PRIVACY POLICY
Who we are
martinvassilev.art is operated by Martin Vassilev (the “Controller”).
Contact for privacy matters: studio.mars619@gmail.com
Jurisdiction: The Netherlands / European Union. This policy is intended to comply with the EU General Data Protection Regulation (GDPR/AVG) and applicable Dutch law.
Personal data we process
-
Contact & correspondence: name, email address, and message content when you email or use a contact form.
-
Portfolio/commission materials (if applicable): briefs, references, files or media you voluntarily provide.
-
Usage & device data: IP address, browser/OS type, pages visited, timestamps (via server logs and cookies).
-
Cookies & similar technologies: see Cookies below.
Purposes and legal bases
-
Responding to enquiries and providing requested information — Legitimate interests (site operation and communication) or Contract (pre‑contractual steps when you request a quote/commission).
-
Operating, maintaining, and securing the website (troubleshooting, preventing abuse, security logging) — Legitimate interests.
-
Analytics and performance (only non‑essential cookies, if accepted) — Consent.
-
Marketing communications (only when you opt‑in) — Consent.
-
Compliance with legal obligations (e.g., tax and bookkeeping) — Legal obligation.
-
You may withdraw consent at any time (this does not affect processing already performed). You may also object to processing based on legitimate interests.
How we obtain data
-
Directly from you (emails, forms, files you upload or share).
-
Automatically from your device when you visit the site (logs, cookies, and similar technologies).
-
Through third‑party embedded content (e.g., fonts, video, maps) which may receive limited technical data to display content.
Disclosures and recipients
-
We share personal data only with service providers necessary to run our site and communications, under confidentiality and data‑processing terms where applicable, such as:
-
Website hosting / site platform and content delivery networks (CDN).
-
Email service providers.
-
Analytics / performance tools (only when you consent to non‑essential cookies).
-
Security providers (e.g., anti‑abuse, logging).
-
Professional advisers and public authorities when legally required.
-
We do not sell personal data.
International transfers
-
Some providers may process data outside the EEA. When this happens, we rely on applicable safeguards such as adequacy decisions or Standard Contractual Clauses, plus additional measures where appropriate.
Retention periods
-
Contact enquiries: retained up to 24 months after the last interaction.
-
Security logs: retained up to 12 months (longer if needed for incident review).
-
Analytics data: per the analytics tool’s configured retention (aggregated/anonymized where possible).
-
Contracts/commissions & invoices: retained as required by Dutch law (typically 7 years for tax).
-
Data is deleted or anonymized once retention periods expire.
Cookies
-
We use cookies and similar technologies to operate our site and understand performance. Essential cookies (security, core functionality) may be set without consent. Non‑essential cookies (analytics/performance and embedded media trackers) are used only with your consent via our cookie banner or preferences.
-
Change your preferences: use Cookie Settings (when available in the banner/footer) or your browser settings.
-
Blocking non‑essential cookies will not prevent access to the site, but some features may be limited.
Your rights (EU/EEA)
-
You have the right to access, rectify, erase, and restrict processing; to object to processing (including processing based on legitimate interests); to data portability; and to withdraw consent at any time.
-
To exercise your rights, email studio.mars619@gmail.com. We may need to verify your identity.
-
You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Children’s data
-
This site is not directed to children under 16. Where processing relies on consent, children under 16 require consent from a parent or guardian.
Security
-
We apply appropriate technical and organizational measures (e.g., TLS/HTTPS, access controls, least‑privilege practices, logging). No method is 100% secure; we review and improve safeguards on an ongoing basis.
Automated decision‑making
-
We do not use automated decision‑making or profiling that produces legal or similarly significant effects.
Changes to this Policy
-
We may update this policy from time to time. Material updates will be signposted by changing the “Last updated” date and, where appropriate, providing additional notice.
How to contact us
-
For any privacy questions or requests, contact: studio.mars619@gmail.com.
Disclaimer
-
This policy is provided for information purposes and does not constitute legal advice.