b) and (c) GDPR in conjunction with Article L221-21 of the French Consumer Code). For this function we use the “EU Widerrufsbutton” app of Visionz GmbH, Richthofenstr. 29, 31137 Hildesheim, Germany, which processes the data on our behalf (Article 28 GDPR). Visionz uses further service providers: Fly.io, Inc. for hosting, and Brevo SAS (France) and, as a fallback, Twilio SendGrid (USA) for sending email. Data may be transferred to the USA in the process.

9. Newsletter

If you sign up for our newsletter, we use your email address to send you news about our prints. The legal basis is your consent (Article 6(1)(a) GDPR). After signing up, you receive an email asking you to confirm; we send the newsletter only after this confirmation. You can unsubscribe at any time using the unsubscribe link in every email.

10. Audience measurement and advertising (only with your consent)

Shopify analytics. Shopify records for us how the site is used, for example the pages viewed and where visits come from.

Google Analytics and Google Ads. We use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which measure the use of the site and the effectiveness of our advertising. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework.

Meta pixel. We use the pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, which measures the effectiveness of our advertising on Facebook and Instagram. We are joint controllers with Meta for the collection of data on our site (Article 26 GDPR). Data may be transferred to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework.

These services are loaded only with your consent (Article 6(1)(a) GDPR; Article 82 of Law No. 78-17).

Wishlist. The “Add to wishlist” function lets you save prints for later. For this we use the “Wishlist by Square” app of Square Apps (Appsolve, Grigore Mora 11, 011885 Bucharest, Romania). Saved prints are stored in your browser and, if you are signed in, in your customer account; technical data such as the IP address is passed to the provider. Storage takes place only if you use the function yourself (Article 82 of Law No. 78-17). The legal basis is our legitimate interest in offering a convenient wishlist (Article 6(1)(f) GDPR).

11. Links to social networks

Our site contains links to Instagram, Facebook, Pinterest, TikTok, X (Twitter) and YouTube. These are simple links: data is only transmitted if you click a link and open the network.

12. Retention periods

We keep order, customer and account data only in our shop on the Shopify platform; we do not keep copies outside it. We delete or anonymise this data seven years after your last order or, for a customer account without an order, seven years after it was created. This period is based on the tax record-keeping periods in the United States. For any order of 120 euros or more, however, we keep the written record of the contract for ten years from delivery (Article L213-1 of the French Consumer Code). At your request, we delete your data earlier, unless a legal retention obligation applies.

We delete emails to info@miegallery.com, including a withdrawal notified by email, seven years after the enquiry concerned has been closed.

Your email address for the newsletter is kept until you unsubscribe.

Technical connection data (section 3) and audience measurement and advertising data (section 10) are kept by Shopify, Google and Meta for their own periods; we do not keep copies of them.

The Visionz GmbH app for withdrawal via our online form deletes the withdrawal data once the withdrawal has been fully processed and statutory retention periods have expired.

13. Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21), and the right to withdraw consent at any time, for the future (Article 7(3)). You can also set directives on the retention, erasure and communication of your data after your death (Article 85 of Law No. 78-17). To exercise these rights, write to us at info@miegallery.com or to our representative in the European Union.

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR), in France the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.