Privacy Policy for andreypavli.com 

 

1. General Provisions and Data Controller
   This Privacy Policy defines the procedure for processing and protecting personal data collected from users on the website andreypavli.com. The owner of the Website and the Data Controller is Andrei Kibanov (Andrey Pavli). Contact email address is art.andreypavli@gmail.com. The Website is built and operates on the Wix platform, which acts as the Data Processor. By using the Website to view artwork or place an order, you agree to the terms of this Privacy Policy. 

    

2. Personal Data We Collect
   To process orders, sell, and deliver paintings, we collect personal data provided directly by users. This includes the first and last name of the recipient, email address, and contact phone number. We also collect the complete delivery address including country, city, street, building, apartment, and postal code. Additionally, we process order history, purchase history, related transaction records, and any messages or comments sent via contact forms. Technical data is collected automatically by Wix and external analytics services, including cookies, IP addresses, browser type, operating system, and on-site behavior. 

    

3. Legal Basis for Processing
   In compliance with the GDPR, we process your personal data based on contractual necessity when registering a purchase, clearing your payment, and arranging the physical shipping of the purchased painting. We also rely on your explicit consent for sending marketing newsletters or using non-essential analytical and tracking cookies. Finally, processing is carried out for our legitimate interests to maintain website security, prevent fraudulent transactions, and improve the user experience of our online store. 

    

4. Purposes of Personal Data Processing
   User personal data is processed strictly for registration, processing, payment clearance, and fulfillment of orders for the sale of paintings. It is also used for organizing the shipment and delivery of orders to buyers through international and local postal or courier services. Furthermore, we use this data to provide customer support, notify buyers about order status, share tracking numbers, and send newsletters or information about new paintings and upcoming exhibitions with explicit user consent. Lastly, it helps us analyze Website traffic and ensure its operational security and stability. 

    

5. Data Storage and International Data Transfers
   Our Website is hosted on the Wix.com platform. Your data is stored in Wix.com's secure data centers, which may be located in the United States, Ireland, Israel, or other jurisdictions. Wix.com ensures a high level of data protection, is certified under the PCI-DSS standards, and utilizes appropriate data transfer mechanisms including the EU Standard Contractual Clauses to safeguard the personal data of European Union users. 

    

6. Payment Processing
   All direct payment gateways offered by Wix.com and used on our Website adhere to the security standards set by PCI-DSS. The Website Operator does not store and has no access to your credit card numbers or payment credentials. This data is transmitted directly to payment providers in an encrypted format. 

    

7. Sharing Data with Third Parties
   To fulfill our sales obligations, the Operator shares the necessary scope of personal data with delivery services, shipping companies, and courier networks solely for the physical transit of the paintings. We also share data with the Wix.com platform for technical maintenance and operation of the online store. We do not sell, rent, or share your personal data with third parties for their marketing purposes. 

    

8. User Rights under GDPR
   If you are a resident of the European Union or the European Economic Area, you have specific rights regarding your personal data. You have the right to access and request a copy of the personal data we hold about you. You have the right to request the correction of inaccurate or incomplete data. You can request the erasure of your personal data once your order is fulfilled and no longer required for legal compliance. You may request a temporary restriction of your data processing or request that we transfer your data to you or another service provider in a structured format. You also have the right to object to the processing of your data for direct marketing purposes and file a complaint with a local Data Protection Authority in your country. To exercise any of these rights, please contact me directly at art.andreypavli@gmail.com. 

    

9. Data Retention Period
   We store your personal data only for as long as necessary to fulfill the purposes for which it was collected, including fulfilling sales contracts, handling post-sale customer support, and complying with tax and international commerce accounting regulations. 

    

10. Final Provisions
    The Operator reserves the right to amend this Privacy Policy at any time. The new version becomes effective immediately upon its publication on the Website. The current version of this Policy is always accessible on the Website at andreypavli.com/privacy.