Who processes your data
ASSOCIACIÓ QUEI15 ESPAI CREATIU
Tax ID: ESG67244434
Carrer Wellington, 15 · 08018 Barcelona
Email: quei15bcn@gmail.com
Phone: 619 00 45 15
If you have any questions about how we handle your data, write to us at
that same email address.
What data we collect and why
If you write to us through the contact form
Which data: your name, email address and whatever you tell us.
What for: to reply to you.
On what legal basis: your consent, given when you
send us the form.
For how long: for as long as the conversation lasts, plus one more year; after that
it is deleted.
If you buy an artwork
Which data: your full name, your NIF (tax ID) when an invoice is required,
billing and delivery addresses, email, phone number and order
details.
How payment currently works: the purchase is arranged by email or
phone and paid by bank transfer or at the gallery itself. We
never ask for card details by email, and as long as there
is no online payment, we do not process any. On the day there is, the
card details will be handled directly by the entity taking payment, and we will
neither see nor store them.
What for: to manage the order, take payment for it, send you
the artwork, issue the invoice and assist you if there is any problem.
On what legal basis: performance of the purchase contract and,
for invoicing and accounting, compliance with legal obligations.
For how long: for as long as the relationship lasts and, afterwards, for the period
required by accounting and tax law (up to six years).
If you create a shop account
Which: your email, your password (encrypted, we don’t see it) and
your order history.
What for: so you can check your orders without
having to enter your details again.
Until when: for as long as you keep it open. You can close it whenever
you like by writing to us.
When you browse
Technical data is collected —your IP address, browser, device and
operating system— for the operation and security of the site, and the preferences
you choose in the cookie notice. Cookies that are not essential only
activate if you accept them, and you can change your mind at any time from the same
notice.
Who we share your data with
Your data is not shared with third parties, unless a
law requires us to or it is necessary to run the site and the service: in
this second case it is done by providers acting as data
processors, under the contract required by the GDPR and only for what
we instruct them to do (website hosting, accounting management and, when there are orders,
payment and shipping).
We do not sell or share your data with anyone.
Third-party services and transfers outside the EU
We’ll be upfront about this, as it affects your IP address:
- Google Fonts. The site’s carousel loads two
fonts from Google’s servers (fonts.googleapis.com). To
serve them, Google receives the IP address of whoever visits the page. - Google Maps, on the shop page, with the same
effect.
Google may process this data outside the European
Economic Area, relying on the EU-US Data Privacy Framework and on the
European Commission’s standard contractual clauses.
The links to Instagram, YouTube or WhatsApp load nothing
until you click on them: until then, those companies receive nothing from you.
What rights you have
You can ask us at any time to:
- Access the data we hold about you.
- Correct it if it is not accurate.
- Delete it, once it is no longer needed.
- Restrict its processing or object to it.
- Take it with you in a machine-readable
format. - Withdraw any consent you had given us, without
this affecting anything done beforehand.
It’s enough to write to quei15bcn@gmail.com
telling us what you want. We will reply within one month at most.
If you believe we have not done this properly, you can file a complaint with the Catalan
Data Protection Authority (apdcat.gencat.cat) or the Spanish
Data Protection Agency (aepd.es).
Minors
This site is not aimed at children under fourteen and we do not ask them for data. To
sign up for a workshop, if the person signing up is a minor, an adult
with legal representation for them must do so.
Security
Our site has an encrypted connection and we apply reasonable measures to
protect what you entrust to us. No system is infallible: if there were ever a
breach that could affect you, we would tell you.
Last updated: 17 August 2026.
