Privacy Policy

This website is operated by Hanna Popova Sztefanova, an independent artist. This policy explains what personal data is collected, why, and what your rights are.

What data is collected

Email address — only if you voluntarily sign up to the artwork notification list.
Contact form messages — your name, email, and message if you write through the contact form.
No advertising or behavioural-analytics scripts are used. The public site stores only your language preference in your browser. Hosting and security providers may process technical request data such as IP address, browser information and timestamps.

Why it is collected

Email addresses on the notification list are used solely to inform you when new artwork is added. You will receive an email only when new work is published — never for marketing, promotions, or third-party purposes.

Contact form messages are used to reply to your inquiry. The legal basis is taking steps at your request before a possible purchase (GDPR Article 6(1)(b)) or legitimate interests in responding to correspondence (Article 6(1)(f)).

Newsletter addresses are processed only with your freely given consent (Article 6(1)(a)). You can withdraw that consent at any time through the unsubscribe link.

How it is stored

Newsletter addresses are stored by Brevo. Contact messages are delivered through Brevo transactional email and then kept in Hanna's email account. Netlify hosts the website and serverless forms; Cloudflare Turnstile processes browser and device signals to prevent automated abuse. These providers may process technical logs under their own retention and international-transfer safeguards.

Contact messages are normally deleted within 12 months after the inquiry is resolved, unless longer retention is needed for a purchase, accounting, or legal claim. Newsletter data is retained until you unsubscribe or withdraw consent.

Your rights

Under GDPR you have the right to:
— Access the data held about you
— Request correction of inaccurate data
— Request deletion of your data (right to be forgotten)
— Withdraw consent at any time
— Object to processing based on legitimate interests
— Lodge a complaint with your local data-protection supervisory authority

Every email includes an unsubscribe link. You can also write directly to popova.sz.hanna@gmail.com to be removed or to exercise any of the above rights.

Data controller and recipients

The data controller is Hanna Popova Sztefanova, reachable at popova.sz.hanna@gmail.com. Data is shared only as needed with Netlify (hosting and functions), Cloudflare (bot protection), Brevo (email delivery and newsletter), and Hanna's email provider. It is not sold.

Copyright

All artwork images on this website are the exclusive property of Hanna Popova Sztefanova. Reproduction, download, or use of any image without written permission is prohibited. Images are protected by copyright law.

Contact

For any privacy-related questions or requests:
popova.sz.hanna@gmail.com