Privacy Policy

Last updated: 14 June 2026

This Privacy Policy explains how MAJORART di Major Keili (sole proprietorship / ditta individuale, proprietor Keili Major) collects and processes personal data through the website keilimajorartist.com and in the course of its activities (sale of artworks and prints, commissions, art lessons, exhibitions and related communications). It is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (the “Italian Privacy Code”).

1. Data Controller

MAJORART di Major Keili · VAT/Tax No. (P.IVA) IT12742420016
Regione Sparvaira 14, 12075 Garessio (CN), Italy
Email: info@keilimajorartist.com · Press/curatorial: press@keilimajorartist.com
Telephone: +39 350 107 4184

We have not appointed a Data Protection Officer (DPO), as we are not required to do so under Article 37 GDPR.

2. What Data We Collect, and How

Data you provide directly:

• Contact form: name, email address, and the content of your message.
• Newsletter (“Lettere dall’atelier”): your email address.
• Orders, prints and commissions: name, billing/shipping address, email, telephone, order details and, for invoicing, tax data. Payment-card data is entered directly with the payment provider and is not stored by us.
• Art lessons and bookings: name and contact details and, for children’s classes, the data of the minor (name, age) provided by the parent or guardian.
• Direct messages sent via email, WhatsApp or social media.

Data collected automatically when you browse: technical/navigation data such as IP address, browser and device type, pages viewed, referring page and date/time. Analytics and marketing data is collected only with your consent (see Section 4).

3. Purposes and Legal Bases

• Responding to enquiries and managing the contact form — pre-contractual measures (Art. 6(1)(b)) and our legitimate interest in answering correspondence (Art. 6(1)(f)).
• Sending the newsletter — consent (Art. 6(1)(a)), withdrawable at any time via the unsubscribe link in every email.
• Fulfilling orders, prints and commissions (processing, invoicing, delivery, after-sales) — performance of a contract (Art. 6(1)(b)).
• Organising and delivering art lessons — performance of a contract (Art. 6(1)(b)); for minors, with the consent of the parent/guardian.
• Accounting, tax and legal obligations (invoices, VAT records, certificates of authenticity) — legal obligation (Art. 6(1)(c)).
• Website security and prevention of fraud/abuse — legitimate interest (Art. 6(1)(f)).
• Analytics and marketing technologies — consent (Art. 6(1)(a)), given through the cookie banner.
• Establishing, exercising or defending legal claims — legitimate interest (Art. 6(1)(f)).

4. Cookies, Analytics and Consent

Our website uses cookies and similar technologies. Non-essential cookies (statistics and marketing) are blocked until you give consent through our cookie banner, in line with the Italian Data Protection Authority’s cookie guidelines of 10 June 2021.

Consent is collected and managed by Complianz and shared between plugins through the WP Consent API. Google’s tags operate under Google Consent Mode v2: until you accept, analytics and advertising storage are set to “denied”, so Google Analytics and Google Site Kit set no analytics or advertising cookies. When you accept the relevant category, consent is updated to “granted” and measurement resumes.

The technologies we use include: Google Analytics 4 and Google Site Kit (which connects Google Analytics and Search Console); the Google Analytics Measurement Protocol (server-side events when you scan an exhibition QR card, e.g. at La Fabbrica del Cotone in Garessio); the Meta Pixel; and Google Maps (loaded only after consent, with a placeholder until then). Fonts are self-hosted, so no data is sent to a third-party font provider.

You can change or withdraw your cookie choices at any time via the consent options on the site. A full, automatically updated list of cookies (names, purposes and durations) is available in our Cookie Policy.

5. Provision of Data — Mandatory or Optional

Providing data through the contact form, for orders/commissions or for lessons is necessary to obtain the requested service; without it we cannot reply or fulfil your request. Newsletter subscription and acceptance of non-essential cookies are entirely optional.

6. Recipients and Processors

We do not sell your personal data. We share it only with parties who help us run the Studio and website, acting as data processors under Article 28 GDPR or as independent controllers:

• Hostinger — website hosting and email.
• Google (Ireland/USA) — Analytics, Site Kit, Maps.
• Meta (Ireland/USA) — Meta Pixel, where marketing consent is given.
• Brevo (France/EU) — newsletter delivery.
• Payment provider — if you make a purchase, payment is processed securely by our payment provider; we receive confirmation of payment but not your full card details.
• Couriers/shipping providers — to deliver artworks and prints.
• Complianz / cookiedatabase.org — cookie consent management and cookie descriptions.
• Our accountant and, where necessary, professional/legal advisors and public authorities — for legal and tax compliance.

7. Transfers Outside the EEA

Some providers (Google, Meta) may process data in the United States. Such transfers are protected by the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, with supplementary measures where appropriate. Brevo processes data within the EU. You may request a copy of the relevant safeguards using the contacts in Section 1.

8. Retention

• Contact enquiries: up to 24 months from the last contact.
• Newsletter: until you unsubscribe, after which your email is removed from the active list.
• Orders/commissions and accounting records: for the period required by Italian tax and civil law (generally 10 years).
• Lesson records: for the duration of the relationship and any applicable legal terms.
• Analytics/marketing data: per the retention configured in the relevant tool and your consent.

After these periods data is deleted or irreversibly anonymised.

9. Your Rights

Under Articles 15–22 GDPR you have the right to access your data; obtain rectification or erasure; restrict or object to processing; data portability; and to withdraw consent at any time (without affecting processing already carried out). To exercise these rights, contact us at info@keilimajorartist.com. We will respond within one month.

You also have the right to lodge a complaint with the Italian supervisory authority: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma — garante@gpdp.it — www.garanteprivacy.it.

10. Minors

Our online services are not directed at children. We do not knowingly collect data from children under 14 (the age of consent for information-society services in Italy under Legislative Decree 101/2018) without the consent of a parent or guardian. For children’s art classes, all data is provided and authorised by the parent or guardian. If you believe a minor has provided data without authorisation, contact us and we will delete it.

11. Automated Decision-Making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you (Article 22 GDPR).

12. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted (HTTPS) transmission, access controls and a maintained hosting environment.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our processing or in the law. The current version and its date are always shown at the top of this page; significant changes will be highlighted on the site.