Privacy

Who is responsible

The person responsible for your data (the “controller”) is the artist Christiana Karapata, Greece. You can reach me at info@christianakarapata.gr for anything about your data.

What data I process

When you write to me through the contact form: your name, your email address, the subject (optional), your message and the date and time it was sent. You decide what you write, so please do not include sensitive information that is not needed.

When you simply visit the site: your browser sends technical data (IP address, browser and device type, the page requested and the time) to the servers that deliver the site. This is needed to show you the pages and to keep the site secure. I do not use it to identify you, and I do not build profiles.

The site has no user accounts, no payments, no newsletter, no comments and no analytics or advertising tools. Giving me your details through the form is voluntary. Without them I cannot answer you.

Why I use it, and the legal basis

• To read your message and reply to you. Legal basis: my legitimate interest in answering the people who write to me (Article 6(1)(f) GDPR) or, if you ask about buying or commissioning a work, steps taken at your request before a contract (Article 6(1)(b)).
• To deliver the site and keep it secure and working. Legal basis: my legitimate interest in running a safe website (Article 6(1)(f)).

By sending the contact form you confirm that you have read this notice and agree that I use your details to reply to you. I never use them for newsletters or advertising, and I never sell them or pass them on for anyone else’s own use.

How long I keep it

A message and the details that came with it are kept for as long as needed to answer you and to keep a record of our conversation, normally no longer than two years after our last message. If a sale or another agreement follows, I keep what the law requires me to keep (for example for tax records). After that I delete them. Technical data on the servers is kept by the hosting providers for a short period only, according to their own policies.

Cookies and local storage

This website does not use cookies, and it has no tracking, analytics or advertising tools. That is why there is no cookie banner.

To remember your choices, your browser stores two small settings on your own device (local storage): the language you picked and the way you view the works (grid, masonry or list). They are only used to show the site the way you chose, they never leave your device and they are not used to recognise you. You can delete them at any time in your browser settings. The fonts and scripts of the site are served from this site itself, so no other company receives your IP address for them.

Who receives data and where it is processed

I use these services to run the site. They process data only on my behalf and for the purposes above:

• Supabase stores the pictures, the texts of the site and the messages sent through the contact form. They are stored in a data centre in Frankfurt, Germany (EU). Your browser also loads the pictures from Supabase, so it sees your IP address when you visit.
• Vercel hosts the website and sees your IP address and the technical data above when you visit.
• Zoho Mail handles the mailbox of the address above, so it processes the emails you send me or I send you.

Your messages and pictures are stored in the EU (Frankfurt). Some of the providers, however, are companies based outside the European Economic Area, such as in the United States, or may process data there (for example Vercel, which delivers the site through servers around the world, and Zoho). In that case the transfer relies on the safeguards the law provides, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. I do not pass your data to anyone else, unless the law obliges me to.

Your rights

Under the GDPR you have the right to access the data I hold about you, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable form, and to withdraw your agreement at any time (this does not affect what was done before). Write to info@christianakarapata.gr and I will answer within one month.

You also have the right to complain to the supervisory authority: the Hellenic Data Protection Authority (dpa.gr), or the authority of the country where you live.

Copyright and links

All artworks, photographs and texts on this site are © Christiana Karapata. They may not be copied, shared or used commercially without my written permission.

The Instagram link leads to Instagram, which has its own privacy policy. I am not responsible for other websites.