Data Protection · GDPR

Privacy Policy

Last updated: October 2026

The privacy of our visitors, art collectors, and clients is paramount. This policy outlines how Valentin Borșan collects, uses, and safeguards personal data on valentinborsan.art, in private delivery galleries, and during Fine Art order processing, pursuant to EU Regulation 2016/679 (GDPR).

1. Data Controller

The data controller responsible for personal data processing is Valentin Borșan, fine art photographer and visual storyteller based in Rieti, Lazio, Italy.

For any inquiries, requests to exercise GDPR rights, or data questions, contact us directly at: contact@valentinborsan.art.

2. Data We Collect and Purposes

• Private Client Deliveries: To provide secure access and full-resolution downloads for portrait or event sessions, we process authorized client emails, access tokens, and security download logs.

• Fine Art Orders: Full name, delivery address, billing details, phone number, and email for shipping orders and accompanied signed Certificates of Authenticity.

• Contact Form: Name, email address, and inquiry message to answer project inquiries and bespoke quotations.

• Photo Consent (GDPR / TFP): Model or legal guardian name, digital holographic signature, and express image usage permission.

• Newsletter: Email address collected strictly with explicit consent, with one-click unsubscribe available anytime.

3. Legal Grounds for Processing

We process personal data solely on legitimate GDPR grounds: contract execution (Art. 6(1)(b)), explicit consent (Art. 6(1)(a)), legitimate interest in site security and copyright protection (Art. 6(1)(f)), and statutory compliance (Art. 6(1)(c)).

4. Storage, Security & Processors

All data is housed within secure European Union servers (PostgreSQL / Supabase EU region, Cloudflare R2 with encryption in transit and at rest).

We never sell or rent your data. Shared only with essential service providers: insured courier partners, PCI-DSS payment gateways (Stripe), and transactional mail dispatchers.

5. Your Rights Under GDPR

You hold the right to access, rectify, delete ("right to be forgotten"), restrict processing, and request portability of your data at any time by emailing contact@valentinborsan.art.