1. Data controller
The data controller is Carmelita Iezzi, based in Italy. For any privacy-related request, please write to info@carmelitaiezzi.com.
2. Data collected
When you use the enquiry form, the website collects the information you voluntarily provide: your name, email address, the content of your inquiry, and your acceptance of this privacy policy. The form also records a timestamp and a hashed technical identifier used solely to prevent abuse and spam.
The website does not require an account, does not process payments, and does not intentionally collect special categories of personal data. Please do not include sensitive information in the inquiry field.
3. Purpose and legal basis
The data is processed to receive and reply to your enquiry, to provide information about artworks, editions, catalogues, commissions, gallery representation, or acquisitions, and to protect the website from abusive or automated submissions. The legal basis is your consent (Article 6(1)(a) GDPR) for the enquiry, and the legitimate interest of the controller in preventing spam and protecting the website (Article 6(1)(f) GDPR).
4. Recipients and transfers
The data is transmitted by email to the artist and may be processed by the hosting provider, email service provider, and technical service providers strictly necessary to operate the website. These providers act as data processors where required by law. Data is not sold or shared for marketing purposes.
The website loads Google Sans from Google Fonts. When the page is loaded, the browser may connect to Google’s servers, which may receive technical information such as your IP address. Please refer to Google’s privacy documentation for further information.
5. Retention
Enquiry emails are kept for as long as necessary to handle the request and any follow-up, and for no longer than 24 months unless a legal obligation requires a longer retention period. The anti-spam rate-limit hash is kept for a maximum of one hour. Technical session cookies are deleted when the browser session ends.
6. Cookies
This website does not use analytics, advertising, or profiling cookies. It may use a technical session cookie solely to protect the enquiry form against abuse. No consent is required for strictly technical cookies, but you can manage or delete cookies through your browser settings.
7. Your rights
Under the GDPR, you have the right to request access to your personal data, rectification, erasure, restriction of processing, portability, and objection to processing. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To exercise your rights, write to info@carmelitaiezzi.com.
You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or with the supervisory authority of your country of residence.
8. Changes
This policy may be updated to reflect changes in the website, the services offered, or applicable law. The date of the latest update is shown at the top of this page.
9. Contact
For questions about this policy or the processing of your data, please contact info@carmelitaiezzi.com.