Privacy Policy

In compliance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Law 34/2002, on Services of the Information Society and Electronic Commerce (LSSI-CE), users of this website are informed about how their personal data is collected, processed, and protected.

1. Data Controller

Full name: Joan Josep Escandell Riera Website: https://joan.art

Contact email: [hello@joan.com]

Purpose of the website: To showcase photographic works and facilitate contact with people interested in the artistic work.

2. Purpose of Data Processing

Personal data is collected for the following purposes:

Contact form: To manage and respond to received inquiries.

Web analytics (Umami, self-hosted): To collect aggregated, anonymous statistical information about site usage. Umami uses no cookies, stores no persistent identifiers, and does not track users across sessions or sites.

Newsletter (via Brevo): To send communications related to news or publications from the author, only with prior consent.

3. Legal Basis for Processing

Express consent of the data subject when filling out forms or voluntarily subscribing to the newsletter.

Legitimate interest of the controller in improving browsing experience and site security.

4. Data Recipients

Personal data will not be transferred to third parties, except when required by law or necessary for service provision. Specifically:

Brevo (Sendinblue SAS): platform used to manage newsletter and forms. Brevo is located in the European Union and complies with the GDPR.

Umami: self-hosted instance running on our own infrastructure. Web analytics data is not transferred to any third party.

Hosting and technology service providers, subject to data processing agreements.

5. User Rights

You have the right to:

• Access your personal data.
• Rectify it if it is inaccurate.
• Request its deletion when no longer necessary.
• Object to or restrict its processing.
• Withdraw your consent at any time.

You can exercise these rights by writing to [hello@joan.art] with the subject “Data Protection”, attaching a copy of your identification document.

6. Data Retention

Contact form data will be retained for as long as necessary to manage your request.

Web analytics data is processed in an anonymized manner.

Newsletter subscription data will be retained until the user requests cancellation.

7. Cookies and Browser Storage

This website does not use analytics or marketing cookies. Analytics is handled by Umami without cookies. Google reCAPTCHA may be loaded when the newsletter subscription form is used, which involves Google’s own cookies for anti-fraud protection. The browser may also store a local identifier (localStorage) for the holder of an authenticity certificate, in order to display exclusive content tied to the artwork.

8. Data Security

The necessary technical and organizational measures have been adopted to guarantee the security of personal data and prevent its loss, alteration, or unauthorized access.