Privacy policy

Data controller

The controller of personal data processed through this website is Susana Cereja, in connection with her professional artistic practice. For privacy questions or to exercise your rights, contact info@susanacereja.com.

What data is processed and why

When you contact the artist directly by email, your email address and any information you choose to include in your message are processed to receive, assess and reply to your enquiry and to manage pre-contractual requests, collaborations, acquisitions, press enquiries, projects or other professional requests.

Depending on the context, processing may be based on steps requested before entering into a contract, performance of a contract, compliance with legal obligations, legitimate interests connected with managing the professional activity or, where required, consent.

Newsletter

When you subscribe to the newsletter, your email address is sent to systeme.io, which is used to manage the subscription and newsletter delivery. Subscription is completed through the website form on the basis of the consent given when it is submitted. You may withdraw that consent and unsubscribe at any time through the link included in newsletter emails or by contacting info@susanacereja.com.

Videos and external content

The videos page displays preview images provided by YouTube. The embedded player is loaded only after you choose to play a video and uses the youtube-nocookie.com domain. Once playback begins, YouTube may receive technical information needed to provide the content in accordance with its own policies.

Analytics

The website uses Cloudflare Web Analytics for aggregate usage and performance metrics. This measurement is used to understand the site’s general performance and, in the current configuration, does not use analytics cookies.

Service providers and transfers

Technical providers may be used where needed for hosting, content delivery, security, newsletter management and communications. Data should be made available only to the extent necessary for those services. Where processing involves an international transfer of personal data subject to the GDPR, an applicable lawful transfer mechanism or safeguard must be used.

Retention

Data is kept only for as long as needed for the purpose for which it was collected, without prejudice to longer periods required by legal, contractual or evidential obligations. General enquiries are kept for the period reasonably necessary to manage them; data connected with contractual relationships or invoicing may be retained for the legally applicable periods.

Your rights

Subject to the conditions provided by law, you may exercise rights of access, rectification, erasure, restriction, objection and portability and, where processing is based on consent, withdraw that consent. Requests may be sent to info@susanacereja.com.

You may also lodge a complaint with the Portuguese supervisory authority, CNPD — Comissão Nacional de Proteção de Dados.

Changes

This policy will be updated where legal, technical or operational changes require it, including if new analytics, advertising, forms or other data-processing tools are introduced.