Privacy policy

Last updated: September 16, 2026

Who is responsible for your data

Data controller: Alex Eduardo Visbal, NIF Y7927297Q, Plaza Salesas 7, 2ºD, 28004 Madrid, Spain. Contact: info@alexvisbal.com.

What data we collect and why

When you place an order: name, shipping and billing address, email, phone number, and payment details (processed by the payment provider; we never see your full card number). Purpose: to produce and deliver your print, issue invoices, provide customer service and meet tax and accounting obligations. Legal basis: performance of a contract and compliance with legal obligations.

When you send an inquiry by email or through the contact page: name, email and the content of your message. Purpose: to answer you. Legal basis: our legitimate interest in responding to your request, or the steps needed to enter into a contract.

When you join the collectors list: email address and, if you provide it, your name. Purpose: to send you news about new works, editions and exhibitions. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.

When you browse the Site: technical data such as IP address, device and browser type, pages visited and referral source, collected through cookies and similar technologies. Purpose: to make the Site work, to measure its use and, only with your consent, for marketing. Legal basis: legitimate interest for essential operation; consent for analytics and marketing cookies. See the Cookie Policy.

Who we share your data with

We share data only with the service providers needed to run the Site and fulfil your order, each acting under a data processing agreement:

  • Shopify International Ltd (Ireland), the platform hosting the Site and processing orders.
  • Payment providers (Shopify Payments, PayPal or others), which process your payment under their own privacy policies.
  • Fine art printing labs, which receive only the information needed to produce and, where applicable, dispatch your print.
  • Shipping carriers, which receive your name, address and phone number to deliver your order.
  • Our email service provider, used to manage the collectors list.
  • Accounting and tax advisors, where required by law.

We do not sell your data.

International transfers

Some providers (for example Shopify) may process data outside the European Economic Area. Where this happens, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep your data

Order and invoice data: for the period required by Spanish tax and commercial law (generally six years). Inquiries: while the conversation is active and for up to two years afterwards. Collectors list: until you unsubscribe. Technical and cookie data: as set out in the Cookie Policy.

Your rights

You may request access to your data, its rectification or erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Write to info@alexvisbal.com with proof of identity. You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Security

Data is transmitted over encrypted connections and stored on platforms with appropriate technical and organisational security measures.

COOKIES

What cookies are

Cookies are small files placed on your device when you visit a website. They allow the Site to work, remember your preferences and understand how it is used.

Cookies used on this Site

Essential cookies. Required for the Site to function: shopping cart, checkout, session security and fraud prevention. Set by Shopify. They do not require consent.

Analytics cookies. Help us understand which pages are visited and how the Site performs, so we can improve it. Set by Shopify analytics and Google Analytics. Used only with your consent.

Marketing cookies. Used to measure and personalise marketing, for example remembering that you visited the Site. Meta Pixel, Google Ads. Used only with your consent.

Managing your preferences

When you first visit, a banner lets you accept or reject non essential cookies. You can change your choice at any time through the "Cookie preferences" link in the footer or by deleting cookies in your browser settings. Rejecting non essential cookies does not affect your ability to browse or purchase.

Retention

Essential cookies expire at the end of the session or within a few days. Analytics and marketing cookies expire within the periods set by each provider, typically between one and 24 months.

More information

For details on how your data is processed, see the Privacy Policy.

Changes

We may update this policy. The date at the top shows the latest version.