This policy explains how the personal data you provide to us through this website is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
Data controller
Controller: Diego Forriol Sánchez
Tax ID (NIF): 04589632M
Address: C/ Tintes 11, 16001 Cuenca (Spain)
Contact: privacidad@forriol.com
For what purpose do we process your data?
We process the data you provide to us in order to: (a) manage the purchase of work, its payment and its shipping; (b) respond to the enquiries and requests for information or commissions you send us through the contact form; and (c) if you give us your consent, send you news about new work and exhibitions.
What is the legal basis?
The legal basis is the performance of the contract of sale in the case of orders; your consent in the case of the contact form and the newsletter; and compliance with legal obligations in tax and accounting matters.
How long do we keep them?
Order data is kept for the periods required by tax and commercial regulations. Contact and newsletter data is kept until you request its deletion.
Who is your data shared with?
Data is not disclosed to third parties except where legally required. To provide the service, the following data processors are involved: Raiola Networks S.L., the web hosting provider on whose servers this site resides. Card payments are processed through the payment gateway Redsys, which processes the data needed to carry out the transaction. Your card details are not stored on this site.
What are your rights?
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to privacidad@forriol.com, stating the right you are exercising and attaching a copy of an identity document. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).