Privacy Policy

Last updated: August 5, 2025

This Privacy Policy explains how Lídia Vives processes personal data through the website www.lidiavives.com, in accordance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679).

1. Data Controller

Owner: Lídia Vives
Contact email: info@lidiavives.com
Website: www.lidiavives.com

2. Personal Data Collected

Depending on how you interact with the website, the following personal data may be collected:

  • Full name

  • Email address

  • Postal address

  • Phone number

  • IP address and browsing data (if cookies are accepted)

  • Purchase history (only if a transaction is made)

Please note: your payment details are never visible to the site owner, as payments are handled via secure platforms (PayPal and Stripe).

3. Purpose of Processing

Your personal data is used for the following purposes:

  • Managing the sale and rental of artworks, books, and merchandise

  • Organizing and delivering photographic services

  • Responding to inquiries and requests for collaborations or commissions

  • Sending newsletters (with your prior consent)

  • Sending order confirmations and purchase-related updates

  • Performing analytics and statistics to improve user experience

4. Legal Basis for Processing

The legal bases for processing your data are:

  • Performance of a contract: for handling purchases and service agreements.

  • Explicit consent: for sending marketing communications (e.g. newsletters).

  • Legitimate interest: for analyzing website traffic and preventing fraud.

5. Data Sharing and Third Parties

Your personal data may be processed by third-party service providers acting as data processors:

  • Squarespace: website hosting and contact forms

  • Stripe and PayPal: secure payment processing

  • Google Analytics: website usage analytics

  • Mailchimp: newsletter and mailing list management

All providers apply appropriate safeguards in accordance with the GDPR.

6. International Data Transfers

Some of the above providers (e.g. Google, Mailchimp, Stripe, and Squarespace) may store data outside the European Economic Area, such as in the United States. In such cases, data transfers are protected using Standard Contractual Clauses (SCCs) approved by the European Commission or other equivalent safeguards.

7. Data Retention

Your personal data will be retained for the following periods:

  • While there is an active business or contractual relationship

  • Until you request deletion of your data

  • For the period necessary to comply with legal or tax obligations

Analytics and browsing data are retained for a maximum of 26 months.

8. Your Rights Under GDPR

As a user, you have the right to:

  • Access your personal data

  • Request rectification or deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw your consent at any time

To exercise your rights, you can email: info@lidiavives.com

If you believe your rights have not been respected, you can file a complaint with your local Data Protection Authority, such as the Spanish Data Protection Agency (AEPD).

9. Data Security

This website and its service providers implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of your personal data.

10. Cookies Policy

This website uses both first-party and third-party cookies to improve user experience and analyze website usage. You can configure or reject non-essential cookies via the consent banner. For more information, see the Cookies Policy .

11. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time. Users are encouraged to review it periodically to stay informed about how their data is handled.

Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

info@lidiavives.com