Privacy Policy
Last updated:
Who we are (Controller)
This website, kartini-veselina.com, presents the original artwork of Veselina Ivanova ("we", "us", "the artist"). We decide how and why your personal data is handled, which makes us the data controller. Contact for any privacy question or request: [email protected] (postal: ul. Kaimakchalan 25, Sofia, Bulgaria).
What we collect, why, and our legal basis
We only collect what you send us through the contact form.
| Data | Why | Legal basis (GDPR Art.6) |
|---|---|---|
| Name | To address you and reply personally | Art.6(1)(b)+(f) |
| To reply to your inquiry | As above | |
| Subject + message | To understand and answer | As above |
| Your IP address (seen by our provider Cloudflare) | Security, spam prevention, delivering the site | Art.6(1)(f) |
We do not ask for payment details on this site - sales are arranged personally afterwards (see our Terms).
Who processes your data
We use a few trusted providers under contract: Resend (email delivery) - sends your inquiry to our inbox; Resend is based in the United States, so your message is transferred internationally. Cloudflare (network, security, TLS) - routes and protects the site; it sees the contact-form submission and your IP; US-headquartered, so this also involves an international transfer. Hetzner (hosting) - stores the site and your submitted inquiry on servers in Germany (EU). International transfers to the US are covered by appropriate safeguards - Standard Contractual Clauses and/or the provider's EU-US Data Privacy Framework certification, per each provider's data processing terms; ask us for detail.
Cookies and tracking
This site currently sets no cookies and uses no third-party advertising or tracking. We do not profile you or sell your data. (We are considering adding privacy-friendly, cookieless visitor analytics in future; if we do, we will update this policy first. It is not running today.)
How long we keep your data
We keep inquiry messages for as long as we hold them - we do not currently delete them automatically. This lets us remember past conversations about a painting or a commission. You can ask us to delete your data at any time, and we will.
Your rights (GDPR)
If you are in the EU/EEA you have the right to: access your data; correct it; have it deleted; restrict or object to its processing; receive a copy in a portable format; and withdraw any consent. To exercise any of these, email [email protected] and we will respond within one month. You may also complain to a supervisory authority - in Bulgaria, the Commission for Personal Data Protection (CPDP / КЗЛД).
Children
This site is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has contacted us, email us and we will delete the message.
Changes to this policy
If we change how we handle data, we will update this page and its "last updated" date. Material changes will be made clear.