Privacy Policy

Last modified on: December 24, 2025

Introduction

Welcome to Tavira D’Artes (“we”, “our”, or “us”). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website https://taviradartes.com and interact with us.

This policy has been drafted in compliance with the General Data Protection Regulation (GDPR) and the Portuguese execution law (Law 58/2019).

Data Controller

The entity responsible for the processing of your personal data (the Data Controller) is:

Name: Tavira d’Artes
Tax ID (NIF): 202599973
Registered Address: Jacques Pessoa 8, 8800-374 Tavira, Portugal
Email: taviradartes@gmail.com

What Personal Data We Collect

Depending on how you use our website, we may collect the following types of information:

Identity & Contact Data: Name and email address when you fill out a contact form or subscribe to our newsletter.
Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform. This data is collected automatically via Google Analytics to help us understand website performance.
Usage Data: Information about how you use our website (e.g. which pages you visit and how long you stay).
Map Data: If you interact with the embedded Google Maps on our site, Google may collect your IP address and location data depending on your browser settings.

How We Collect Your Data

We use different methods to collect data from and about you:

Direct Interactions: You may give us your data by filling in forms (using the Elementor page builder) or by corresponding with us by email. This includes subscribing to our newsletter.
Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and browsing actions. We collect this personal data by using cookies and similar technologies (managed by CookieYes).
Security Tools: We use Google reCAPTCHA on our forms to prevent spam. This service analyzes traffic to verify that the action is being performed by a human and not a bot.

How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

To communicate with you: To respond to inquiries sent via our contact forms.
To send newsletters: If you have explicitly opted-in, we use your email to send updates about our gallery and art. We use EmailOctopus (and historically Mailchimp) to manage these lists.
To improve our website: We use analytics to see how visitors interact with the site to improve the user experience.
To protect our site: To detect and prevent fraud or spam (via Google reCAPTCHA).

Data Sharing and Third Parties

We do not sell your data to anyone. However, we share data with specific third-party service providers who help us operate our website (“Data Processors”). These include:

Hosting: Our website is hosted by Hostinger on secure servers located within the European Union.
Analytics & Maps: Google Ireland Limited.
Email Marketing: EmailOctopus and Mailchimp.
Cookie Management: CookieYes.

International Transfers

Some of our external third parties (specifically Google, Mailchimp, and EmailOctopus) are based outside the European Economic Area (EEA), primarily in the United States.

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Where we use certain service providers, we rely on the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission which give personal data the same protection it has in Europe.

Data Security

We have put in place appropriate security measures (including SSL encryption) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Newsletter Data: Retained until you click “Unsubscribe” at the bottom of an email.
Contact Form Data: Retained for a period necessary to resolve your query and for administrative record-keeping (typically 2 years).

Your Legal Rights

Under the GDPR, you have rights regarding your personal data, including the right to:

Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data (“Right to be forgotten”).
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your personal data (Portability).
Withdraw consent at any time.

To exercise any of these rights, please contact us at taviradartes@gmail.com.

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

We use CookieYes to manage your cookie preferences. When you first visit our site, you are presented with a banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time by clicking the cookie icon on our website.

Complaints Authority

We hope that we can resolve any query or concern you raise about our use of your information. However, you also have the right to lodge a complaint with the supervisory authority in Portugal:

Comissão Nacional de Proteção de Dados (CNPD)

Website: www.cnpd.pt
Address: Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa