Gallery & Design Calpe – https://gallerycalpe.art/
Last updated: 20.09.2026
1. Who we are
This Privacy Policy (“Policy”) describes what personal data the website Gallery & Design Calpe (the “Website”, “we”) collects and processes, available at https://gallerycalpe.art/, in accordance with:
- Regulation (EU) 2016/679 (GDPR, General Data Protection Regulation);
- Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD);
- Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), regarding cookies.
Data Controller:
- Name/project: Gallery & Design Calpe
- Website: https://gallerycalpe.art/
- Contact email: gallerycalpe@gmail.com
If you have any questions about the processing of your data, you can contact us at the email above.
2. What data we collect and why
2.1. Technical data and hosting logs
Our Website runs on the WordPress CMS and is hosted by BlumHost (https://blumhost.net/). Like any web server, the hosting provider automatically logs technical data about requests to the server, including your IP address, date and time of access, requested URL, and browser type. This is a standard technical function necessary for the operation, security, and protection of the Website against abuse (DDoS attacks, hacking, etc.).
- Purpose: ensuring the operation and security of the Website.
- Legal basis: legitimate interest (art. 6.1.f GDPR) — ensuring the security and technical stability of the service.
- Retention period: determined by BlumHost’s hosting policy (typically logs are kept for a limited period for security purposes).
- Recipient: BlumHost, as the hosting provider, acts as a data processor on our behalf.
2.2. News via WhatsApp Community
We do not collect email addresses for a newsletter. Instead, visitors who want to receive news from the gallery (exhibitions, new artists, events, classes) can join our WhatsApp Community via a link/button on the Website.
Joining the Community is entirely voluntary and takes place within the WhatsApp application, owned by Meta Platforms, Inc. By joining, you share your phone number and profile information as visible to other Community members, according to WhatsApp’s own settings and privacy policy.
- Purpose: sending news about the gallery, exhibitions, artists, and classes to members who have voluntarily joined the Community.
- Legal basis: your explicit action of joining the Community (art. 6.1.a GDPR, consent given via WhatsApp).
- Data processed: processed within WhatsApp, according to WhatsApp/Meta’s own privacy policy: https://www.whatsapp.com/legal/privacy-policy. We do not separately store or export the phone numbers or messages of Community members outside WhatsApp.
- Your rights: you can leave the Community at any time directly within WhatsApp. We do not use your Community membership or phone number for any purpose other than sharing gallery news within the Community.
2.3. Contact via email and WhatsApp
The Website provides a contact email gallerycalpe@gmail.com and a link (deep link) to WhatsApp for getting in touch with us directly (separate from the WhatsApp Community described in 2.2).
- If you write to us by email, your message and email address are processed through the Gmail (Google) mail service. Please note that Google LLC may process this data on servers located outside the EEA under the EU-US Data Privacy Framework.
- If you write to us via WhatsApp, the conversation takes place directly within the WhatsApp application, owned by Meta Platforms, Inc. The processing of your data in this case is governed by WhatsApp/Meta’s own privacy policy: https://www.whatsapp.com/legal/privacy-policy.
- Purpose: responding to your inquiry.
- Legal basis: taking steps at your request prior to entering into a contract / legitimate interest in maintaining communication (art. 6.1.b, 6.1.f GDPR).
- Retention period: correspondence is kept only as long as necessary to resolve your inquiry, unless a longer period is required by law.
2.4. Jetpack plugin and Jetpack Stats
The Website uses the Jetpack plugin (developed by Automattic Inc.), which provides a range of technical WordPress features (including security, optimization, and statistics).
We use the Jetpack Stats module to understand how visitors use the Website (e.g., which pages are viewed, general traffic patterns), so that we can improve it over time. This module uses cookies and may process technical data such as your IP address on Automattic’s servers.
- Purpose: statistical analysis of Website usage.
- Legal basis: your consent (art. 6.1.a GDPR), given via the cookie consent banner. You can withdraw your consent at any time by changing your cookie preferences.
- Recipient: Automattic Inc., acting as a data processor. Automattic’s privacy policy is available here: https://automattic.com/privacy/.
- Server location: may include servers outside the EEA.
Other Jetpack modules not related to statistics (e.g., security, technical optimization) are strictly necessary for the operation of the Website and do not require consent.
3. Cookies
The Website uses the following types of cookies:
- Strictly necessary cookies: required for the basic technical operation of the Website (e.g., security, technical settings). These do not require your consent and cannot be disabled.
- Statistics cookies (Jetpack Stats): used only with your consent, to help us understand how the Website is used. See section 2.4 for details.
When you first visit the Website, you will see a cookie consent banner where you can accept or decline statistics cookies. You can change your cookie preferences at any time through the cookie settings available on the Website.
We do not use cookies for advertising or third-party marketing purposes.
4. Who we share your data with
We do not sell or share your personal data with third parties for marketing or commercial purposes.
Data may be processed by the following recipients, acting as processors in the course of providing technical services:
| Recipient | Role | Type of data | Server location |
|---|---|---|---|
| BlumHost (hosting) | Processor | Technical logs, IP address | as per BlumHost’s terms |
| Automattic (Jetpack, incl. Stats) | Processor | Technical data, statistics cookies | may include servers outside the EEA |
| Google (Gmail) | Processor | Email correspondence | may include servers outside the EEA (under the EU-US DPF) |
| Meta (WhatsApp) | Separate controller | WhatsApp Community membership; direct message correspondence | as per WhatsApp/Meta’s policy |
We do not disclose data to any other third parties, except where required by law (e.g., upon request from competent authorities).
5. How long we retain data
- WhatsApp Community membership: for as long as you remain a member; you can leave the Community at any time directly within WhatsApp.
- Hosting technical logs: as per BlumHost’s retention policy, typically a limited period for security purposes.
- Statistics cookies (Jetpack Stats): as per Automattic’s retention policy; see https://automattic.com/privacy/.
- Email/WhatsApp correspondence: no longer than necessary to respond to your inquiry, unless a longer period is required by law.
6. Your rights
Under the GDPR and LOPDGDD, you have the right to:
- access your personal data;
- rectify inaccurate data;
- erasure (“the right to be forgotten”);
- restrict processing;
- object to processing;
- data portability;
- withdraw consent at any time (e.g., by leaving the WhatsApp Community, or changing your cookie preferences), without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, including requesting the deletion of your data, please write to us at:
We will respond to your request within the timeframes established by law (generally no later than one month).
If you believe your rights have been violated, you also have the right to lodge a complaint with the supervisory authority — the Spanish Data Protection Agency (AEPD): https://www.aepd.es
7. Data security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, including relying on the security measures provided by our hosting provider BlumHost and the Jetpack plugin.
However, no method of transmitting data over the internet can be guaranteed to be completely secure, and we cannot guarantee absolute security.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example when adding new features to the Website (forms, analytics, cookies). The current version is always available on this page, with the date of the last update indicated.
9. Contact
For any questions regarding the processing of personal data, including requests for data deletion, please contact: