Privacy

Member discussions and moderation

If you participate in member discussions, your first name and comments are visible to other members. Only like totals are shared, not a list of who liked a work. The artist can remove comments and withdraw or restore membership access without deleting the account. Comments and likes are stored to provide these interactions (Article 6(1)(b) GDPR). Your full member profile remains private to the artist.

Member profile and audience

Membership requires a verified email address, first name, last name and country. Age is no longer requested. Only the artist can see these details, to understand the audience. No date of birth is collected. Audience analysis is based on legitimate interests (Article 6(1)(f) GDPR); you may object by emailing the artist. Update details in Account; they are retained with your account and do not enrol you in marketing.

Who is responsible for your data?

Bart Van Roy, working under the artist name BAVARO, is the controller of the personal data collected through this portfolio’s contact and newsletter forms and free members’ area. For privacy questions or to exercise your rights, email bavaro.artist@gmail.com.

What information is collected?

The contact form collects your name, email address, country, optional telephone number, subject and message. The newsletter form collects your name, email address, country, optional telephone number and your choice to subscribe. Submission references, submission dates, acknowledgements, newsletter consent records and email-delivery information are also stored.

For a free member account, the authentication service processes your email address, any name you provide, account identifier, email-verification information, and authentication and session records. Passwords and login credentials are handled by the authentication provider, not stored in this portfolio’s contact database. Member details are not visible to other members.

The hosting and email services may process technical information, such as IP addresses, request times, browser information and delivery metadata, to operate the website and protect it from abuse. Please do not include sensitive personal information in your message unless it is necessary for your enquiry.

Providing information through these forms is voluntary. Fields marked with an asterisk are required to submit that form; without them the submission cannot be accepted. You can browse the portfolio without using either form, or contact BAVARO directly by email.

Why is your information used?

Contact enquiries: to receive your question, send an acknowledgement, respond personally and keep a private record of relevant correspondence and potential customer enquiries. This processing is based on the legitimate interest in communicating with people who choose to contact the artist (Article 6(1)(f) GDPR). Where you ask for steps towards a potential agreement, Article 6(1)(b) GDPR may apply to those steps.

Country information: to understand where interest in BAVARO’s work comes from and inform future improvements to the website. This is based on the legitimate interest in understanding the audience (Article 6(1)(f) GDPR). Country information is supplied by you, not inferred from your IP address. You may object to this use.

Newsletters: to send the artwork, exhibition and publication updates you explicitly choose to receive. The legal basis is your consent (Article 6(1)(a) GDPR). A contact enquiry does not subscribe you to the newsletter. You may withdraw newsletter consent at any time without affecting the lawfulness of earlier processing.

Free member accounts: to create and secure the account you request, verify your email and provide access to members-only work in progress and projects. This is based on providing the membership service you request (Article 6(1)(b) GDPR). Joining does not subscribe you to newsletters or authorise marketing.

Website security and delivery records: to prevent abusive submissions, operate the service and check that confirmations are delivered. This is based on the legitimate interest in running a reliable, secure website (Article 6(1)(f) GDPR).

The contact-form acknowledgement of this notice is not consent to marketing. No automated decisions with legal or similarly significant effects are made about you.

Who receives the information?

Contact messages are delivered to the artist’s Gmail inbox, and an acknowledgement is sent to the email address you provide. The website stores the submitted details and email-delivery records privately. Newsletter details are stored separately from contact enquiries.

The services used include Replit for website hosting, database storage, managed authentication powered by Clerk and the connection to Gmail, and Google (Gmail) for email delivery and correspondence. Clerk processes account and login information to operate authentication. Their authorised service providers may process information to provide those services. Personal data may also be disclosed where required by law.

Your contact details are not sold or shared with Lions, KBCArt or other organisations for their marketing simply because they are mentioned on this website. Following an external link takes you to another organisation’s website, whose privacy notice applies there.

International processing

Replit and Google may process information outside the European Economic Area, including in the United States. Replit’s published Data Processing Agreement describes Standard Contractual Clauses for applicable international transfers. Google’s published transfer framework describes adequacy decisions, the EU–U.S. Data Privacy Framework and Standard Contractual Clauses where applicable.

Which safeguards apply depends on the service and its applicable contractual terms. You may contact Bart Van Roy for information about the safeguards relevant to your data and to request a copy where applicable.

Account information may also be processed outside the European Economic Area by the managed authentication service and its providers, subject to their applicable service agreements and transfer safeguards.

• Replit Data Processing Agreement ↗
• Replit Privacy Policy ↗
• Google data-transfer frameworks ↗
• Google Privacy Policy ↗

How long is information kept?

Enquiry and potential-customer records are kept while needed to answer your request or maintain an ongoing, relevant correspondence or customer relationship. When that purpose ends, the records must be deleted or anonymised unless they are still needed to meet a legal obligation or establish, exercise or defend legal claims. The same criteria apply to related email correspondence and delivery records.

Newsletter information is kept while your subscription is active. After you withdraw consent, it must no longer be used to send newsletters. A limited record of consent or withdrawal may be retained where needed to demonstrate compliance or prevent further unwanted messages.

Member account information is kept while the account is active and necessary to provide secure member access. You may manage or request deletion of your account through account settings or by emailing the artist. Limited security records and provider backups may remain where needed under the provider’s retention terms or legal requirements. Deleting a member account does not automatically delete separately submitted enquiries or newsletter subscriptions.

Hosting and email providers manage their own technical logs and backups under their applicable service terms and privacy policies. A request to delete information is handled by the artist; submitting a request does not trigger an automatic deletion of the database or Gmail correspondence.

Your rights and newsletter withdrawal

Subject to the conditions in the GDPR, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing and data portability where applicable. You may object to processing based on legitimate interests, including the use of your country information. You may object to direct marketing at any time.

To unsubscribe, reply to a newsletter or email bavaro.artist@gmail.com with “Unsubscribe”. To exercise another right, email the same address and describe your request. You will not be asked to subscribe or pay a fee to exercise your rights, except where the GDPR permits a fee for manifestly unfounded or excessive requests.

Requests should be answered within one month. Where the GDPR permits an extension because of complexity or the number of requests, you will be informed within that first month. Only information reasonably necessary to verify your identity should be requested.

You also have the right to complain to the Belgian Data Protection Authority, or the competent supervisory authority where you live, work or consider that a breach occurred.

• Belgian Data Protection Authority ↗

Cookies, fonts and changes to this notice

The portfolio application does not add advertising cookies or advertising pixels. Its forms do not require a newsletter or marketing-cookie choice to view the artwork. Technical processing by the hosting infrastructure is described above. Fonts are served with the website rather than requested from Google Fonts when you visit.

The members’ area uses strictly necessary authentication cookies and related browser storage to verify and maintain login sessions and prevent abuse. These are not used to enrol you in marketing. You can browse the public portfolio without joining; blocking necessary authentication storage may prevent login from working.

If optional tracking, embedded services or a new use of your data is introduced, this notice and any consent controls must be updated before that use starts. The date above identifies this version of the notice.

The public website stores your selected language in your browser’s local storage and includes it in internal page links so that your preference is retained. This preference is not used for advertising or to identify you. You can change it using the language selector or remove it by clearing this website’s browser storage.