ORETALIA

Privacy Policy

Data controller

  • Identity: [FULL NAME / COMPANY NAME]
  • Tax ID (NIF/CIF): [TAX ID]
  • Registered address: [FULL ADDRESS]
  • Email: [CONTACT EMAIL]

What data do we collect?

Through the “Request information” form available on artwork pages, artist pages, and the Contact page, ORETALIA collects the following personal data voluntarily provided by the user:

  • Name
  • Email address
  • Phone number (optional)
  • Message or inquiry
  • Where applicable, the artwork or artist the inquiry relates to
  • Language in which the inquiry was made

Additionally, the Website's technical operation may automatically collect non-identifying technical information (such as IP address, browser type, or date and time of the request) for security and service-operation purposes.

For what purpose do we process your data?

Data provided through the contact form is used exclusively to manage and respond to your request for information about an artwork, an artist, or any other ORETALIA-related inquiry, and to contact you by email or phone regarding that request.

We do not use your data to build profiles or make automated decisions, nor do we use it for purposes other than those described here without informing you in advance.

What is the legal basis for processing your data?

The legal basis is the consent you give by checking the corresponding box and submitting the contact form (Art. 6.1.a of Regulation (EU) 2016/679, GDPR). You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

How long do we keep your data?

Your data will be kept for as long as necessary to handle your request and, afterwards, for the legally required periods to address any potential liabilities, or until you request its deletion. Once these purposes have been fulfilled, the data will be deleted or, where applicable, anonymized.

Who will your data be shared with?

Your data will not be shared with third parties except where legally required. However, to properly provide the service, ORETALIA relies on the following providers, who act as data processors under Article 28 GDPR:

  • A hosting and content-management provider (Sanity), where data submitted via the form is securely stored.
  • A transactional email delivery provider (Resend), used exclusively to send your contact request to us by email.
  • [To be completed if applicable: web analytics tools (e.g. Google Analytics), CRM, or other third-party tools added in the future]

These providers only process your data following our instructions and in accordance with applicable data protection regulations.

What are your rights?

Anyone has the right to obtain confirmation as to whether ORETALIA is processing personal data concerning them. Data subjects have the right to:

  • Access their personal data.
  • Request rectification of inaccurate data.
  • Request erasure when, among other reasons, the data is no longer necessary for the purposes it was collected for.
  • Request restriction of the processing of their data.
  • Object to the processing of their data.
  • Request data portability.

You can exercise these rights by emailing [GDPR CONTACT EMAIL], indicating which right you wish to exercise and attaching a copy of an identity document. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing of your data infringes applicable regulations.

Minors

The services offered through the Website are aimed at adults. ORETALIA does not knowingly collect data from minors.

Security measures

ORETALIA has adopted the technical and organizational measures necessary to guarantee the security and integrity of the personal data it processes, and to prevent its alteration, loss, unauthorized processing or access.

Changes to this privacy policy

ORETALIA reserves the right to amend this privacy policy to adapt it to legislative or case-law developments, announcing any changes on this page with reasonable notice before they take effect.