Privacy Policy

At victoriadelgado.art, we are committed to protecting the privacy
of the users and customers of our online store. This Privacy
Policy explains how we collect, use, and protect the personal data
provided through this website.

1. Data controller

The data controller for the personal data collected through this
website is:

Owner: Victoria Eugenia Delgado Elvir
Tax ID: 46196875H
Address: Avda. Diagonal 343, 08037 Barcelona, Spain
Contact email: victoriadelgado360grados@gmail.com
Website: victoriadelgado.art

2. Personal data we may collect

Through this website, we may collect the following personal data,
provided it is supplied by the user or is necessary
to provide the service:

First and last name.
Email address.
Contact phone number, if provided.
Billing and/or shipping address.
Data related to orders, purchases, artworks, or products purchased.
Payment data necessary to manage the purchase, processed through secure payment providers.
Technical browsing data, such as IP address, device type, browser, or information obtained through cookies, where applicable.

3. Purposes of processing

Personal data may be processed for the following purposes:

Manage orders placed in the online store.
Process payments, invoicing, shipping, returns, or issues related to the purchase.
Respond to enquiries received via forms, email, or other contact channels.
Manage the business relationship with customers and users.
Comply with legal, tax, accounting, and administrative obligations.
Send communications related to orders, purchases, or contracted services.
Send marketing communications or updates, only where prior consent exists or there is a sufficient legal basis.
Improve the browsing experience and analyse website use, where analytics tools or cookies are used.

4. Legal basis for processing

Personal data is processed on the following legal bases:

Performance of a contract: to manage purchases, orders,
payments, shipping, invoicing, and after-sales support.
User consent: to respond to contact
forms, subscriptions to marketing communications, or acceptance of non-essential cookies,
where applicable.
Compliance with legal obligations: to meet
tax, accounting, administrative obligations, or legal requirements.
Legitimate interest: to prevent fraud, improve website security,
or respond to enquiries related to services or previous purchases.

5. Data retention

Personal data will be retained for as long as necessary to fulfil
the purpose for which it was collected and, thereafter, for the periods
legally required to address potential legal, tax,
accounting, or administrative liabilities.

In the case of marketing communications, the data will be retained as long as the
user does not withdraw consent or request to unsubscribe.

6. Disclosure of data to third parties

Personal data will not be disclosed to third parties, except where required by law or where
necessary to properly provide the online store services.

In particular, data may be disclosed to or processed by providers
necessary for the operation of the website and order management, such as:

Web hosting and technical maintenance providers.
Secure payment gateways or platforms.
Transport or courier companies.
Invoicing services, accounting management, or advisory services.
Web analytics, marketing, or email tools, where used and where there is a legal basis to do so.

These providers will process the data only in accordance with the controller’s
instructions and will adopt the corresponding security measures.

7. Online payments

Payments made through the online store are managed via secure payment
platforms. Bank or card details are not stored directly
by victoriadelgado.art, but are processed by the corresponding payment
provider under its own security and privacy terms.

If external payment providers are used, the user should also review
the privacy policies applicable to those services.

8. Shipping

To deliver orders, the strictly necessary
data may be shared with transport or courier companies, including name, address,
phone number, and shipping-related data.

9. Users’ rights

Users may exercise at any time their rights of access,
rectification, erasure, objection, restriction of processing, data portability
and, where applicable, the right not to be subject to automated decision-making.

To exercise these rights, you may send a written request to:

victoriadelgado360grados@gmail.com

The request must clearly indicate the right you wish to exercise, and proof
of the requester’s identity may be required when
necessary.

10. Right to lodge a complaint

If the user considers that the processing of their personal data does not
comply with applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency
via its website:
www.aepd.es.

11. Data security

The controller adopts the technical and organisational measures necessary to protect
personal data against unauthorised access, loss, misuse,
alteration, or disclosure.

However, users should be aware that no data transmission system of
data over the Internet is completely secure.

12. Minors

This website is not intended for minors. We do not knowingly collect
personal data from minors without the consent of their legal representatives.
If it is detected that data from a minor has been collected without authorisation, it will
be deleted as soon as possible.

13. Social media

If Victoria Eugenia Delgado Elvir has a presence on
social media, the data processed through those platforms will be governed both
by this Privacy Policy, where applicable, and by the privacy policies of each social network.

Interactions on social media, such as comments, messages,
mentions, or follows, may be processed for the purpose of managing the
relationship with users, responding to enquiries, or promoting artworks,
products, or artistic activities.

14. Cookies and similar technologies

This website may use first- and third-party cookies to enable its
operation, improve the user experience, carry out statistical measurements,
or display personalised content, as applicable.

For more information, please see our Cookie Policy.

15. International data transfers

If technology providers located outside the European Economic
Area are used, appropriate safeguards will be adopted in accordance with applicable data protection regulations.

This may occur, for example, with certain hosting services,
analytics, email marketing, payment tools, or technology platforms.

16. Changes to the Privacy Policy

The controller reserves the right to amend this Privacy Policy to
adapt it to legislative developments, changes to the website, or changes in
data processing activities.

The current version will be the one published at any given time on this website.

17. Last update

This Privacy Policy was last updated on
May 26, 2026.