Legal

Privacy policy

Final details are still being completed on this page. For anything you need in the meantime, write to contact@myriyevskyy.com and I will answer personally.

This page explains what happens to your personal data when you visit myriyevskyy.com or buy a painting here. This is a small, artist-run gallery, so there is not much to explain — but what there is, we want to say plainly.

Last updated: [COMPLETAR: fecha de publicación de esta versión]

Who is responsible for your data

The data controller for this website is:

• Name / legal name: [COMPLETAR: nombre o razón social]
• Tax identification number: [COMPLETAR: NIF/CIF]
• Postal address: [COMPLETAR: domicilio postal completo]
• Country of establishment: Spain
• Email: contact@myriyevskyy.com
• Data protection officer: [COMPLETAR/VERIFICAR: designación de DPD — confirmar si procede]

Email is the only contact channel we have, and it is also the address for any privacy question or request. Write to contact@myriyevskyy.com and a real person will read it.

Orders and payments

Payments are handled entirely by Stripe, on Stripe's own hosted checkout pages. You can pay by card, Apple Pay or Google Pay.

This website never sees or stores your card details. They are entered on Stripe's page, not ours.

Once a payment succeeds, Stripe passes back to us only what is needed to fulfil the order:

• your name
• your shipping address
• your email address
• your phone number
• which painting you bought

We use that information to pack and ship the painting, to prepare the personalised certificate of authenticity that names you as the owner, to keep you informed about your order, and to keep the accounting and invoicing records the law requires.

Giving this information is necessary to buy a painting. It is not a legal obligation to give it to us, but it is a practical and contractual one: without a name, a delivery address and a way to reach you, we cannot take the order, ship the painting or issue the invoice, so the sale simply cannot go ahead.

If you write to us about a commission (a custom painting), we also process whatever you choose to tell us in that email conversation, for as long as it takes to discuss, agree and complete the work.

There is no shopping cart and no customer account: each painting is bought individually, one item per order.

Analytics cookies

We would like to know, in broad terms, whether people find the gallery useful — nothing more. For that we use Google Analytics 4 (measurement ID G-WL6RRH6TGL).

Analytics runs on every visit to this site. A notice tells you so the first time you arrive. What we look at is:

• which pages were viewed, and how many times
• an approximate country
• the type of device used

We read those figures in aggregate — we are not trying to identify you, and we do not combine them with your order. Be aware, though, that Google Analytics works by placing a cookie with a randomly generated identifier for your browser, so we prefer not to describe the raw data as anonymous.

There is no advertising, no cross-site tracking and no remarketing on this site.

How to opt out. You can stop this from your own browser at any time: block or delete cookies for this site in your browser settings, browse in a private/incognito window, turn on your browser's tracking protection, or install Google's official Google Analytics opt-out browser add-on. Clearing this site's data also deletes the analytics cookie.

[COMPLETAR/VERIFICAR: cookies técnicas o de seguridad que pueda establecer Cloudflare como proveedor de hosting/CDN.]

What is stored in your own browser

Two small things are kept by your browser, on your device:

• Your chosen shipping country, so you don't have to pick it again on every page.
• Your answer to the cookie banner (accepted or declined), so the banner only asks once.

Both are stored in your browser's own localStorage. Those values stay on your device and never leave it — they are not sent to us and not sent to anyone else. Clearing your browser's site data for myriyevskyy.com removes them.

Legal bases and how long we keep things

• Order and delivery data — legal basis: performance of the contract with you (and steps taken at your request before it). Kept for as long as needed to complete and support the order.
• Invoicing and accounting records — legal basis: compliance with our legal and tax obligations. These must be kept for the period the law sets: [COMPLETAR: plazo legal de conservación — confirmar con el gestor].
• Analytics — legal basis: your consent, given through the cookie banner and withdrawable at any time. Withdrawing consent does not affect the lawfulness of what was collected before.
• Emails you send us (questions, commissions, after-sales) — legal basis: performance of the contract where an order or commission is involved, otherwise our legitimate interest in answering people who write to us. Kept for as long as the conversation is relevant, and longer where an order or a legal obligation requires it.
• Disclosures to public authorities (tax authorities, customs) — legal basis: compliance with our legal obligations.

Who your data is shared with

We do not sell data. Ever. To anyone. We share it only with the service providers we need in order to actually get a painting to you:

• Stripe — payment processing on its own hosted checkout pages.
• DHL Express for orders to the United States, and Correos and local postal services within Europe — to deliver your painting. Every shipment is insured and tracked, so the carrier necessarily receives the delivery details you gave at checkout in order to deliver the parcel and contact you if something goes wrong. [COMPLETAR: transportista utilizado para envíos fuera de Europa y Estados Unidos.]
• Cloudflare — hosting, content delivery and security for this website.
• Google Analytics — only if you accepted analytics in the cookie banner.

We may also have to disclose data to public authorities where the law obliges us to (for example tax authorities, or customs for shipments outside the EU).

International transfers

Some of the providers above are international and may process data outside the European Economic Area, under the transfer safeguards those providers apply to their own services. We do not control which mechanism each provider relies on, and we do not want to claim more precision than we can verify: [COMPLETAR/VERIFICAR: mecanismo de transferencia internacional de cada proveedor — Stripe, Cloudflare, Google, transportistas]. If you would like the details we hold on the safeguards used, or a copy of them where the provider makes one available, email us and we will pass on what we have.

If you ship to a country outside the EU, your address and contact details are by necessity handled in that country by the carrier and, where applicable, by customs.

Your rights

Under the GDPR you can ask us to:

• Access the personal data we hold about you
• Rectify anything that is wrong or incomplete
• Erase your data, where we are not legally required to keep it
• Port your data — receive it in a common, machine-readable format
• Restrict how we process it
• Object to processing based on legitimate interest
• Withdraw your consent to analytics at any time

To exercise any of these, email contact@myriyevskyy.com and say what you would like. We may need to ask a question or two to be sure it is really you before we act — that protects you, not us.

If you think we have handled your data badly, we would rather you told us first so we can put it right. But you always have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at aepd.es, or to the supervisory authority in your own country.

Things this site does not do

• There is no newsletter — we do not collect email addresses for marketing, and buying a painting does not sign you up for anything.
• There is no account or login system — no profiles, no passwords, no purchase history stored for you to log into.
• No data is processed for either of those purposes, because neither exists.
• We do not make automated decisions about you and we do not profile you.

Children

This gallery sells original paintings to collectors. The site is not directed at children and we do not knowingly collect data from them.

Changes to this policy

If we change how any of this works, we will update this page and change the date at the top. [CONFIRMAR: si el vendedor quiere además avisar por email a clientes recientes ante cambios sustanciales].

A note on what this page is

This is a plain-English description of how a small artist-run gallery handles your data. It is written to be honest and complete, but it is not legal advice.