PRIVACY POLICY

Effective Date: June 2026

1. INTRODUCTION AND DATA CONTROLLER IDENTITY 

This Privacy and Data Protection Policy governs the processing of any personal data collected or generated through the access and use of https://sites.google.com/view/diegocasasart (the "Site"). For the purposes of the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and the Spanish Organic Law on Data Protection (LOPDGDD 3/2018), the Data Controller is the contemporary visual artist Diego Casas (hereinafter, "the Artist" or "the Controller").

The Artist is committed to the highest standards of data privacy. This Site operates fundamentally as a digital exhibition portfolio and purposefully omits the use of automated data collection forms, marketing databases, or invasive third-party tracking scripts.

2. MECHANISMS OF DATA COLLECTION AND SCOPE 

Because this Site does not feature native contact forms, comment sections, or user account registrations, the Artist does not systematically harvest personal data from visitors. Personal data is only processed under the following strict circumstances:

• Direct Email Communications: If you voluntarily initiate contact via the official email address (diegocasasvega@gmail.com) to inquire about private acquisitions, commissions, or institutional collaborations, the Artist will process your email address, name, and any other information you explicitly choose to include in your correspondence.

• Passive Technical Data: As the Site is hosted on Google Sites infrastructure, the hosting servers may automatically register standard, non-identifying technical parameters strictly necessary for the secure transmission of the Site. This includes anonymized IP addresses, browser types, and timestamp access logs, which are processed exclusively for security and network integrity, not for profiling.

3. LEGAL BASIS AND PURPOSE OF PROCESSING 

Any personal data voluntarily submitted via direct email will be processed exclusively for the following authorized purposes:

• To address, manage, and respond to your professional inquiries, commission requests, or acquisition negotiations.

• To establish and execute a private contract of sale or commission, should the correspondence advance to that stage.

The legal basis for this processing is your unequivocal consent implicitly granted by initiating the communication, and the legitimate interest of the Artist in responding to professional correspondence (Article 6.1(a) and 6.1(f) of the GDPR).

4. THIRD-PARTY PLATFORMS AND EXTERNAL REDIRECTION 

This Site contains direct hyperlinks to the Artist's official profiles on third-party platforms, specifically Instagram (Meta Platforms, Inc.) and LinkedIn (Microsoft Corporation). The User explicitly acknowledges that clicking on these links constitutes an exit from the Site's jurisdictional environment. The Artist has zero operational control over, and strictly disclaims any liability for, the privacy frameworks, data harvesting practices, algorithmic tracking, or cookie deployments executed by Meta Platforms, Inc. or Microsoft Corporation. Any interactions on those platforms are governed entirely by their respective corporate privacy policies.

5. DATA RETENTION AND CONFIDENTIALITY 

The Artist adheres to a strict policy of data minimization. Correspondence and personal data obtained via email will be retained in absolute confidentiality solely for the duration necessary to fulfill the purpose of the inquiry or to comply with statutory taxation and commercial accounting laws in Spain. Under no circumstances will your personal data be sold, leased, or transferred to third-party marketing agencies or external data brokers.

6. EXERCISE OF STATUTORY USER RIGHTS 

Under the absolute provisions of the GDPR, you retain comprehensive control over your personal data. You have the inalienable right to:

• Access: Request confirmation as to whether your data is being processed and obtain a copy.

• Rectification: Demand the correction of inaccurate or incomplete data.

• Erasure (Right to be Forgotten): Request the immediate deletion of your data when it is no longer necessary for the purposes collected.

• Restriction & Objection: Restrict the processing of your data or object to it entirely based on personal circumstances.

7. CONTACT FOR PRIVACY INQUIRIES 

To exercise any of the aforementioned statutory rights, or if you require further clarification regarding this Privacy and Data Protection Policy, you must direct your formal request to the Data Controller at: Email: diegocasasvega@gmail.com

The Artist ensures a compliant and formal response within the legal timeframes established by European Law.