Privacy Policy

‍This Privacy Policy explains how Serena Bifolchi collects, uses, and protects personal data in connection with the website serenabifolchi.com and any commission or business enquiry. It is written in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian data protection law.

‍

01. Who is the data controller

The data controller is Serena Bifolchi, an independent artist operating from Via San Pietro 7, Siena, Italy, and Via di Gracciano 109, Montepulciano, Italy. You can contact her at hello@serenabifolchi.com or by phone at +39 351 6693099.

‍

02. What personal data is collected and why

Personal data is collected only when you voluntarily provide it — by submitting one of the contact forms on this website, or by reaching out directly via email, WhatsApp, or phone. The following summarises what is collected through each form and for what purpose.

Commission enquiry: Collects name, email, commission type, and project description. Used to discuss and fulfil a commissioned painting. Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).

Gallery & exhibitor enquiry: Collects name, role, gallery name, location, email, inquiry type, and message. Used to respond to exhibition or collaboration proposals. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Press enquiry: Collects name, email, outlet or platform, and message. Used to respond to press and media requests. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

General contact: Collects name, email, and message. Used to respond to general questions. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Direct contact (email, WhatsApp, phone): Whatever you choose to share in your message. Used solely to respond and maintain correspondence. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

No data is collected passively through tracking pixels, advertising networks, or third-party analytics services that identify individuals.

‍

03. Website analytics

This website uses Umami, a privacy-first analytics tool. Umami collects only anonymised, aggregated data about page visits — such as the number of visitors, pages viewed, and general geographic region. It does not use cookies, does not track individuals across sessions, and does not store any personally identifiable information. No consent is required for this data collection as it falls outside the scope of personal data processing under the GDPR.

‍

04. Cookies

This website does not use cookies of any kind — not for analytics, advertising, session tracking, or any other purpose. No cookie banner is shown because there is nothing to consent to.

‍

05. How long is data kept

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected. For commission-related correspondence, data may be kept for up to five years for accounting and legal purposes. For general enquiries that do not lead to a commission, data is deleted once the exchange is concluded and no longer needed.

‍

06. Who has access to your data

Your personal data is not sold, rented, or shared with third parties for marketing purposes. Data may be accessed by the following parties only where strictly necessary: Webflow, Inc. as the website hosting platform; email and messaging platforms used to receive and reply to your messages; and a shipping carrier if a commission is to be delivered, in which case only the name and address required for shipment will be shared.

Where data is transferred outside the European Economic Area, Serena Bifolchi relies on standard contractual clauses or equivalent transfer mechanisms.

‍

07. Your rights

Under the GDPR, you have the right to access the personal data held about you, to request its correction or deletion, to restrict or object to its processing, and to request a portable copy of your data. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, at www.garanteprivacy.it.

To exercise any of these rights, contact Serena directly at hello@serenabifolchi.com. Requests will be handled within 30 days.

‍

08. Changes to this policy

This policy may be updated from time to time — for example, if new features such as a newsletter or downloadable content are added to the website. The current version will always be available on this page, with a revised effective date at the top.

‍