PRIVACY POLICY

Last updated: 19 July 2026

 

1. Data controller

The person responsible for processing personal data collected through this website is:

Name: Félix Rubio Sanz Website: felixrubio.com Business address: Calle Arroyo nº 76 Portal 7 2º (41008). Sevilla (Spain) Email: sercarlr@gmail.com

For any question concerning this Privacy Policy or the processing of personal data, please contact the data controller using the email address above.

 

2. Personal data collected

Depending on how you use this website, the following information may be collected:

• Name and surname.

• Email address and telephone number.

• Billing and delivery address.

• Information relating to orders and purchases.

• Payment transaction information.

• Messages sent through contact forms, email or WhatsApp.

• Technical information such as IP address, browser, device and website activity.

• Cookie preferences and analytics information, where consent has been provided.

The artist does not normally receive or store complete debit or credit card details. Payments are processed through the payment service providers available on the website.

 

3. Purposes of processing

Personal data may be used to:

• Respond to enquiries about artworks, prices, availability or commissions.

• Process payments, orders, deliveries and returns.

• Provide customer service and communicate about an order.

• Issue invoices and comply with accounting, tax and legal obligations.

• Prevent fraudulent transactions and protect the security of the website.

• Send newsletters or promotional communications only when the user has expressly consented.

• Analyse website use and improve its operation, subject to the user’s cookie choices.

Personal data will not be used for purposes incompatible with those described in this Privacy Policy.

 

4. Legal basis

Personal data is processed on the following legal bases:

• Performance of a contract or pre-contractual measures: when processing an order, arranging delivery or responding to a purchase or commission request.

• Compliance with legal obligations: including tax, accounting, consumer protection and administrative obligations.

• Consent: for optional marketing communications and non-essential cookies.

• Legitimate interests: for website security, fraud prevention and the defence of legal claims, provided that these interests do not override the user’s rights and freedoms.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

 

5. Service providers and recipients

Personal data may be shared only when necessary with:

• Wix and providers involved in hosting and operating the website.

• Payment service providers and financial institutions.

• Shipping companies, couriers and transport insurers.

• Accounting, tax, legal or technical advisers.

• Public authorities when disclosure is required by law.

These recipients may only use the information for the service they provide or to comply with their legal obligations.

Personal data is not sold to third parties.

 

6. International transfers

Some technological, payment or website service providers may process information outside the European Economic Area.

Where this occurs, the processing will be subject to the safeguards required by applicable data-protection law, such as an adequacy decision or approved contractual safeguards.

 

7. Data retention

Personal data will be retained only for as long as necessary for the purpose for which it was collected.

In particular:

• Order, invoice and transaction information will be retained for the periods required by tax, accounting and consumer-protection legislation.

• Enquiries and communications will be retained while they are being handled and for a reasonable period afterwards.

• Marketing information will be retained until consent is withdrawn or the user unsubscribes.

• Technical and cookie information will be retained according to the duration indicated in the website’s cookie settings or Cookie Policy.

Data may be retained for longer where necessary to establish, exercise or defend legal claims.

 

8. Data-protection rights

Users may exercise the following rights:

• Access their personal data.

• Request correction of inaccurate or incomplete data.

• Request deletion of their data where legally applicable.

• Request restriction of processing.

• Object to processing based on legitimate interests.

• Request portability of data where applicable.

• Withdraw consent at any time.

• Object to receiving marketing communications.

To exercise these rights, send an email to [YOUR CONTACT EMAIL], indicating the right you wish to exercise and providing sufficient information to confirm your identity.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency — Agencia Española de Protección de Datos (AEPD) if they believe that their personal data has been processed unlawfully.

 

9. Marketing communications

Promotional emails will only be sent where the recipient has expressly requested or consented to receive them.

The recipient may unsubscribe at any time by using the unsubscribe link included in the communication or by contacting the artist directly.

Refusing marketing communications will not affect the processing of an existing order.

 

10. Cookies

This website may use essential cookies necessary for its operation and, with the user’s consent, analytics, functionality or marketing cookies.

Users can accept, reject or manage non-essential cookies through the website’s cookie banner. Further information should be provided in the website’s Cookie Policy or cookie settings.

 

11. Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.

However, no internet transmission or electronic storage system can guarantee absolute security.

 

12. Third-party links

This website may contain links to third-party websites or social networks.

The artist is not responsible for the privacy practices of those external websites. Users should review their respective privacy policies before providing personal information.

 

13. Automated decisions

Personal data collected through this website is not used to make decisions based solely on automated processing that produce legal or similarly significant effects on users.

 

14. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect legal, technical or operational changes.

The version published on the website at the relevant time will apply, and the date of the latest update will be shown at the beginning of the document.