Privacy Policy

Draft privacy notice. The identity of the data controller still needs to be confirmed.

1. Data controller

This website presents the work of Amalia Gré. The contact for enquiries and privacy requests is amalia@amaliagre.com.

2. Data we collect

The enquiry form collects your name, email address and message. The title and reference of the work are included automatically so Amalia can identify the work you are asking about. If you contact Amalia by email, your email address and the information in your message are received. Please do not include sensitive personal information. Framer may process technical information needed to operate and secure the website and protect forms against spam.

3. Why we use your data

Your information is used to reply to enquiries about works, availability, prices and commissions, and to follow up on your request. For enquiries about a possible purchase or commission, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). General correspondence and website security rely on the legitimate interest in answering requests and maintaining a secure website (Article 6(1)(f) GDPR). The form does not process payments or subscribe you to a newsletter. Name, email and message are required to send the form; without them your enquiry cannot be submitted. Enquiry data is not used for marketing profiling or decisions with legal or similarly significant effects.

4. How long we keep it

Enquiry correspondence is retained for the time needed to answer your request and manage any related follow up. Any further retention must be justified by an applicable legal obligation or the establishment, exercise or defence of legal claims. Data should be deleted when it is no longer needed for these purposes.

5. Who we share it with

Form submissions are delivered to Amalia at amalia@amaliagre.com. Framer B.V. provides website hosting and form processing. Email and other technical service providers may process data as necessary to deliver the message and operate these services. The form does not send data to a payment provider or courier. Framer and its service providers may process data outside the European Economic Area. Its Data Processing Addendum provides for adequacy decisions or appropriate safeguards, including standard contractual clauses, as applicable. Details of Framer’s safeguards are available in its Data Processing Addendum, and you may request further information using the contact above. Read Framer’s Data Processing Addendum.

6. Cookies and analytics

The site uses Framer’s built in analytics, which do not use analytics cookies and provide aggregate visit statistics. Google Analytics and advertising tracking scripts are not configured on this website. Technical processing may be needed for hosting, security and form delivery. Links to Instagram open an external service whose own privacy and cookie policies apply.

7. Your rights

Subject to the conditions in the GDPR, you can request access to your personal data, correction or deletion, restriction of processing, and portability. You may object to processing based on legitimate interests. To make a request, write to amalia@amaliagre.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).