Privacy policy

Who's responsible for your data

Ángeles Martínez Pomata, Spanish national ID (DNI) 33519637-N, address: Cala Rajá, 1, 04118 Níjar (Almería, Spain). Contact: [email protected].

What we collect and why

This site is a static showcase: no accounts, no cart, no advertising tracking. We only process data you give us directly: through two forms and, if you buy a painting, the purchase details:

• Newsletter. Your email, confirmed by double opt-in. Used only to send you occasional notes about new work and the studio: light promotion, never more than once or twice a month. Legal basis: your explicit consent when you confirm the subscription. You can unsubscribe any time via the link in any email.
• Contact / enquiry form. Your name, email, whatever message you write and, if you attach them to a commission request, reference images. Used only to reply to your question about a piece, a commission, or anything else. Legal basis: your consent when you submit the form and, if you ask to buy or commission something, steps taken at your request before a contract.
• Buying a painting. Your name, email, phone number, shipping and billing address, the painting bought and the payment confirmation (never your card details). We use them to complete the sale, ship the painting, issue the invoice and handle returns or guarantee claims. Legal basis: performance of the sales contract and compliance with legal (tax and accounting) obligations.

To count visits we use Cloudflare Web Analytics, without cookies and with aggregate figures only; we use no tracking or advertising cookies (see the cookie policy for detail).

Who we share data with

We never sell or hand over your data for commercial purposes. We use these providers to run the site:

• Brevo (formerly Sendinblue): sends the newsletter and enquiry replies. EU-based company.
• Cloudflare: hosts the site and processes form submissions (Cloudflare Pages).
• Stripe and PayPal: if you buy an original, you pay on Stripe’s (card) or PayPal’s secure page. They handle your payment details under their own policies; we only receive your name, email, shipping address and the payment confirmation, never your card details.
• Print stores (Fine Art America, Posterlounge): if you click a link to buy a print, you leave this site and that store handles your data under its own policy. We never receive your payment details.

How long we keep your data

Newsletter subscriptions: until you unsubscribe. Contact form enquiries: 1 year from the last contact, or until your request is resolved, whichever is longer. If you buy an original, the sale records (invoice, shipping) are kept as long as tax and commercial law require (up to 6 years).

International transfers

Cloudflare may process technical data (such as your IP address) on servers outside the EU, with the safeguards the GDPR provides (standard contractual clauses and the EU-US Data Privacy Framework). To adapt the site to your country (shipping and prices) we use the country Cloudflare infers from your IP at that moment; we don't store it. If you pay for a painting, Stripe and PayPal may process your payment data outside the EU under the same safeguards.

Your rights

You can withdraw your consent at any time, and ask for access, correction, deletion, objection, restriction, or portability of your data, by writing to [email protected]. You can also complain to the Spanish data protection authority (AEPD) if you think we've mishandled your data.

Children

This site isn't directed at anyone under 14. In Spain, anyone under 14 needs a parent's or guardian's consent to give us their data (newsletter or form). If we find we've collected a minor's data without that consent, we'll delete it.