PRIVACY POLICY
PRIVACY POLICY
(last updated 16/05/2025)
This Privacy Policy describes how your personal data is collected, used, and protected when you visit or interact with the website www.kseniayaroshart.com ("the Website"), operated by Ksenia Yarosh, an independent artist based in Italy (partita IVA 03821041203)
This policy complies with the European Union General Data Protection Regulation (GDPR – Regulation EU 2016/679).
1. Data Controller
Name: Ksenia Yarosh
Email: kseniayaroshart@gmail.com
Business Address: Via Gino Cervi 31, Bologna, Italy
I am the Data Controller of the personal data collected via this Website and any related services (e.g., newsletter, online store, contact form).
2. What Data I Collect
When you use this Website, I may collect the following personal data:
-
Contact Information (e.g., name, email address, phone number)
-
Order Details (e.g., billing and shipping address, items purchased)
-
Payment Information (processed securely via third-party providers)
-
Technical Data (e.g., IP address, browser type, device, visit duration)
-
Messages or inquiries sent through contact forms or email
-
Newsletter subscriptions, only with your explicit consent
3. How Data Is Collected
Data is collected through:
-
Contact forms on the Website
-
Newsletter sign-up forms
-
E-commerce transactions
-
Cookies and analytics tools (see Section 9)
-
Social media integrations or embedded content
This Website is built using Wix Studio, which may collect certain technical data automatically. Wix is fully GDPR-compliant and stores data on secure servers.
4. Legal Basis for Processing
Your data is processed only where one or more of the following apply:
-
Your consent (e.g., subscribing to a newsletter)
-
Performance of a contract (e.g., completing a purchase)
-
Legal obligation (e.g., tax compliance)
-
Legitimate interests (e.g., website security, communication with customers)
5. How Your Data Is Used
I may use your data to:
-
Process and fulfill your orders
-
Respond to your inquiries or messages
-
Send you updates (only with consent)
-
Improve website functionality and user experience
-
Comply with legal and tax obligations
6. Data Sharing and Third Parties
Your data may be shared only with trusted service providers, such as:
-
Wix.com Ltd. (website platform and hosting)
-
Payment processors (e.g., PayPal, Stripe – I never store card details)
-
Email marketing services (e.g., Wix Email Marketing, Mailchimp)
-
Shipping carriers (for delivering artwork)
-
Analytics providers (e.g., Google Analytics via Wix)
All providers used are GDPR-compliant and act as Data Processors on my behalf.
7. Data Storage and Security
Your personal data is stored securely on Wix servers, which may be located in the EU, Israel, or the USA, under strict data protection standards.
I implement appropriate technical and organizational measures to prevent unauthorized access, disclosure, or loss of your data.
8. Your Rights Under GDPR
You have the right to:
-
Access your personal data
-
Correct or update your data
-
Request deletion of your data
-
Withdraw consent at any time
-
Object to or restrict certain processing
-
Request data portability
-
Lodge a complaint with a data protection authority
To exercise these rights, email me at: [Your Contact Email]
9. Cookies and Tracking Technologies
This Website uses cookies and similar technologies to enhance your browsing experience. These include:
-
Essential cookies (for site operation)
-
Analytics cookies (to understand traffic and usage patterns)
-
Marketing cookies (if applicable, e.g., social media ads)
When you first visit, a cookie banner will appear allowing you to accept or manage cookie settings.
You can modify your cookie preferences at any time using your browser settings.
10. Data Retention
Your personal data is retained:
-
For the duration necessary to fulfill the purposes described
-
For the period required by applicable tax and accounting laws
-
Until you withdraw consent (for marketing communications)
11. External Links
This Website may include links to third-party sites (e.g., social media, exhibitions). I am not responsible for the content or privacy practices of those sites.
12. Changes to This Policy
I may update this Privacy Policy periodically. The updated version will be posted on this page with a revised "Last Updated" date.
13. Contact
If you have questions about this Privacy Policy or how your data is used, please contact me:
Email: [Your Contact Email]
Address: [Your Address, Italy]
Supervisory Authority:
Garante per la protezione dei dati personali – www.garanteprivacy.it