Privacy policy

1. Who handles your data

The data controller is Triade Group Ltd (Company No. 13980643), registered office 111 Power Road, London W4 5PY, United Kingdom, which runs this website and the sale of works by Gabriela Aleksandra Szuba.

For any question about your data, please write to info@gabrielaszuba.com.

2. What we collect

Contact form: your name, phone number, email address, your message and, if you tick the box, your consent to hear about news and special offers.

Purchase enquiry: the same details, plus the works you have chosen. No payment is taken on the site: after your enquiry you receive a summary by email, with payment options (PayPal or bank transfer).

We collect nothing else through the site and we do not profile visitors.

3. Why we use it

To reply to your messages and purchase enquiries, prepare your summary and arrange delivery and payment. This is necessary to act on your request and, if you buy, to perform the contract (Article 6(1)(b) GDPR).

To meet our legal obligations, such as tax and accounting records, once a purchase is completed (Article 6(1)(c) GDPR).

To send you news and special offers, only if you have consented (Article 6(1)(a) GDPR). You can withdraw consent at any time by writing to info@gabrielaszuba.com; this does not affect anything that happened before.

4. How long we keep it

Messages and enquiries arrive as emails in the info@gabrielaszuba.com inbox and are kept there for as long as needed to deal with them. Records of a completed purchase are kept for the period required by tax and accounting rules.

Your consent to receive offers lasts until you withdraw it.

5. Spam protection

To block automated submissions, the site keeps an encrypted fingerprint of your IP address for a few hours; it cannot be traced back to the address itself. These files delete themselves within 24 hours. The site is served only over an encrypted connection (https).

6. Cookies and browser storage

The site uses no cookies, either our own or third-party, and shows no advertising.

Your basket is saved in your browser (local storage) so the works you chose are still there when you return; for the current visit only, the site also remembers that it has already shown the opening animation. This information never leaves your device and you can clear it in your browser settings.

Fonts and images are served from our own server: the pages do not contact any outside service.

7. Who may receive it

The site is hosted by Aruba S.p.A. on servers in Italy, and the mailbox by One.com on servers in Denmark: both process data on our behalf solely to provide their service.

If you buy a work, the details needed for delivery go to the courier and, if you choose PayPal, to PayPal for payment, under their own privacy policies.

We never sell or pass on your data to anyone.

8. The UK and the European Union

The controller is based in the United Kingdom, which the European Commission recognises as providing an adequate level of protection: your data is protected under both the EU GDPR and the UK GDPR.

9. Your rights

You may at any time ask to see your data, correct it, have it erased, restrict its use, receive it in a portable format, object to its processing and withdraw your consent. Simply write to info@gabrielaszuba.com: we reply within one month.

If you believe your data is not being handled properly, you can complain to the supervisory authority where you live (in the UK the Information Commissioner’s Office, in Italy the Garante per la protezione dei dati personali).

10. Links to other sites

The Instagram and Facebook icons and the address on Google Maps are plain links: those services process data only if you open them, under their own policies.