Data controller
The data controller is Emilio Gómez González, tax ID 44594391J, of Calle Fernández Shaw 84 A, 29018 Málaga, Spain. You can contact EIRV at eirv.art@gmail.com or +34 671 654 629.
Data processed
The website may process name, email, subject and message entered in contact or shipping enquiries; order address and email; payment-provider references; and the artwork, size, price and assigned edition number. EIRV does not store full card details.
Aggregated statistics
EIRV measures page visits, country and the category of visit origin — for example search, Instagram or direct access — in aggregated form. It does not store IP addresses, visitor identifiers, URL parameters or browsing profiles, and it does not set analytics cookies.
Purposes and legal basis
- To answer enquiries and quote requests, based on requested pre-contractual measures.
- To manage orders, payments, delivery, returns and legal obligations, to perform the contract and comply with applicable obligations.
- To prevent duplicates and fraud using technical message or order references, based on EIRV's legitimate interest in store security.
- To understand the audience of the website in aggregate in order to improve it, without identifying visitors or creating profiles.
Recipients
Cloudflare/Sites and the D1 database host the application, contact records and aggregated statistics. Resend processes the data necessary to send contact and order communications. PayPal intervenes when the customer chooses that payment method. These providers act only to the extent necessary to provide their respective services.
Retention
Enquiry data is retained for the time necessary to respond. Data linked to orders, payments and invoicing is retained for the periods required by applicable law. Aggregated statistics are deleted after fourteen months.
Your rights
You may request access, rectification, erasure, objection, restriction and portability by writing to eirv.art@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency if you consider that processing does not comply with applicable rules.
Updated: 7 September 2026.