Last updated: 4 May 2026
This privacy policy explains how personal data is collected, used and protected when you visit barbaraguidetti.art (the "site"). The site is operated by Barbara Guidetti, an independent artist based in Switzerland.
1. Data Controller
The data controller for this website is Barbara Guidetti. For any privacy-related inquiry you can contact the controller at barbaraguidetti@gmail.com.
2. Personal Data Collected
The site collects the following personal data only when you actively choose to provide it:
- Information you submit through the contact form: your name, email address, and the message content (optionally, the title of an artwork you are inquiring about).
- Technical data automatically collected by the hosting provider (Netlify) for security and abuse prevention: IP address, browser user agent, request timestamps. This data is not used for tracking or analytics.
- If you log in to the admin area (restricted to the artist), Netlify Identity processes your authentication credentials.
The site does not use third-party analytics, advertising trackers, or social-media tracking pixels. No profiling is performed.
3. Legal Basis for Processing
Personal data is processed on the following legal bases (GDPR, Article 6):
- Article 6(1)(b): performance of a request initiated by you (responding to a contact form inquiry).
- Article 6(1)(f): legitimate interest in maintaining the security and integrity of the site (technical logs).
4. Purposes of Processing
Personal data is collected solely to:
- respond to inquiries received through the contact form;
- maintain the security of the site and prevent abuse;
- where applicable, document a sale or studio visit you have requested.
Personal data is never used for marketing, profiling, or shared with third parties for commercial purposes.
5. Data Retention
Contact form messages are retained for as long as necessary to handle the inquiry, and for a reasonable period afterwards (typically up to 24 months) to allow follow-up correspondence. Beyond this period, messages are deleted. Technical security logs are retained according to the hosting provider standard retention period (currently 30 days).
6. Recipients of Data, International Transfers
Personal data may be processed by the following service providers acting as data processors:
- Netlify, Inc. (United States), which hosts the site and processes contact form submissions and authentication. Netlify provides safeguards under EU Standard Contractual Clauses for international data transfers.
No personal data is sold, rented, or otherwise transferred to third parties for marketing purposes.
7. Your Rights
Under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection, you have the right to:
- access your personal data and obtain a copy of it;
- request the rectification of inaccurate data;
- request the erasure of your data (right to be forgotten);
- request the restriction of processing;
- object to processing based on legitimate interest;
- request the portability of your data in a machine-readable format;
- lodge a complaint with the competent supervisory authority (in Switzerland, the Federal Data Protection and Information Commissioner; within the EU, your local data protection authority).
To exercise any of these rights, please contact barbaraguidetti@gmail.com. Requests are normally answered within 30 days.
8. Cookies
This site uses only essential cookies that are strictly necessary for basic functionality (such as remembering your selected language). It does not use tracking, analytics, or advertising cookies. For details, see the Cookie Policy.
9. Security
All communications between your browser and the site are encrypted via HTTPS. Access to administrative areas is protected by authentication. Personal data is processed only by authorised parties.
10. Changes to This Policy
This privacy policy may be updated to reflect changes in legal requirements or in the way the site operates. The latest version is always available on this page; the "Last updated" date at the top reflects the most recent revision.