Privacy policy

This policy explains how the personal data you provide on davidcata.com is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

• Controller: David Rodríguez Casas («David Catá»)
• Tax ID (NIF): 34882527Z
• Registered address: C/ Lodeiro n.º 4, 2.º C, 27850 Viveiro (Lugo), España
• Email: contacto@davidcata.com

2. What data we process and how we obtain it

We only process the data you provide voluntarily through the contact form or when you write to us by email: your name, your email address, your telephone number, the reason for your enquiry and the message you write. We do not collect sensitive data or build profiles.

3. Purpose

We use your data solely to handle and respond to your enquiry (a commission, the purchase of artwork, a workshop, an exhibition or a press enquiry) and to maintain the resulting contact. We do not use it to send you unsolicited commercial communications.

4. Legal basis

The legal basis is your consent, which you give by submitting the form or writing to us. You may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

5. Retention

We keep your data for as long as necessary to handle your enquiry and any relationship arising from it, and thereafter for the periods required by law. When it is no longer necessary, it is deleted. If you ask us to erase it, we do so immediately unless we are under a legal obligation to retain it.

6. Recipients

We do not transfer or sell your data to third parties. Your messages are handled through the owner’s email provider and web hosting service, which act as data processors and solely for the purpose of providing that service. No international transfers of data outside the European Economic Area are carried out for any other purpose.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to contacto@davidcata.com, stating the right you wish to exercise. If you believe your request has not been dealt with properly, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Security

We apply reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access.

9. Cookieless analytics

To understand, in aggregate form, how the site is used, we employ privacy-friendly, cookieless analytics that neither identify visitors nor carry out cross-site tracking. Further details are provided in the Cookie Policy.