Legal

Privacy policy

Last updated: 31 July 2026

This Privacy Policy explains how your personal data is collected, used and protected when you visit myriyevskyy.com or purchase artwork through this website.

This website is operated as a small independent artist's gallery based in Spain. We collect only the personal information that is necessary to operate the website, process orders, communicate with customers and comply with applicable legal obligations.

By using this website, you acknowledge that your personal data may be processed as described in this Privacy Policy.

Who is responsible for your data

The data controller for this website is:

Name / legal name: Volodymyr Myriyevskyy
Tax identification number (NIF): X5814859E
Postal address: Calle Sant Josep, 23, Puerta 1 · 43540 La Ràpita · Tarragona · Spain
Country of establishment: Spain
Email: contact@myriyevskyy.com
Data Protection Officer (DPO): Not applicable

Email is the primary contact method for this website and for all privacy-related requests. Every enquiry is reviewed personally.

Orders and payments

Payments are processed exclusively through Stripe, using Stripe's secure hosted checkout pages. You may pay using the payment methods supported by Stripe, including credit or debit cards, Apple Pay and Google Pay where available.

This website never receives, stores or has access to your full payment card details. Payment information is entered directly on Stripe's secure servers.

After a successful payment, Stripe provides only the information necessary to complete your order, including:

your name;
your shipping address;
your email address;
your telephone number (where provided);
details of the artwork purchased.

We use this information solely to:

process and fulfil your order;
prepare and ship your artwork;
prepare the personalised Certificate of Authenticity where applicable;
communicate with you regarding your purchase;
comply with accounting, tax and legal obligations.

Providing this information is necessary to enter into a sales contract. Without sufficient delivery and contact information, we cannot complete your purchase.

If you contact us regarding a commissioned artwork, we also process the information you voluntarily provide during our correspondence for the purpose of discussing, preparing and completing the commission. The commission form on the Commissions page does not send anything to a server of ours and stores nothing: it simply opens a message in your own email program, which you send yourself. Nothing reaches us until you press send.

This website does not provide customer accounts or a shopping cart. Each purchase is processed as an individual order.

Cookies and similar technologies

This website uses only what it needs. There is exactly one optional cookie, and it is not set unless you say yes.

The choice is real. The first time you arrive, a notice asks you to Accept or Decline analytics. Until you press Accept, no analytics script is loaded, no analytics cookie is created and no data is sent anywhere. If you press Decline, nothing is loaded and any analytics cookie previously stored on your device is deleted. Declining costs you nothing: the whole gallery works exactly the same either way.

You can change your mind at any time — accepted today, declined tomorrow, or the other way round — using the Cookie settings link at the bottom of every page. Withdrawing is as easy as giving, and it takes effect immediately.

What the website uses:

Google Analytics 4 (measurement ID G-WL6RRH6TGL) — optional, only after you accept. It collects aggregated information about website usage such as pages visited, approximate country, browser type, device type and general traffic statistics, which help improve the website and its content. Google Analytics works by placing a cookie containing a randomly generated identifier for your browser, so we prefer not to describe the raw data as anonymous. We read the figures in aggregate, we do not use them to identify you, and we do not combine them with your order. Google's advertising features are switched off: there is no advertising, no cross-site tracking and no remarketing on this site.
Cloudflare, which provides website security, performance, content delivery and protection against malicious traffic. On this site Cloudflare is configured so that it does not set any cookies in your browser.
Local storage in your own browser, to remember the selected shipping destination, your answer to the cookie notice, and any paintings you mark as favourites. This is strictly necessary for those features to work at all, it remains stored only on your own device, and it is not transmitted to us or to anyone else.

Other ways to opt out. Besides the Cookie settings link, you can block or delete cookies for this site in your browser settings, browse in a private window, turn on your browser's tracking protection, or install Google's official Google Analytics opt-out browser add-on. Clearing this site's data also deletes the analytics cookie and everything stored in local storage.

Most web browsers allow you to control, block or delete cookies through your browser settings. Disabling the local storage described above may affect the functionality of the website; declining analytics does not.

Legal basis and data retention

We process personal data only where there is a lawful basis under the General Data Protection Regulation (GDPR). Depending on the circumstances, we rely on one or more of the following legal bases:

Performance of a contract — to process your order, arrange delivery, communicate with you regarding your purchase, prepare certificates of authenticity where applicable, and provide customer support.
Compliance with legal obligations — to comply with accounting, taxation and other legal obligations imposed by applicable law, including disclosures to tax or customs authorities.
Legitimate interests — to respond to enquiries, maintain the security and functionality of the website, prevent misuse, understand in aggregate how the gallery is used, and improve our services.
Consent — for the optional analytics cookie described above, which is stored and read only if you accept it. You may withdraw your consent at any time through the Cookie settings link at the bottom of every page, and doing so does not affect the lawfulness of processing carried out before withdrawal. Analytics data collected while your consent was in force is retained for the retention period configured in Google Analytics for this property, after which Google deletes it automatically.

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or for as long as required by applicable law. In particular:

accounting and invoicing records are retained for the period required under Spanish tax and accounting legislation — generally four years for tax purposes and six years under commercial law;
correspondence relating to enquiries, commissions and customer support is retained for as long as reasonably necessary to deal with the request and any related legal obligations;
order information is retained for as long as necessary to fulfil the contract and comply with applicable legal requirements.

When personal data is no longer required, it is securely deleted or anonymised where appropriate.

Who we share your data with

We never sell, rent or trade personal data.

Personal data is shared only where necessary to operate the website, process payments, deliver artwork or comply with legal obligations. Depending on the order, your information may be shared with:

Stripe, for secure payment processing;
shipping companies and postal operators, solely for the purpose of delivering your artwork. Orders to the United States are normally shipped by DHL Express; orders within Europe are normally shipped using Correos Express, Correos or another suitable carrier, depending on destination and dimensions. Every shipment is tracked and insured, so the carrier necessarily receives the delivery details you gave at checkout in order to deliver the parcel and to contact you if something goes wrong;
Cloudflare, which provides website security, performance and content delivery services;
Google Analytics, for aggregated website analytics — only if you accepted the analytics cookie. If you declined, nothing is shared with Google.

Where required by law, we may also disclose personal data to competent public authorities, including tax authorities, customs authorities or other governmental bodies.

Each provider processes personal data in accordance with its own privacy policy and applicable data protection laws.

International transfers

Some of the service providers used by this website may process personal data outside the European Economic Area (EEA), in particular in the United States.

Where international transfers take place, appropriate safeguards are applied in accordance with Chapter V of the GDPR: either the EU–US Data Privacy Framework, where the provider concerned is certified under it, or the Standard Contractual Clauses approved by the European Commission, together with the additional safeguards implemented by the relevant provider.

If your order is delivered outside the European Union, your delivery information may also be processed by shipping companies, customs authorities or local delivery partners in the destination country where necessary to complete the shipment.

If you would like further information regarding international data transfers, please contact us at contact@myriyevskyy.com.

Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data where applicable;
request restriction of processing;
object to processing based on legitimate interests where applicable;
receive your personal data in a structured, commonly used and machine-readable format where applicable;
withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact contact@myriyevskyy.com. For your protection, we may request reasonable information to verify your identity before responding to your request.

If you believe that your personal data has been processed unlawfully, we would rather you told us first so we can put it right. You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), at aepd.es, or with the supervisory authority responsible for data protection in your country of residence.

Things this website does not do

This website is intentionally simple. In particular:

we do not operate a newsletter;
we do not send marketing emails;
purchasing artwork does not subscribe you to any mailing list;
we do not provide customer accounts or login areas;
we do not create customer profiles for advertising purposes;
we do not carry out automated decision-making that produces legal or similarly significant effects;
we do not profile visitors for marketing purposes.

Any personal data collected through this website is used only for the purposes described in this Privacy Policy.

Children

This website is intended for adults purchasing original artwork. We do not knowingly collect personal data from children.

If we become aware that personal data relating to a child has been collected unintentionally, we will take reasonable steps to delete it as soon as practicable.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in applicable laws, regulatory requirements, our services or the way this website operates.

Whenever this Privacy Policy is updated, the revised version will be published on this page together with the updated revision date. Any changes become effective upon publication unless otherwise required by applicable law.

A note on this Privacy Policy

This Privacy Policy is intended to explain, in clear and straightforward language, how personal data is handled when you use this website or purchase artwork.

It is written to be accurate, transparent and easy to understand. However, it does not constitute legal advice and should not be interpreted as creating contractual rights beyond those provided by applicable law.

If anything in this Privacy Policy is unclear, or if you would like additional information about how your personal data is processed, you are welcome to contact us at contact@myriyevskyy.com. We will do our best to answer your questions clearly and promptly.