Privacy Policy
Last updated: 11 October 2025
​
Welcome. Protecting your privacy matters to me. This Privacy Policy explains how I collect, use, disclose, and safeguard your personal data when you visit or use my site www.adrianacolonna.art (the “Service”), including for visitors in the EU and internationally.
1 | Controller & Contact Information
I, Adriana Colonna, am the data controller responsible for processing your personal data through this website.
Contact email: studio@adrianacolonna.art
​
2 | What Personal Data I Collect & Where From
​
2.1 Categories of Data
-
Identity / Contact Data: name, email address, postal address (when provided)
-
Account Data: username, password (if you register)
-
Transaction / Order Data: products ordered, billing, shipping info
-
Usage / Technical Data: IP address, browser, device, pages visited, timestamps, diagnostics
-
Cookies & Tracking Data: data from cookies, web beacons, scripts, etc.
2.2 How Data Is Collected
​
-
Directly from you (e.g., placing orders, contacting me)
-
Automatically, during your use of the service (analytics, cookies)
-
From third parties or service providers (e.g., payment/shipping services)
​
3 | Purposes & Legal Basis for Processing
​
I process your personal data for the following principal reasons, and a legal basis supports each:
​
-
Order fulfillment & service delivery: I use personal and contact data to complete your purchases (e.g., billing, shipping). This is necessary to perform the contract we have with you.
-
Communication & support: I use your email or phone to send you order updates, confirmations, or respond to your inquiries. This also falls under the contract / legitimate interest basis.
-
Marketing & promotional messages: If you consent, I may send you newsletters or information about new works or offers. You can withdraw consent at any time.
-
Analysis & improvement: I use usage and technical data (e.g., pages visited, device information) to understand how my website is used and to improve your experience. This is based on my legitimate interest in improving the service, unless doing so would outweigh your rights.
-
Legal, tax & accounting compliance: I process transaction, billing, and order data as required by law (for records, taxes, audits). The legal basis here is my legal obligation.
If any processing is based on your consent (e.g., marketing), you can withdraw that consent at any time without affecting the lawfulness of past processing.
4 | Cookies, Tracking & Consent
I use cookies and similar technologies to enhance your experience, analyze site usage, and provide certain functionality.
-
Essential cookies are necessary for site functionality and are always active.
-
Non-essential cookies (analytics, marketing) are only used after you provide consent (via a cookie banner or preference settings).
-
You can accept or decline non-essential cookies and change your preferences at any time.
-
If you refuse cookies, some parts of the site may not function as intended.
5 | Sharing Your Data / Recipients
-
I may share your personal data with:
-
Service Providers / Processors (e.g., hosting, email, payment gateways, shipping partners) under data protection agreements
-
Affiliates (if any), with obligations to follow this policy
-
Business Transactions (e.g., sale or transfer of the business)
-
Legal / Compliance entities (courts, authorities), when required by law
I do not sell your personal data to third parties.
6 | International Transfers of Data
Your personal data may be processed or stored in locations outside your country of residence, including outside the EU / EEA. When that happens, I commit to implementing appropriate safeguards (e.g., Standard Contractual Clauses, adequacy decisions) to protect your data and rights.
7 | Retention of Data
I retain personal data only as long as necessary:
-
Order/transaction/billing data: retained for [Insert retention period, e.g., 7 years] (for legal / tax compliance)
-
Usage/analytics data: retained for [Insert period, e.g., up to 2 years]
-
If you request deletion, I will erase or anonymize the data, unless I am legally required to retain it.
8 | Your Rights
Under applicable data protection laws (e.g., GDPR), you may have the following rights:
-
Access: to request a copy of your personal data
-
Rectification: correct inaccurate or incomplete data
-
Erasure (Right to be forgotten): in certain circumstances
-
Restriction of processing
-
Objection: to processing (e.g., marketing, profiling)
-
Data portability: receive your data in a structured, machine-readable format
-
Withdraw consent: if processing is based on consent
-
Complain to your local data protection authority
To exercise any of these rights, contact me at studio@adrianacolonna.art. I will respond within legally required time frames.
9 | Security & Data Breach
I adopt reasonable technical and organizational measures (e.g., encryption, access controls, secure infrastructure) to protect your data.
Suppose a data breach occurs that poses a risk to your rights or freedoms. In that case, I will assess the impact and, if required by law, notify the relevant supervisory authority and affected individuals within 72 hours (or as mandated by law).
10 | Children’s Privacy
This service is not intended for children under 16 (or the applicable minimum age in your country). I do not knowingly collect personal data from children under that age. If I learn that I have collected such data without proper consent, I will delete it promptly.
11 | Changes to This Policy
I may update this policy occasionally. If changes are material, I will notify you (e.g., by email if I have your address) and update the “Last updated” date above. Changes apply only to new data collected after the update.
12 | Contact
If you have questions, concerns, or wish to exercise your rights regarding your personal data, you may contact me at:
​