Skip to main content

Privacy Policy

Privacy Policy

Last updated: February 2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR), the data controller is:

Owner: Vicky Catalán
Address: C/ Antonio Soler nº 49, 28905 Getafe, Madrid, Spain
Email: hola@vickycatalan.com
Website: https://www.vickycatalan.com

2. Purpose of Processing

Personal data collected through this website may be processed for the following purposes:

a) General Enquiries

  • Responding to contact form submissions.
  • Managing enquiries related to artworks, collaborations or professional projects.

b) Online Artwork Sales

  • Order and invoice management.
  • Shipping coordination.
  • After-sales service.
  • Compliance with tax and accounting obligations.

c) Atelier Membership

  • Managing applications and registrations.
  • Processing recurring or reservation payments.
  • Administrative and contractual communication.

d) Card Payments

Online payments are processed through secure third-party payment providers (such as Stripe or similar certified platforms).
Card details are not stored by the website owner. Payment data is processed directly by the payment provider in accordance with their own privacy policy.

3. Legal Basis

Data processing is based on:

  • User consent.
  • Performance of a contract (purchase or membership).
  • Compliance with legal obligations.
  • Legitimate interest in responding to professional enquiries.

4. Data Retention

Personal data will be retained:

  • For the duration of the contractual relationship.
  • As required by tax and accounting legislation.
  • For the time necessary to manage enquiries.

5. Recipients

Personal data will not be shared with third parties except where legally required.

Access may be granted to:

  • Hosting providers.
  • Email service providers.
  • Payment platforms (e.g., Stripe).
  • Accounting or tax advisors.

All service providers operate under appropriate data processing agreements where required.

6. International Transfers

Some technical providers (such as payment or email platforms) may process data outside the European Economic Area.
In such cases, appropriate safeguards in accordance with GDPR will apply.

7. User Rights

Users have the right to:

  • Access their personal data.
  • Request rectification of inaccurate data.
  • Request erasure of their data.
  • Request restriction of processing.
  • Object to processing.
  • Request data portability.

To exercise these rights, users may contact:
hola@vickycatalan.com

Users also have the right to lodge a complaint with their local data protection authority.

8. Security

Appropriate technical and organisational measures are implemented to protect personal data against unauthorized access, alteration, disclosure or destruction.

9. Cookies

This website uses technical and, where applicable, analytical cookies.
Please refer to the Cookies Policy for detailed information.