Last updated: 16 September 2025 Privacy & cookies policy – in accordance with Articles 13 and 14 of the General Data Protection Regulation (EU) 679/2016 ("GDPR")
1. WHO WE ARE – DATA CONTROLLER
The Data Controller responsible for your personal data is:
Musée de Mougins SAS
5 rue des Mûriers, 06250 Mougins, France
SAS registered under number 512 676 560 00034
Contact: admin@thelevettletter.com
2. SUBJECT
This Privacy Policy & Cookies policy ("Privacy Policy") describes how Data Controller (also referred to as "we", "us" or "our") we collects, uses, and discloses your personal information when you access or visit our website
http://www.thelevettletter.com (the "Site") and uses our services, which includes:
A. request for contact and/or information;
B. registration in the personal area of the Site;
C. purchase of the subscription to the Levett Letter & Lounge ("Levett Letter & Lounge Subscription"), which shall include:·
- 12 monthly intelligence reports from Christian Levett,
- Artist profiles with acquisition timing and context,
- Market insights from 30 years collecting,
- Museum alignment forecasts, Auction & fair highlights,
- Access to Christian Levett’s full collection online (password-protected),
- Monthly webinar sessions with Christian Levett,
- Invitation to a private spring event at Christian Levett’s palazzo in Florence (starting 2026),
- Invitation to the annual autumn gathering at FAMM in Mougins (starting 2026),
A complimentary signed book collection of all FAMM & Christian Levett publications. (also, the "Services")
For purposes of this Privacy Policy, "User", "you" and "your" means you as the user of the Site, the Services, whether you are a customer, website visitor, another individual acting as professional or an entity whose information we have collected pursuant to this Privacy Policy.
3. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy is valid from the date of publication (latest update: 2
nd September 2025).
We may update this Privacy Policy from time to time, including reflecting changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.
4. SOURCE FOR DATA COLLECTION
The personal data described in the following sections (the "Personal Data" or the "Data") are automatically collected or provided by Users through browsing or use of the Site and the use of our Services. We may also obtain your Data from third parties, including from vendors and service providers who may collect information on our behalf, such as:·
- Companies who support our Site and Services.
- Our payment processors, such as Stripe, which collect payment information to process your payment in order to fulfill your purchases of Levett Letter & Lounge Subscription and provide you with the Services you have requested, in order to perform our contract with you. Notwithstanding that your bank account data and related data will be collected only by Stripe that will process such data as autonomous data controller.
5. HOW WE COLLECT AND USE YOUR DATA
Your Data will be processed in pursuance of the principles of fairness, lawfulness and transparency, through manual and automated methods and by deploying either paper and electronic means, in any case within the limits of the purposes of Data processing(s) set forth by the present Privacy Policy and, in any case, in order to ensure the safety and confidentiality of your Data.
6. DESCRIPTION OF DATA PROCESSING
a) Accessing or visiting the Site
Categories of data:
We automatically collect certain information about your interaction with the Site and Services, which may include information about how you access and use our Site, including device information, browser information, network connection information, IP address, logs, and other information related to your interaction with the Services.
Purpose of the processing:
To collect of anonymous statistical Data on the use of the Site by the Users, as well as for controlling the Site operation. In particular we may infer information about your interactions with our Site and other Services you use, the content you view and the search queries you submit; information about you based on your interaction with our Services; information on the type of device you are using, how you access our Site, your browser or operating system and your Internet Protocol ("IP") address.
Mandatory nature of the provision of data:
Optional – The failure to provide the Data, carried out by disabling cookies/local Storage in the browser, could prevent you from accessing all the Site functions.
Legal basis of processing
The legitimate interest of the Data Controller to operate and control the Site and to obtain Data on its usage, or your consent, depending on the cookie. Consent can be revoked at any time.
Data storage period
Depending on the purpose of the individual cookies and in any case no later than 2 years from the date of access to the Site.
Please check also below our cookie policy for more information
b) Handling enquiries on our contact page
Categories of data
Name, surname, e-mail address; data communicated in the appropriate "message" field on the Site or to the Data Controller's e-mail address.
Purpose of processing
To manage requests for contact or information on the Data Controller's activity made through the appropriate page of the Site ("Contacts") or by e-mail to the Data Controller.
Mandatory nature of the provision of data
Necessary. If you do not provide such Data, it will not be possible for the Data Controller to process the requests sent.
Legal basis of processing
The need to perform a contract or to take pre-contractual measures to which you are a party, as well as the need to comply with legal obligations (art. 6, c.1, lt. b and c) GDPR).
Data storage period
The Data Controller undertakes to delete the Data from its systems provided in relation to requests submitted through the Site or by e-mail after 1 year from the date of provision.
c) Registration and access to personal area
Categories of data
Personal and contact data: name, surname, tax code in case you purchase the Levett Letter & Lounge Subscription as private customer or VAT number if you are a professional, email, address, telephone number – Other data relevant category (private/professional).
Purpose of processing
To allow you to register as a customer on the Site and to access the reserved and personal area of the Site in order to purchase the Levett Letter & Lounge Subscription or use the Services.
Mandatory nature of the provision of data
Necessary. If you do not wish to provide your data, you will not be able to register as a customer or use the related Services in the reserved personal areas of the Site
Legal basis of processing
The need to perform a contract or to take steps prior to entering into a contract to which you are party, as well as the need to comply with legal obligations.
Data storage period
The Data Controller undertakes to erase your Data from its systems provided for your registration and access to the reserved areas of the Site and for use of the related Services, 10 years after the date of cancellation of the relevant registration
.
d) Marketing and advertising
Categories of data
Personal and contact data: name, surname, email, address, company, country, region, city – Other data: relevant category (private/professional). Personal Data communicated in the specific registration form to access your personal area of the Site.
Purpose of processing
For marketing and promotional purposes, such as sending you marketing, advertising and promotional communications by email, text message or postal mail, and showing you advertisements for Levett Letter & Lounge Subscriptions and Services, also through the use of our social network accounts (Meta, Instagram, TikTok). We may also ask you to participate in customer satisfaction surveys or inquiries or invite you to any of our events.
Mandatory nature of the provision of data
Optional. If you do not provide these Data, it will not be possible for the Data Controller to send you marketing and promotional communications.
Legal basis of processing
The consent given in the registration process to your personal area of the Site by flagging the relative "consent button". You can exercise your right to object to the receipt of these communications at any time, immediately or at a later date, by writing to admin@thelevettletter.com.
Data storage period
The Data Controller undertakes to erase your Data from its systems provided in relation to marketing and advertising 24 months after the date of each purchase or request.
e) Purchase of Letter & Lounge Subscription
Categories of data
Personal and contact data: name, surname, tax code in case of booking and/or purchase of the Levett Letter & Lounge Subscription, email, address, phone number – Purchase Data: type and price of purchased Services.Purpose of processingTo enable you to purchase the Levett Letter & Lounge Subscription and for our management of post-sales services. The Data Controller may use third-party tools or applications for payments the purchase of the Letter & Lounge Subscription, managed by a provider that acts always in full compliance with privacy regulations. See here for more details:
https://stripe.com/en-it/privacy;
https://stripe.com/en-it/legal/consumer .
Mandatory nature of the provision of data
Mandatory. If you do not wish to provide your Data, you will not be able to purchase the Levett Letter & Lounge Subscription or receive post-sales services.
Legal basis of processing
The necessity to perform a contract or pre-contractual obligations of which you are a party, as well as the necessity to comply with legal obligations.
Data storage period
The Data Controller undertakes to delete your Data from its systems, collected on the occasion of your purchases, after 10 years from purchase of Letter Subscription & Lounge Subscription.
7. SUBJECTS AUTHORISED TO PROCESS DATA
Your Data will be processed by duly appointed employees of the Data Controller, who have been expressly authorized to process the Data under our instructions and taking appropriate measures to protect your Data in relation to all the purposes set forth above.
8. POSSIBLE RECIPIENTS OF THE DATA
The following subjects may become aware of your Data in connection with the processing purposes set out in this Privacy Policy and will be allowed to process the Data either as an autonomous Data controllers or Data processors duly appointed by the Data Controller (the list of such Data processors is available upon e-mail request to be submitted to: admin@thelevettletter.com·
- Subjects dealing with the management of the centralized system for customer relations and/or with marketing services (sending newsletters, market research, customer satisfaction analysis);
- Subjects who perform activities functional to the execution of the purchase of the Levett Letter & Lounge Subscription and of the Services i.e. banking service providers, fraud prevision service providers, payment services providers, carriers and shippers, companies providing IT infrastructure and IT support and consulting services, companies providing Data analysis and development services as well as law, accounting and auditing firms;
- the Data Controller's purchasers or successors in the event of merger, sale, restructuring, reorganization, winding-up or other sale or transfer of some or all of the Data Controller's assets in the context of which personal information are transferred.
9. TRANSFER OF PERSONAL DATA ABROAD
Please note that we may transfer, store and process your personal information outside the country you live in. If the Data need to be transferred abroad, the Data Controller undertakes to:
1.Ensure that the country to which the Data will be sent guarantees an adequate level of protection, as provided under Article 45 of the GDPR; or
2. Comply with the standard contractual clauses for Data protection approved by the European Commission as to the transfer of personal Data outside the EEA in accordance with Article 46.2 of the GDPR.
10. YOUR RIGHTS AS DATA SUBJECT
In relation to the above Data processing, you can exercise at any time, by sending an email to admin@thelevettletter.com: the following rights under the conditions and within the limits indicated in Articles 12 and 13 of the GDPR:
- Right of access (Art. 15 GDPR).ü Right of rectification of inaccurate Data and completion of incomplete Data (Art. 16 GDPR).
- Right to erasure of Data (Art. 17 GDPR).ü Right to restriction of processing (Art. 18 GDPR).
- Right to object to processing carried out in accordance with Art. 6, paragraph 1, letters e) or f) GDPR.
You also have the right to lodge a complaint with the Supervisory Authority, i.e., the Italian Data Protection Authority known as (“
Guarantee Privacy”) and/or other competent supervisory authorities (Art. 77 GDPR).Moreover, if the processing is based on consent or a contract and is carried out by automated means, you have the right to receive your Data in a structured, commonly used, and machine-readable format and, if technically feasible, to transmit those Data to another controller without hindrance under Article 20 of the GDPR.
You can also choose to be contacted for marketing purposes exclusively via traditional methods, expressing your opposition to receiving communications through automated methods.You have the right to withdraw the consent provided for marketing purposes at any time by writing to admin@thelevettletter.com
MINORS' DATA
The Site and the Services are no intended for people under the age of 18; therefore, the Data Controller does not carry out any collection and/or processing of personal Data relating to such minors. In the event that personal Data relating to minors are entered on the Site, we will delete them.
COOKIES POLICY
We automatically collect certain information about your interaction with the Site and the Services ("
Usage Data"). To do this, we may use cookies, pixels and similar technologies ("
Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.
COOKIESWe use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). We may also permit third parties and services providers to use Cookies on our Site (http://www.thelevettletter.com) to better tailor the services and advertising on our Site and other websites.Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available.
