Privacy Policy

1Who is responsible

The controller of your personal data is Elevenart OÜ, Pärnu mnt 105, 11312 Tallinn, Estonia, which runs energyresonantart.com and sells the works of Emanuele Fortunati.

Email: emanuele@emanuelefortunati.it. Every message is read by Emanuele personally.

This policy follows the EU General Data Protection Regulation (GDPR). For cookies and similar technologies, see the Cookie Policy.

2What I collect, why, and for how long

When you buy a piece

Payment happens on Stripe's secure checkout. I receive your name, email, delivery address and, if you give it, your phone number, plus what you bought and what you paid. I never see your card details.

• Why: to fulfil your order, ship it, and handle returns and guarantees. Legal basis: the contract (GDPR art. 6(1)(b)), and legal obligations for invoices and accounting (art. 6(1)(c)).
• How long: order and accounting records are kept for 7 years, as Estonian accounting law requires.

Our conversations after a purchase

With a hand-finished print, and with originals, we talk: by email and on a short video call. What you choose to tell me about why you matched with the piece is what I use to finish it by hand and to write your letter. You decide what to share; nothing is recorded.

• Why: it's part of what you bought (art. 6(1)(b)).
• How long: my notes are kept while we're in touch about your piece, and deleted when you ask, or two years after our last conversation.

When you write to me (Commissions, Therapeutic Spaces, email)

Your name, email and what you write. For Therapeutic Spaces also your centre's name, location, website, team size, mission and the budget you have in mind.

• Why: to reply and, if you wish, to prepare a proposal (art. 6(1)(b), steps before a contract; and art. 6(1)(f), legitimate interest in answering enquiries).
• How long: up to 24 months after our last exchange, unless it becomes an order.

The Find your match quiz

Your answers, the painting you're matched with and, if you add one, your note. If you ask for your result by email: your email address, and your first name if you also join the newsletter.

• Why: to show your match and, if you ask, email it to you as a PDF (art. 6(1)(b)); to understand which questions help people find their piece (art. 6(1)(f)). Your answers are never used for advertising.
• Without analytics consent the run is recorded without any identifier stored in your browser and without device details. With consent, a random identifier links repeat visits; see the Cookie Policy.
• How long: 24 months, then deleted.
• The quiz suggests a painting from your answers. It's a suggestion, not a decision with any legal or similar effect on you.

The newsletter

Only if you tick the box: your email and first name. You confirm by email first (double opt-in).

• Why: to write to you about new work and the studio. Legal basis: your consent (art. 6(1)(a)).
• How long: until you unsubscribe, with the link in every email, or ask me.

Withdrawals, returns and guarantee claims

What you send through "Withdraw from contract here" or by email: name, email, order, and photos if something arrived damaged.

• Why: to process your request and prove it was received (art. 6(1)(c), legal obligation).
• How long: together with the order records.

Browsing the site

• Analytics, only with your consent: pages, time on page, device type, language and time zone, linked by a random identifier. No IP address, name or email. Kept 24 months. Details in the Cookie Policy.
• Without consent: each page view is counted with only the page address and the fact that analytics was declined or not chosen yet. It identifies no one (art. 6(1)(f)).
• Server logs: the website host keeps short technical logs (such as IP address and time of request) for security, as any website does (art. 6(1)(f)).
• The film on The Experience: it plays from Vimeo, in "do not track" mode. Vimeo receives your IP address to stream it.

3Who else handles your data

Only providers I need to run the studio and the site, under data processing agreements, and only for these purposes:

I don't sell your data, rent it, or share it with advertisers.

4Transfers outside the EU

Some providers (Google, Stripe, Formspree, Vimeo) may process data in the United States. Those transfers rely on the EU–US Data Privacy Framework, where the provider is certified, or on the European Commission's Standard Contractual Clauses.

5Your rights

You can ask me, at any time and free of charge, to:

• see the data I hold about you and receive a copy;
• correct it, or delete it where I'm not legally required to keep it;
• restrict or object to its use, including use based on legitimate interest;
• receive it in a portable format;
• withdraw a consent you gave (newsletter, analytics), without affecting what happened before.

Write to emanuele@emanuelefortunati.it. I'll answer within one month. If you believe your data has been mishandled, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to the authority where you live, such as the AEPD in Spain.

6Security

Data is stored with the providers above, protected by access controls; payment data stays with Stripe. Only Emanuele has access to orders, messages and quiz results.

7Age

The site isn't directed at children. To buy, you need to be an adult; if you're under 16, please don't send personal data through the forms or the quiz.

8Changes

If this policy changes, this page is updated and the date at the top changes with it. Significant changes are announced on the site, or by email to people they concern.

See also the Refund and Returns policy and the Cookie Policy.