Your data
Privacy and cookies
This notice explains how Gallery Layout saves your choices and handles the content that you provide while you use the tool.
Analytics and cookies
Gallery Layout asks for permission before it loads Google Analytics or sends data to Google. Consent is the legal basis for this processing. You can decline analytics and continue to use the full tool.
If you allow analytics, Google Ireland Limited receives the page origin and path without query data, visit and referral information, general location, device and browser details, and interaction data. Gallery Layout also records successful artwork searches and downloads with aggregate counts. It does not send frame dimensions, artwork choices, room photos, or artwork files.
Google Analytics uses _ga and _ga_<stream identifier> cookies for up to two years. Gallery Layout keeps user-level and event-level data for two months. Aggregated reports can remain available for longer. Google may process data outside the EEA under approved transfer safeguards. Read how Google uses information from sites that use its services.
Use Cookie preferences in the footer to change or withdraw consent. This stops future collection and removes accessible Analytics cookies. To request deletion of data collected earlier, first use Get Analytics deletion code in Cookie preferences and send the code to the contact address below.
Browser storage
The site stores frame sizes, artwork preferences, and recent search state on your device so your choices can survive a reload. Use Clear all on the frame page to remove these choices, or clear site data in your browser. This does not change your separate Analytics consent or delete data that Google received earlier.
Room photos, artwork, and downloads
A custom room photo stays in your browser. The site does not upload or store it. The server requests museum-hosted images and processes selected images to create downloads, but it does not save your choices in a user database.
Hosting and technical logs
Amazon Web Services (AWS) delivers the site and processes image and download requests. AWS and Gallery Layout process IP addresses, request times, paths, browser details, and error details to operate, secure, and troubleshoot the service. The legal basis is the legitimate interest in providing a reliable and secure service.
API and function error logs are kept for 30 days. Request and response content is not logged. AWS may process requests outside the EEA under its Data Processing Addendum and Standard Contractual Clauses. Read the AWS data-processing information.
Your privacy rights
You can ask to access, correct, delete, or restrict your personal data where these rights apply. You can also request data portability and withdraw consent at any time without affecting earlier lawful processing.
Send requests to the contact address below. You also have the right to make a complaint to the Office of the Data Protection Ombudsman in Finland.
Controller and contact
Thomsoft
Business ID 3275146-6
Finland
Email: