Privacy Policy — The Art Collection

Last updated: 22 May 2026

1. Introduction

Duus Partners P/S ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect when you use The Art Collection (the "App"), why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR) and applicable Danish data protection law.

Please read this policy carefully. By using the App, you confirm that you have read and understood it.

2. Who Is Responsible for Your Data

Duus Partners P/S is the data controller for the personal data collected through the App.

Duus Partners P/S CVR-nr. 35 47 37 50 Hejrevej 7, 2970 Hørsholm, Denmark Email: info@duus.com Website: theartcollection.duus.com

3. What Data We Collect

Depending on how you use the App, we may collect the following categories of personal data:

Account data: name, email address, and password when you create an account.

Profile data: any optional information you choose to add to your profile, such as a display name or profile picture.

Collection data: artworks, images, notes, and other content you add to your collection within the App.

Usage data: information about how you interact with the App, including features used, pages visited, and time spent. This helps us understand and improve the App.

Device data: device type, operating system, app version, language settings, and unique device identifiers.

Payment data: if you subscribe to a paid tier, payment is processed by a third-party provider (such as Apple or Google). We do not store your full payment details.

Advertising data: if you use the ad-supported tier, our advertising partners may collect data about your device and app usage to serve relevant advertisements. See section 7 for more details.

4. How We Collect Your Data

We collect data in the following ways: directly from you when you create an account, add content, or contact us; automatically when you use the App, through analytics tools; and from third parties such as Apple or Google when you sign in or subscribe through their platforms.

5. Why We Collect Your Data and Our Legal Basis

We only process your personal data where we have a lawful basis to do so under GDPR. The purposes and their legal bases are as follows:

To provide and operate the App — this is necessary to perform our contract with you (GDPR Article 6(1)(b)).

To manage your account — necessary for the performance of our contract with you.

To process payments — necessary for the performance of our contract with you.

To improve the App — based on our legitimate interest in developing and maintaining a high-quality service (GDPR Article 6(1)(f)).

To send you service communications — such as updates to these Terms or this Policy, based on our legitimate interest or legal obligation.

To serve advertisements (ad-supported tier only) — based on your consent, which you may withdraw at any time (GDPR Article 6(1)(a)).

To comply with legal obligations — where required by applicable law (GDPR Article 6(1)(c)).

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Specifically: account and collection data is kept for as long as your account is active; if you delete your account, we will delete your personal data within 30 days, unless we are required by law to retain it; usage and analytics data is typically retained for up to 24 months in aggregated or anonymised form.

7. Advertising and Third-Party Partners

If you use the ad-supported tier of the App, advertisements are served by third-party advertising networks. These partners may use cookies, device identifiers, and similar technologies to collect data about your device and usage in order to serve you relevant ads. This constitutes processing based on your consent, and you may withdraw consent at any time through your device settings or the App's privacy settings.

We may also use third-party analytics providers (such as Apple Analytics or Firebase) to help us understand how the App is used. These providers process data on our behalf and are bound by appropriate data processing agreements.

A list of our key third-party partners is available on request at info@duus.com.

8. Sharing Your Data

We do not sell your personal data. We may share your data in the following circumstances: with service providers who process data on our behalf (such as hosting, analytics, and payment providers), under strict data processing agreements; with advertising partners, if you use the ad-supported tier and have given consent; with Apple or Google, as required to operate the App through their platforms; with authorities, if required to do so by law or to protect our legal rights.

9. International Data Transfers

Some of our third-party partners may process your data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR.

10. Your Rights

As a data subject under GDPR, you have the following rights:

Right of access — you may request a copy of the personal data we hold about you.

Right to rectification — you may ask us to correct inaccurate or incomplete data.

Right to erasure — you may request that we delete your personal data, subject to certain legal exceptions.

Right to restriction — you may ask us to restrict how we process your data in certain circumstances.

Right to data portability — you may request your data in a structured, machine-readable format.

Right to object — you may object to processing based on legitimate interests, including direct marketing.

Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@duus.com. We will respond within 30 days.

11. Children's Privacy

The App is not intended for children under the age of 15. We do not knowingly collect personal data from anyone under 15. If you believe we have inadvertently collected such data, please contact us at info@duus.com and we will delete it promptly.

12. Cookies and Similar Technologies

The App may use cookies or similar technologies (such as device identifiers) for functional, analytical, and advertising purposes. You can manage your preferences through your device settings or the App's privacy settings. Withdrawing consent for non-essential cookies will not affect your ability to use the core features of the App.

13. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material, we will notify you through the App or by email. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

15. Right to Complain

If you believe we are not handling your personal data in accordance with applicable law, you have the right to lodge a complaint with the Danish data protection authority:

Datatilsynet Carl Jacobsens Vej 35, 2500 Valby, Denmark www.datatilsynet.dk

16. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us:

Duus Partners P/S CVR-nr. 35 47 37 50 Hejrevej 7, 2970 Hørsholm, Denmark Email: info@duus.com Website: theartcollection.duus.com

© 2026 Duus Partners P/S. All rights reserved.