Nabanita_Saha

Privacy Policy

Privacy Policy

Last updated: 5 May 2026

This privacy policy explains how personal data is collected and processed when you visit the website artistnabanitasaha.com (the “Website”) or get in touch via the contact form.

1. Data Controller

The person responsible for the processing of personal data on this Website is:

Nabanita Saha Calle Pintor Casto Plasencia 18, Planta P02, Puerta C 19004 Guadalajara, Spain Email: sahanabanita118@gmail.com

If you have any questions regarding the processing of your personal data, please use the email address above.

2. Personal Data Collected

2.1 Server log files

When you access the Website, the hosting provider automatically collects technical information that your browser transmits. This typically includes:

  • IP address (anonymised where possible)
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referring URL (the page you visited before)
  • Pages visited on this Website

This data is processed solely to ensure the security, stability, and performance of the Website. It is not used to identify individual visitors and is not shared with third parties.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in operating a secure and stable website).

2.2 Contact form

When you send a message through the contact form, the following data is collected:

  • Your name
  • Your email address
  • The subject (if provided)
  • The content of your message

This data is used exclusively to respond to your inquiry. It is not passed on to third parties for marketing purposes and is stored only as long as necessary to handle your request and any related follow-up communication.

Legal basis: Article 6(1)(a) GDPR (your consent, given when you submit the form) and Article 6(1)(b) GDPR (steps taken at your request prior to entering into a possible agreement, such as gallery representation or collaboration).

2.3 Spam protection

To prevent automated abuse of the contact form, this Website uses a spam protection service. The service may briefly process technical information about your request to verify that it comes from a human user. No personal data is stored beyond what is necessary for this verification.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in protecting the Website from automated abuse).

3. Cookies

This Website does not use tracking cookies, analytics cookies, or advertising cookies. Only strictly necessary technical cookies may be set to ensure the basic functionality of the Website. No consent banner is required, as these cookies do not require consent under applicable law.

4. Data Sharing and Third Parties

Personal data is not sold, rented, or shared with third parties for marketing or advertising purposes.

The following service providers may process limited data on behalf of the data controller, strictly to enable the operation of the Website:

  • Hosting provider — provides server infrastructure and processes server log files as described above.
  • Email service — used to receive and send messages submitted through the contact form.
  • Spam protection service — used to filter automated abuse of the contact form.

These providers act as data processors under written agreements that comply with GDPR requirements.

5. International Data Transfers

Where service providers process data outside the European Economic Area, appropriate safeguards under Articles 44–49 GDPR are in place — such as Standard Contractual Clauses or adequacy decisions issued by the European Commission.

6. Your Rights

Under the GDPR and Spanish data protection law (LOPDGDD), you have the following rights regarding your personal data:

  • Right of access — to receive confirmation of whether your data is being processed and to obtain a copy.
  • Right to rectification — to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) — to request deletion of your data, subject to legal limitations.
  • Right to restriction of processing — to limit how your data is used.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — to object to processing based on legitimate interests.
  • Right to withdraw consent — at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please email sahanabanita118@gmail.com.

You also have the right to lodge a complaint with the competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD): www.aepd.es.

7. Data Retention

Personal data is retained only as long as necessary for the purposes for which it was collected:

  • Contact form messages are kept for as long as needed to handle your inquiry and any reasonable follow-up. Messages with no further relevance are deleted within twelve months.
  • Server log files are typically retained by the hosting provider for short technical periods (usually a few weeks) and then automatically deleted.

8. Security

Reasonable technical and organisational measures are in place to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include encrypted connections (HTTPS) and access controls on systems used to process data.

9. Changes to this Privacy Policy

This privacy policy may be updated from time to time to reflect changes in the Website’s services or in legal requirements. The most recent version is always available on this page, with the date of last update shown at the top.