Last updated: 4 October 2026
This notice explains how RDN Arts handles personal data through its artwork catalogue, articles, search, newsletter, contact form and customer accounts. The new website is being prepared for launch; public checkout and online payments have not yet been enabled.
Who is responsible
RDN Arts, Spanish tax ID (NIF) B87519021, Ruiz de Alarcón 27, 28014 Madrid, Spain, is the data controller. For privacy questions or requests, email dataprotection@rdnarts.com.
Data we use and why
| Activity and data | Purpose and legal basis | How long |
|---|---|---|
| Visits: IP address, browser and device details, requested pages, time and technical logs; search terms may appear in requested URLs. | Deliver, operate and secure the site, investigate faults and misuse. Legitimate interests (GDPR Art. 6(1)(f)). | Under the hosting provider’s operational and security log schedule, then deleted or anonymised unless needed for an incident or legal claim. |
| Newsletter: email address and subscription preferences when you submit the form. | Send art news and updates you requested. Consent (Art. 6(1)(a)); you can unsubscribe through any newsletter. | Until you withdraw consent or unsubscribe; a limited suppression record may remain to honour your choice. |
| Privacy choices: your cookie preferences and the technical data required to remember them. | Record and respect your choice and meet privacy obligations. Legal obligation (Art. 6(1)(c)). | Until the consent preference expires or you change it; the banner will ask again when the preference expires. |
| Inquiries through our contact form or email: your name, email address and message, including any artwork or delivery details you choose to provide. | Respond to your request. Legitimate interests (Art. 6(1)(f)), or steps before a contract if your enquiry concerns a purchase (Art. 6(1)(b)). | For the time needed to resolve the request and any applicable legal or claims period. |
| Customer accounts: email address, account identifiers, a hashed password and account details you choose to provide. | Create and manage the account you request (Art. 6(1)(b)); protect account access and investigate misuse (Art. 6(1)(f)). | While your account is maintained, then deleted on closure or a valid erasure request, except information that must remain for legal obligations or claims. |
Providing an email address for the newsletter is voluntary. If you do not provide it, we cannot send the newsletter. The site can be browsed without subscribing, creating an account or accepting optional cookies. A name, email address and message are required to submit the contact form; an email address is required to register an account. Contacting us or registering does not subscribe you to marketing emails.
Contact forms, accounts and service providers
Contact messages are routed to reach@rdnarts.com through our website and email service providers. The contact form does not save submission copies in the website database. Account information is stored in the website database; account and password-setup messages are sent by email.
The newsletter form sends your email address directly to Mailchimp (Intuit), which processes subscriptions and mailings for us. Our website hosting infrastructure receives technical requests and logs needed to operate the website. We share data only with service providers and advisers where necessary for these purposes or where law requires it. We do not sell visitor data.
Mailchimp and its subprocessors may process newsletter data outside the European Economic Area, including the United States. Its data processing addendum describes transfer safeguards, including standard contractual clauses. We will review any new provider and transfer before enabling additional services.
Data security
The website uses HTTPS for data in transit and password-protected administrative access. We limit access to the people who need it to run the site and review software and security settings as the service develops. No internet service can guarantee absolute security. If you believe your data has been exposed, contact dataprotection@rdnarts.com promptly. We assess and report personal-data incidents where the law requires it.
Saved artworks and display preferences
For guests, saved artwork identifiers and a cache of public artwork information are stored in this browser. The guest list remains on your device; your browser requests public artwork details from our server to display it. They remain until you remove the artworks, clear the saved list or clear browser storage. When you are signed in, your saved list is also held with your account until removed or the account is deleted.
“See it in your space” remembers your chosen viewer height, centimetres or feet/inches and frame selections in tab-session storage. A session cookie remembers which adult viewer image is used. This is an illustration choice, not information about your identity or appearance. Clearing the entire saved list chooses a different viewer image while preserving your height and unit.
A session cookie remembers EUR or USD when you click the currency symbol. An approximate country lookup from the request IP can select the initial display currency; you can change it. Our server obtains exchange rates from the European Central Bank without sending your browsing details to the ECB. Final payment remains in EUR.
These settings serve the functions you request. Browser session preferences normally end when the session ends; browser session restoration may retain them. See the Cookie Policy for storage names and controls.
Site usage statistics
We use WP Statistics on our own website to understand traffic and artwork interest. It records page views, approximate country, referral information and browser/device categories. IP masking and hashing are enabled; analytics records do not retain the full request IP. A daily hashed visitor key supports daily counting. We do not link these records to customer account IDs, retain full user-agent strings or use them for advertising profiles.
WP Statistics sets no analytics cookies. It respects the browser’s Do Not Track setting. Administrative staff roles, login and account pages are excluded. We use aggregate reports for traffic, countries, sources and the “Most popular” artwork selection. Statistical records stay in our website database and are not sent to the WP Statistics provider. Our legal basis is our legitimate interest in understanding and improving the gallery (GDPR Art. 6(1)(f)); you may object through the contact above.
Detailed statistics are retained for 365 days. Older visitor, country, referral and device details are removed by scheduled maintenance. Aggregate daily visitor/view totals and historical artwork view counts remain for long-term comparisons.
Cookies and your choice
Necessary cookies support the site’s basic operation, signed-in account sessions, requested basket functions and your privacy choice. Optional cookies require your prior choice. The current categories, purposes and any listed cookies are explained in our Cookie Policy. Use Cookie Settings to change or withdraw your choice at any time.
Your rights
Depending on the circumstances, you can request access to, correction or deletion of your data, restriction of processing and data portability; you may object to processing based on legitimate interests. You can withdraw consent at any time without affecting earlier lawful processing. Contact us at dataprotection@rdnarts.com. We may need to verify your identity proportionately before acting on a request.
You may also complain to the Spanish Data Protection Agency (AEPD) or the supervisory authority where you live or work.
Updates
We will update this notice when our services, providers or processing change. The date above shows the latest version.