top of page

Privacy Policy

Effective Date: 01/02/2026

This Privacy Policy explains how personal data is collected, used, and protected when you visit or make a purchase from www.lisawildlingart.com.

This Website is operated by Lisa van Heijningen, registered in Spain.

Contact details:
Email: lisawildlingart@gmail.com
Business Address: Carrer Torre Nova 14, La Torre de Claramunt, 08789, Spain.
NIF/NIE: X8989142Y

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights.

  1. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Information you provide directly

  • Full name

  • Billing and shipping address

  • Email address

  • Telephone number (if provided)

  • Order details

  • Communications sent via contact forms or email

b) Payment Information
Payments are processed securely via Stripe. We do not store full credit card details. Stripe processes payment data in accordance with its own privacy policy.

c) Automatically Collected Information
When you visit the Website, we may automatically collect:

  • IP address

  • Browser type

  • Device information

  • Pages viewed

  • Referring website

  • Date and time of visit

This data may be collected using cookies and analytics tools.

2. Legal Basis for Processing (GDPR Article 6)

We process personal data on the following lawful bases:

  • Contractual necessity – to process orders and deliver artwork

  • Legal obligation – to comply with tax and accounting laws

  • Legitimate interests – to improve our website and prevent fraud

  • Consent – for marketing emails and non-essential cookies

You may withdraw consent at any time.

3. How We Use Your Personal Data

We use your information to:

  • Process and ship orders

  • Communicate regarding purchases or inquiries

  • Provide customer support

  • Send newsletters (if you opt in)

  • Comply with tax and accounting obligations

  • Improve website functionality and security

  • Prevent fraud and unauthorized transactions

4. International Transfers of Data

Because we sell internationally and use third-party service providers (including Stripe), your personal data may be transferred outside the European Economic Area (EEA).

Where such transfers occur, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission

  • Transfers to countries with adequacy decisions

  • Secure processing agreements with service providers

5. Data Sharing

We do not sell your personal data.

We may share data with:

  • Payment processors (e.g., Stripe)

  • Shipping and delivery providers

  • Website hosting providers

  • IT and technical service providers

  • Legal, tax, or regulatory authorities where required by law

All third parties process data under contractual obligations to protect it.

6. Data Retention

We retain personal data only as long as necessary:

  • Order and billing records: as required by Spanish tax law

  • Marketing data: until you withdraw consent

  • Customer inquiries: for a reasonable period to respond and maintain records

After this period, data is securely deleted or anonymized.

7. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

In Spain, the supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

To exercise your rights, contact: lisawildlingart@gmail.com

8. Cookies

The Website uses cookies and similar technologies to:

  • Enable essential website functionality

  • Analyze website traffic

  • Improve user experience

Where required by law, we obtain your consent before placing non-essential cookies. You can manage cookie preferences through your browser settings.

9. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

However, no method of internet transmission is completely secure.

10. Children

This Website is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

12. Contact

If you have any questions regarding this Privacy Policy or your data, please contact:

Lisa van Heijningen
Email: lisawildlingart@gmail.com
Business Address: Carrer Torre Nova 14, La Torre de Claramunt, 08789, Spain.

bottom of page