This policy explains what personal data Artastik (www.artastik.com) collects, why, for how long, and what your rights are, under EU Regulation 2016/679 (GDPR).
Data controller
Giacomo Fioretti, Via Ciro Menotti 2, 62012 Civitanova Marche (MC), Italy.
Email: info@artastik.com
What data we collect
If you apply as a painter
- contact details: first name, last name, email, city and, if you provide it, your artist name;
- bio, techniques, profile photo (optional);
- photos of your works, with title, technique, support and size;
- how you heard about Artastik and, if you arrived through one of our links, the source of the link (for example “instagram”);
- the language of the site you applied in, the consents given and the date of your application.
Before saving your photos we remove hidden data (EXIF), such as GPS location and phone model.
If you sign up to the newsletter
- email, language and where you signed up (site footer or application form).
If you write to us
- your email address and the content of your message.
When you browse the site
- technical browsing data recorded by the server (IP address, browser, pages visited, date and time), needed for the site to work and stay secure;
- only if you accept it in the banner, visit statistics with Google Analytics (see the cookie policy).
To limit spam, when you submit an application or sign up to the newsletter we use, for one hour, an encrypted fingerprint of your connection, which cannot be traced back to your IP address and is then deleted.
What is published
If your application is approved, your public profile shows: first and last name (or artist name), city, bio, techniques, profile photo and your works with their details. Your email is never published.
Why we process data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Reviewing your application, publishing and managing your profile, communicating with you | Performance of the service you request (Art. 6(1)(b) GDPR) |
| Publishing your works on your profile and in Artastik’s communication (for example on our social media) | Performance of the service and the permission you give us when applying |
| Sending you the newsletter | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Visit statistics (Google Analytics) | Your consent through the cookie banner (Art. 6(1)(a)) |
| Site security, spam prevention, backups | Legitimate interest in protecting the site and its data (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
Providing your application data is necessary to apply: without it we cannot review your application. The newsletter is always optional.
How long we keep data
- Application not approved: moved to the trash and permanently deleted within 30 days, together with the photos.
- Published profile: for as long as you stay on Artastik. If you ask us to delete it, we delete your profile, works, photos and personal data.
- Newsletter: until you unsubscribe (link at the bottom of every email).
- Emails you send us: for as long as needed to reply and handle your request.
- Statistics (Google Analytics): 14 months.
- Site backups: backups (database and files) are kept for 30 days, then replaced. Data deleted from the site also disappears from backups within 30 days.
- Server technical data: for the period set by the hosting provider for the security and operation of the service.
Who processes data on our behalf
We use these providers, appointed as data processors:
- Aruba S.p.A. (Italy): site hosting and the info@artastik.com mailbox, which also sends the site’s emails;
- Brevo (Sendinblue SAS, France): newsletter delivery, with double confirmation of sign-up;
- Google Ireland Limited (Ireland): Google Analytics, only with your consent, and Google Drive, where we store the site backups.
Google may transfer data to the United States: the transfer is covered by the EU-U.S. Data Privacy Framework, which Google has joined, and by the European Commission’s standard contractual clauses.
Data is never sold or passed on to third parties for advertising purposes.
The site contains links to our Instagram and Facebook profiles: they are plain links and load nothing from Meta until you open them. When you do, Meta’s privacy policies apply.
Minimum age
Artastik is reserved for people aged 18 or over. We do not knowingly collect data from minors: if we discover an application from a minor, we delete it.
Your rights
At any time you can ask to:
- access your data and receive a copy;
- correct or update it;
- delete it (including your public profile);
- restrict or object to its processing;
- receive it in a readable format (portability);
- withdraw a consent (newsletter, statistics), without affecting processing carried out before.
Write to info@artastik.com, if possible from the address you used to apply. We reply within 30 days.
If you believe your data is not being handled correctly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country.
Changes
If we change this policy, we update the date at the top. For significant changes we notify everyone with a profile on Artastik by email.