Privacy policy
This policy explains what personal data is processed on danielsanchezdelatorre.com, why, and what rights you have. It is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Controller: Daniel Sánchez de la Torre
Tax ID (NIF): 26029502B
Address: C/ Guarnón, 26, 18008 Granada (Spain)
Email: danielsanchezdelatorre@gmail.com
2. What data is processed, why and on what basis
Artwork enquiry form. Data: name, email and message. Purpose: replying to your interest in a work (availability, price, terms). Legal basis: steps taken at your request prior to a possible contract (Art. 6(1)(b) GDPR).
Contact form. Data: name, email and message. Purpose: replying to your message (press, exhibitions, collaborations, other matters). Legal basis: legitimate interest in answering messages received (Art. 6(1)(f) GDPR).
Browsing the website. Data: technical connection data, such as IP address and browser. Purpose: serving the website and producing aggregated, anonymous visit statistics. Legal basis: legitimate interest in a working, secure website (Art. 6(1)(f) GDPR).
No automated decisions or profiling take place. You do not need to provide any data to browse the website; without a name and email it is not possible to reply to a form.
3. Retention
Messages are kept for as long as the conversation lasts and for no more than two years after the last contact. If an enquiry leads to the purchase of a work, the necessary data will be kept for the periods required by tax and commercial law.
4. Recipients and processors
No data is disclosed to third parties unless required by law. Two providers are involved in running the website:
Framer B.V. (Netherlands): website hosting and handling of form submissions, which it forwards by email to the controller.
Google (Gmail, Google Fonts and YouTube): the email account where messages are received and answered, delivery of the website’s typefaces, and playback of the video in the news section.
5. International transfers
Framer is based in the European Union, but some of its providers may process data outside it. Google may process data from Gmail, Google Fonts and YouTube in the United States. In both cases transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
6. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability. Write to danielsanchezdelatorre@gmail.com stating which right you wish to exercise. If there is reasonable doubt about your identity, you may be asked to confirm it. You will receive a reply within one month.
If you believe your rights have not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.
7. Source of the data
All data is provided by you when you submit a form or write by email. No data is obtained from other sources. If you send data about another person, you must have their permission. Children under 14 should not submit personal data.
8. Cookies
This website does not use its own analytics, advertising or tracking cookies. It may only use technical cookies or local storage needed for the page to work and to remember that you have already seen the cookie notice. These cookies are exempt from consent under Article 22.2 of the LSSI-CE.
Visit statistics are provided by Framer without cookies and without identifying visitors.
Links to Instagram take you to its website, which has its own cookie policy. You can delete or block cookies in your browser settings.
The video in the news section is embedded from YouTube in enhanced privacy mode (youtube-nocookie.com). It is not loaded when you open the page, only when you press play. From that moment YouTube (Google) may store cookies or similar identifiers in your browser and receive your IP address, under its own privacy policy.
9. Security
The website is served over an encrypted connection (HTTPS). The controller applies reasonable measures to protect data against loss, unauthorised access or misuse, in proportion to the limited data processed.
10. Changes
This policy may change, for example if a newsletter is introduced. The version in force is the one published on this page.
Last updated: 10 November 2026. In case of discrepancy, the Spanish version prevails.