Privacy policy

Last updated: 10 October 2026

In this policy we explain what personal data we process when you write to us through this website to request a commissioned work, reserve an available work or propose an exhibition or a collaboration; what we use it for, how long we keep it and what rights you have. The General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 (LOPDGDD) apply.

1. Who is responsible for your data

  • Eva Jurado Jiménez
  • Tax ID (NIF): 46767894Q
  • Address: C/ Besalú, 43881 Cunit (Tarragona), Spain
  • Email for any privacy matter: artworks@greenmaiden.art

The team at Green Maiden, S.L. (NIF B75626507) manages, on Eva's behalf, the email, the diary and the relationship with those who commission work or propose projects, acting as data processor under a contract that obliges it to use the data for that purpose only.

2. What data we process

  • What you write in the forms: name, email address, telephone number if you give it to us, the type of project, the dimensions, the reference work and whatever you tell us.
  • What you send us afterwards by email or messaging to prepare the commission or the reservation, for example photos of the wall or the space, or the delivery address.
  • Browsing data: IP address, device and browser. Data that depends on non-essential cookies is only collected if you accept them (see the Cookie Policy).

We do not ask for special categories of data, such as health data or data on beliefs. Please do not send them to us.

3. What we use it for and on what legal basis

  • To respond to your request and, if you go ahead, to prepare the proposal, the commission or the sale. Legal basis: your own request and, where applicable, the contract (Art. 6.1.b GDPR).
  • To comply with legal obligations if a commission or sale goes ahead: invoicing, accounting and taxes (Art. 6.1.c GDPR).
  • To measure use of the website, only if you accept analytics cookies (Art. 6.1.a GDPR).
  • To keep the website secure and prevent the mass submission of fake forms. Legal basis: legitimate interest (Art. 6.1.f GDPR).

Writing to us does not subscribe you to any newsletter. We do not make automated decisions about you.

4. How long we keep it

  • Requests that do not become a commission: up to two years from the last contact, in case you return to the project, unless you ask us to delete them sooner.
  • Commissions and sales: six years, as required by commercial regulations (Article 30 of the Spanish Commercial Code), in addition to any applicable tax periods.
  • Cookies: the period stated in the Cookie Policy.

5. Who we share it with

We do not sell your data. Some providers process it on our behalf, under contract and only for that service:

  • Green Maiden, S.L.: management of email and commissions, as explained above.
  • Shopify: platform and hosting for the website, its forms and payments.
  • Google: email (Google Workspace) and the website's typefaces (Google Fonts, which receives your IP address when the page loads).
  • WhatsApp (Meta), if you choose to reserve or write to us that way.
  • Accounting and tax advisers, if there is a commission or sale.
  • Fine-art transport and installation companies, only if there is a commission or sale and in order to deliver it.

We will also disclose data to the authorities when required by law. Shopify also processes some data as an independent controller; you can read about this in its privacy policy and exercise your rights with Shopify through its privacy portal.

6. Transfers outside the European Union

Shopify, Google and Meta may process data outside the European Economic Area, mainly in the United States and Canada. We only work with providers that offer the safeguards required by the GDPR: an adequacy decision of the European Commission (Canada, or US companies certified under the EU-US Data Privacy Framework) or standard contractual clauses.

7. Your rights

You may ask us at any time to see your data, correct it, delete it, stop using it for a particular purpose or keep it without using it, receive it in a format you can take with you, and withdraw your consent. Write to us at artworks@greenmaiden.art stating what you would like. We will reply within one month at most.

If you believe we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the authority in your country.

8. Minors

This website is not aimed at children under 14 and we do not knowingly collect their data.

9. Changes

If we change this policy, we will publish the new version here with its date.