Privacy Policy

Last updated: 04/05/2025

This Privacy Policy describes how personal data is collected, processed, stored, and protected when you visit this website or communicate through it. The protection of your personal data is taken seriously and is handled in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, “GDPR”), as well as applicable national data protection laws.

The data controller within the meaning of the GDPR is Collette Sepeche, reachable via colette@colettesepeche.com. The data controller determines the purposes and means of the processing of personal data.

When you visit this website or submit an inquiry via a contact form, personal data may be collected. This may include your name, email address, and any information you voluntarily provide in the message field. The provision of personal data is voluntary; however, without providing certain information, it may not be possible to respond to your inquiry.

Personal data is processed solely for the purpose of responding to inquiries, communicating regarding artworks, commissions, exhibitions, or related requests, and maintaining necessary correspondence arising from such communication. The data is not used for automated decision-making or profiling.

The legal basis for the processing of personal data is Article 6(1)(a) GDPR (consent), as the data subject voluntarily provides personal information and explicitly agrees to its collection, storage, and use by submitting a form on this website. Where communication results in a contractual relationship or pre-contractual steps, processing may additionally be based on Article 6(1)(b) GDPR.

Personal data is stored securely and retained only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal obligations. Inquiry data is generally retained only for the duration of communication and any subsequent legitimate business relationship. Once the purpose for processing no longer applies, or upon request by the data subject, personal data will be deleted, unless statutory retention obligations require otherwise.

This website is hosted on Squarespace. Squarespace may process personal data on behalf of the data controller as a data processor in accordance with GDPR-compliant data processing agreements. Appropriate safeguards are in place to ensure the protection of personal data, including standard contractual clauses where data is transferred outside the European Union.

Personal data will not be sold, rented, or otherwise disclosed to third parties, except where disclosure is required by law or necessary for the operation of the website and communication services. Any third parties involved in data processing are bound by confidentiality and data protection obligations in accordance with GDPR.

This website may use technically necessary cookies to ensure proper functionality and security. Cookies are small text files stored on your device. They do not collect personal data unless explicitly stated. You may restrict or disable cookies through your browser settings; however, this may affect the functionality of the website.

Data subjects have the right to request access to their personal data, rectification of inaccurate or incomplete data, erasure of personal data, restriction of processing, data portability, and to object to processing in accordance with Articles 15 to 21 GDPR. Where processing is based on consent, the data subject has the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Requests concerning personal data or the exercise of data subject rights may be directed to colette@colettesepeche.com. The data subject also has the right to lodge a complaint with a competent supervisory authority in the European Union.

Appropriate technical and organizational measures are implemented to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Nevertheless, absolute security cannot be guaranteed due to the nature of internet-based data transmission.

This Privacy Policy may be updated periodically to reflect changes in legal requirements or website operations. Any changes will be published on this page with an updated revision date.

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact Colette Sepeche at colette@colettesepeche.com.