Privacy policy

This Privacy Policy aims to inform you clearly and transparently about how we collect, use and protect your personal data when you visit our website or contact us.

In compliance with the General Data Protection Regulation (GDPR) and applicable Spanish legislation, we want you to know your rights and the decisions you can make regarding your data. This policy applies to all data processing carried out through our website www.pichiavo.com.

At PichiAvo, we treat your personal data with the utmost respect, confidentiality, and responsibility. We only collect data that is strictly necessary to provide our services or enhance your experience. We do not sell your information. We apply technical and organizational measures to protect it and are proactive in legal compliance.

We collect data you provide directly and data from your browsing activity:

• Identification data: name, surname, email, country, phone (if provided)
• Transaction data: postal address, payment information, order history
• Browsing data: IP, device, language, browser, cookies (see Cookie Policy)

The legal basis for processing may be:

• Your explicit consent (e.g., newsletter or cookies)
• Contractual necessity (e.g., for purchases)
• Legal obligations
• PichiAvo’s legitimate interest in improving the user experience and site security

We collect your data when you:

• Fill out a contact or order form
• Subscribe to our newsletter
• Commission a custom artwork
• Browse the site and accept cookies
• Email or contact us

We never ask for more data than necessary.

We process your data to:

• Respond to inquiries or requests
• Manage orders, payments, billing, and deliveries
• Handle custom artwork and client communication
• Manage subscriptions and send newsletters (if requested)
• Comply with legal, tax, and accounting obligations
• Improve navigation and security using analytics and technical cookies

When you make a purchase or commission, we use your data to:

• Verify your identity
• Issue quotes or invoices
• Process payments and arrange shipment
• Communicate throughout the process
• Fulfill our sales and delivery terms

We keep this data for the legally required period (typically 5 years).

Yes, but only with your explicit consent. For example:

• Sending newsletters or updates on artworks
• Invitations to events or collaborations
• Internal statistical analysis

We do not use your data for automated decision-making or profiling.

We retain data only as long as necessary:

• Inquiries: 1 year
• Orders and billing: 5 years (legal requirement)
• Subscriptions: until you unsubscribe
• Cookies: as described in our Cookie Policy

After this, we securely delete or anonymize your data.

You can request:

• Access to your data
• Rectification of inaccuracies
• Deletion
• Restriction or opposition to processing
• Data portability
• Withdrawal of consent

Email us at studio@pichiavo.com. You may also contact the Spanish Data Protection Agency (www.aepd.es).

We only share data with:

• Service providers (e.g., payments, delivery, hosting)
• Legal or accounting advisors
• Competent authorities when required

All providers sign confidentiality and data processing agreements.

Yes, but only when necessary and under adequate safeguards.

At PichiAvo, we use third-party services that may process or store data outside the European Economic Area (EEA), such as Vimeo, Calendly, or traffic analysis tools. These transfers are carried out only when essential for service delivery and always under a valid legal basis according to the GDPR.

The legal grounds for such international data transfers are:

• Your explicit consent, when you accept the use of third-party services that involve data transfers (e.g., through cookie consent).
• The performance of a contract, when processing is necessary to manage orders, commissions or communications with users outside the EEA.
• Our legitimate interest, provided it does not override your rights and freedoms, and appropriate safeguards are in place.

In all cases, we ensure that data recipients are covered by one of the following mechanisms:

• An adequacy decision by the European Commission (where the recipient country offers an equivalent level of data protection),
• The use of Standard Contractual Clauses (SCCs) approved by the European Commission,
• Or the adoption of Binding Corporate Rules, when applicable within international corporate groups.

You may request more information about these international transfers by writing to us at studio@pichiavo.com.

We implement appropriate technical and organizational measures:

• Encrypted connections (SSL)
• Restricted access
• Secure payment platforms
• Internal control procedures

While no system is infallible, we are prepared to react quickly to any security incident.

We use essential and analytics cookies to operate the site and improve your experience. No advertising or profiling cookies are used. You can configure your preferences from the banner or consult our full Cookie Policy.

We currently use cookies from:

• Vimeo (video)
• Calendly (appointments)
• Sourcebuster (traffic analytics)

Yes. We may update this policy for legal or technical reasons or changes in our services. You will be informed of any significant changes. The current version is always available on this page.