1. Identity and contact details of the Controller

The Controller of your personal data is:

[Full legal name]
Address: [Address]
General contact email: [General email]
Privacy email: [Privacy email]

2. Personal data we may collect

Depending on the nature of your interaction with the Website, the Controller may collect the following categories of personal data:

2.1 Identification and contact data

• • • Full name

    • Email address

    • Telephone number

    • Company, institution, gallery, media outlet or business name

    • Job title or position

    • City and country

2.2 Data related to communications or requests

• • • Information submitted through contact forms

    • Contents of emails or messages sent to the Controller

    • Reason for contact

    • Interest in artworks, exhibitions, collaborations, interviews, licensing, publications or representation

2.3 Browsing and Website usage data

• • • IP address

    • Browser type

    • Operating system

    • Browser language

    • Date and time of access

    • Pages visited

    • Time spent browsing

    • Referring website

    • Cookies, online identifiers and similar technologies

2.4 Subscription data

• • • Name

    • Email address

    • Subscription preferences, where applicable

2.5 Professional or corporate data

If contact is made by gallerists, curators, journalists, licensees, agents, sponsors, cultural institutions or potential partners, professional, corporate or commercial data related to the request may also be processed.

3. Sensitive personal data

The Controller does not request or seek to collect sensitive personal data through the Website.

Users are asked not to submit sensitive information through open forms, general contact emails, or any other channel available on the Website. If a user voluntarily provides sensitive data without having been asked to do so, such data will only be processed to the extent strictly necessary to address the relevant communication and may later be deleted.

4. Purposes of processing

Personal data may be processed for the following purposes:

4.1 Primary purposes

• • • To address contact, information or follow-up requests

    • To respond to inquiries from collectors, galleries, curators, media, institutions, licensees or interested audiences

    • To manage requests related to exhibitions, collaborations, publications, interviews, licensing or special projects

    • To send requested information regarding artworks, career milestones, exhibitions, publications or professional activities

    • To manage newsletter subscriptions or editorial communications

    • To maintain the security, integrity and proper operation of the Website

    • To comply with legal, regulatory, contractual or rights-protection obligations

4.2 Secondary purposes

• • • To send informational, editorial, institutional or promotional communications

    • To prepare browsing metrics and statistical analysis

    • To improve user experience and optimize content

    • To develop communication strategies, audience insights and content planning

    • To document the professional, editorial, cultural or commercial interest generated by the Website

Where required by applicable law, secondary purposes shall be subject to the data subject’s consent.

5. Legal basis for processing

The processing of personal data may be based, as applicable, on one or more of the following legal grounds:

• • • The data subject’s consent

    • Pre-contractual measures requested by the data subject

    • Compliance with legal obligations

    • The legitimate interests of the Controller, provided such interests do not override the rights and freedoms of the data subject

    • The management of professional, artistic, editorial, institutional or commercial relationships lawfully initiated

6. Cookies and similar technologies

The Website may use cookies, pixel tags, scripts, server logs and similar technologies to:

• • • Remember user preferences

    • Analyze traffic and browsing behavior

    • Improve functionality, performance and security

    • Measure audiences and content performance

    • Enable contact, subscription or interaction tools

Users may change their browser settings to reject or limit the use of cookies. However, doing so may affect certain Website functionalities.

Where required by applicable law, consent will be obtained for the use of non-essential cookies.

7. Transfers and disclosures of personal data

Your personal data may be shared, disclosed or transferred, within or outside your country of residence, only where necessary to fulfill the purposes described in this Privacy Notice, including with:

• • • Web hosting, maintenance, analytics, cloud storage, CRM or email marketing providers

    • Legal, technological, administrative or compliance advisors

    • Representatives, agencies, galleries, cultural institutions, strategic partners or licensees, where justified by the nature of the request

    • Competent authorities, where there is a legal obligation or duly grounded request

The Controller will seek to ensure that such third parties maintain confidentiality, security and processing standards consistent with this Privacy Notice and applicable law.

8. Data retention

Personal data will be retained only for as long as necessary to:

• • • Fulfill the purposes described in this Privacy Notice

    • Address pending requests

    • Maintain administrative, contractual, editorial or legal records

    • Resolve disputes

    • Exercise or defend rights

Once the applicable retention period has ended, the data may be deleted, blocked or anonymized, as appropriate.

9. Information security

The Controller adopts reasonable administrative, technical, physical and organizational safeguards to protect personal data against damage, loss, alteration, destruction, unauthorized access or improper processing.

However, no technological system or Internet transmission can guarantee absolute security, and therefore the Controller cannot warrant the total invulnerability of its systems.

10. Data subject rights

Subject to applicable law, data subjects may exercise the following rights:

• • • Access

    • Rectification

    • Erasure or deletion

    • Objection

    • Restriction of processing

    • Portability, where applicable

    • Withdrawal of consent

They may also request to stop receiving informational or promotional communications.

To exercise any of these rights, a request must be sent to info@karladelara.com including the following information:

• • • Full name

    • Contact method for receiving a response

    • Relationship with the Controller

    • Clear description of the right to be exercised

    • Information or documents reasonably necessary to verify identity or legal representation, where applicable

The Controller will respond within a reasonable timeframe and in accordance with applicable law.

11. Minors

The Website is not primarily directed to minors and does not knowingly seek to collect personal data from children or adolescents without the appropriate authorization of their parents or legal guardians, where required by applicable law.

If you believe that a minor has provided personal data without proper authorization, you may request review or deletion by contacting [Privacy email].

12. Third-party links

The Website may contain links to third-party websites, platforms or services. This Privacy Notice does not apply to such third parties, and users should review their respective notices, terms and policies before providing any information.

The Controller assumes no responsibility for the practices, policies, contents or security measures of third parties.

13. Professional contacts: press, galleries, licensees and institutions

If you contact the Controller as a gallerist, curator, journalist, editor, media outlet, licensee, agent, sponsor, cultural institution or potential partner, the information provided may be processed in order to:

• • • Verify professional or corporate identity

    • Assess the viability of the request or relationship

    • Follow up on proposals, requests, press materials, licenses, authorizations or collaborations

    • Maintain documentary, legal and commercial traceability of the interaction

The submission of proposals, materials, portfolios, licensing requests or collaboration requests does not imply any obligation to respond, contract, authorize, represent or assign rights on the part of the Controller.

14. Protection of artistic work, original content and artificial intelligence

For the purpose of protecting the artistic work, images, texts, trademarks, distinctive signs and other original content available on the Website, the Controller may retain technical and documentary evidence related to access, inquiries, requests and uses of content where reasonably necessary to:

• • • Protect copyright, intellectual property, image rights and contractual rights

    • Investigate unauthorized uses, scraping, automated extraction or misappropriation of content

    • Prevent unauthorized reproduction, downloading, exploitation, indexing or reuse of Website materials

    • Prevent the use of Website content for the training, fine-tuning, development, testing or exploitation of artificial intelligence systems, generative models, machine learning tools or datasets, without prior express written authorization

This is without prejudice to the provisions set forth in the Website Terms and Conditions and applicable law.

15. Changes to this Privacy Notice

The Controller reserves the right to modify, update or adjust this Privacy Notice at any time in order to reflect legal, regulatory, operational, technological or structural changes relating to the Website.

Any changes will be published in this same section together with the corresponding updated date. Users are encouraged to review this document periodically.

16. Contact

For any questions, comments or requests related to this Privacy Notice or the processing of personal data, you may contact us at:

Juan Carlos Fernández de Lara Gastelum
Email: info@karladelara.com
Address: [Address]