PRIVACY & COOKIE POLICY — DANIEL SALVI ART

Last updated: 21 October 2026

 

 

1) Data Controller

 

Daniel Salvi – Branding & Design Consulting

Viale Giovanni XXIII n.21, 20014 Nerviano (MI), Italy

P. IVA 09669920960

Contact: segreteria@danielsalvi.com

 

 

2) Scope

 

This Policy explains how Daniel Salvi Art collects and processes personal data through its website, forms, communications, and online sales, including when third-party services (listed below) are used.

 

 

3) Data we collect

 

We collect data you provide directly and data collected automatically.

 

 

A) Data you provide (via forms, email, or WhatsApp)

 

• Identity & contact: first name, last name, email, phone/WhatsApp number.

• Contextual details (when requested): city/country, gallery name (only when relevant), notes/messages you send.

• Consents & preferences: acceptance of Terms & Conditions, marketing preferences, communication preferences.

• Purchase & fulfilment: billing/shipping details (when needed), order details, invoices, customer support history.

 

Mandatory fields: acceptance of Terms & Conditions; plus selected fields such as name, email, and gallery name only when a specific request requires them.

 

 

B) Data collected automatically (via website & embedded services)

 

• Device & usage data: IP address (where applicable), browser type, device identifiers, pages viewed, referrers, approximate location (derived), timestamps, interactions with content (where enabled).

• Cookies & similar technologies: essential cookies and, where enabled, analytics/advertising cookies (see Cookie Policy section).

 

 

4) Why we use your data (purposes)

 

• Provide requested services, respond to enquiries, and manage your requests.

• Send operational messages (e.g., confirmations, access emails, purchase emails, support).

• Process orders and payments, prevent fraud, and meet legal/accounting obligations.

• Improve website performance, measure traffic, and understand content engagement.

• Run advertising/retargeting campaigns (only where configured and subject to your settings/consent, where required).

• Maintain a curated communications list for Daniel Salvi Art (email now; WhatsApp may be enabled later).

 

 

5) Legal bases (GDPR)

 

We process personal data under one or more of the following bases:

 

• Contract / pre-contractual steps: to deliver what you request or purchase.

• Legal obligation: tax, accounting, compliance.

• Legitimate interest: website security, fraud prevention, basic analytics, service improvement, curated brand communications (balanced against your rights).

• Consent: where required (e.g., certain cookies/trackers, marketing in some jurisdictions).

 

 

6) Communications (Email & WhatsApp)

 

 

Email (Mailchimp)

 

We send email communications via Mailchimp. You can opt out anytime using the unsubscribe link in any email. 

 

 

WhatsApp (optional / future use)

 

If WhatsApp communications are enabled, messages will be handled via WhatsApp / Meta channels, and your phone number may be processed to deliver messages you request and to manage your communication preferences.

 

 

7) Payments & checkout

 

Sales may be processed through:

 

• Wix Payments (where available) and/or

• Stripe (payment processing)

 

Payment details are handled by the payment provider(s). We receive confirmation and transactional records needed for fulfilment, accounting, and support.

 

 

8) Sharing of data (processors)

 

We do not sell your personal data. We may share data with trusted providers strictly to run Daniel Salvi Art services, including:

 

• Wix (website hosting, forms, ecommerce) 

• Mailchimp (email delivery, list management) 

• Wix Payments / Stripe (payments) 

• Google Analytics / Google Ads tools (analytics/measurement/ads where enabled) 

• Meta Ads / Meta Pixel (ads/measurement where enabled) 

• YouTube (video embeds, where used)

• Spotify (audio/streaming embeds, where used) 

 

We may disclose data if required by law, court order, or to protect rights, security, and integrity of users and services.

 

 

9) International transfers

 

Some providers may process data outside the EEA/UK. Where applicable, transfers are protected using recognized legal mechanisms (e.g., Standard Contractual Clauses) and provider safeguards, as described in their policies.

 

 

10) Data retention

 

We keep data only for as long as needed:

 

• Enquiries & list data: until you unsubscribe/request deletion, or the data is no longer necessary.

• Order & accounting data: for the period required by law (tax/accounting).

• Technical logs: kept for security and diagnostic purposes for limited periods.

 

 

11) Your rights (GDPR)

 

You can request:

 

• access, rectification, deletion, restriction, portability

• objection to processing (including marketing)

• withdrawal of consent (where processing is based on consent)

• complaint to your local data protection authority

 

Requests: segreteria@danielsalvi.com

 

 

12) Security

 

We apply reasonable technical and organizational measures to protect data (access controls, minimized access, secured providers). No method is 100% secure; if a relevant breach occurs, notifications will follow legal requirements.

 

 

 

 

COOKIE POLICY (Website + Embeds)

 

 

13) What cookies are

 

Cookies and similar technologies are small files used to enable core website features, remember preferences, measure performance, and (where enabled) support advertising/retargeting.

 

 

14) Categories of cookies we may use

 

• Strictly necessary: site functionality, security, checkout, forms.

• Analytics: aggregated measurement (e.g., Google Analytics), to improve user experience. 

• Advertising/measurement (where enabled): Meta/Google tags to measure campaign performance and build audiences. 

• Embedded media cookies: video/audio providers may set cookies when you interact with embedded content:

   

  • YouTube embeds

  • Spotify embeds 

 

 

15) Managing cookies

 

You can manage cookies through:

 

• your browser settings

• cookie banner/preferences (where implemented on the site) 

• third-party opt-out tools listed below

 

 

16) THIRD-PARTY POLICIES & OPT-OUT LINKS (OFFICIAL)

 

WIX — PRIVACY POLICY

https://www.wix.com/about/privacy

 

WIX — COOKIES ON YOUR WIX SITE (HELP)

https://support.wix.com/en/article/cookies-and-your-wix-site

 

WIX — ABOUT PRIVACY & COOKIES (HELP)

https://support.wix.com/en/article/about-privacy-cookies

 

MAILCHIMP — LEGAL HUB

https://mailchimp.com/legal/

 

MAILCHIMP — PRIVACY RIGHTS

https://mailchimp.com/about/privacy-rights/

(EMAIL OPT-OUT) Use the “unsubscribe” link in any email sent via Mailchimp.

 

WIX PAYMENTS — TERMS OF PAYMENTS (REFERENCE)

https://www.wix.com/about/terms-of-payments

 

STRIPE — PRIVACY POLICY https://stripe.com/privacy

 

GOOGLE — ADVERTISING & COOKIES (PRIVACY & TERMS)

https://policies.google.com/technologies/ads

 

GOOGLE — MY AD CENTER (PERSONALIZED ADS CONTROLS)

https://myadcenter.google.com/

 

GOOGLE — ADS SETTINGS (ACCOUNT-BASED CONTROLS)

https://adssettings.google.com/u/0/authenticated

 

GOOGLE ANALYTICS — PRIVACY (GOOGLE POLICIES)

https://policies.google.com/privacy

 

GOOGLE ANALYTICS — OPT-OUT BROWSER ADD-ON

https://tools.google.com/dlpage/gaoptout

 

META (FACEBOOK) — AD PREFERENCES (HELP)

https://www.facebook.com/help/109378269482053

 

META — ADS SETTINGS

https://www.facebook.com/ads/settings

 

META — AD PREFERENCES (PAGE)

https://www.facebook.com/ads/preferences

 

SPOTIFY — PRIVACY POLICY

https://www.spotify.com/legal/privacy-policy/

 

SPOTIFY — COOKIE POLICY (INCLUDES TAILORED ADS CONTROLS)

https://www.spotify.com/legal/cookies-policy/

 

SPOTIFY — PRIVACY SETTINGS HELP

https://support.spotify.com/us/article/data-rights-and-privacy-settings/

 

INDUSTRY-WIDE AD OPT-OUT (US)

https://optout.aboutads.info/

 

NETWORK ADVERTISING INITIATIVE OPT-OUT

https://optout.networkadvertising.org/

​

​

17) GODDESSES & MUSES: VESPERA — ADDITIONAL PRIVACY & COOKIE POLICY

Last updated: 20 October 2026
Website: https://vespera.danielsalvi.art

This section supplements the Daniel Salvi Art Privacy & Cookie Policy and applies specifically to Goddesses & Muses: Vespera, an immersive digital art exhibition.

17.1) Information We Collect

To provide and improve the exhibition experience, we may collect and process the following categories of information:

• Registration information: name, email address, preferred language, audio preferences and registration details. Special admission categories, including PRESS access, may require limited information.

• Technical information: IP address where applicable, approximate geographical location, browser and connection information, access records and technical identifiers.

• Exhibition activity: visits, time spent in the exhibition, virtual rooms explored, artworks viewed, audio guide interactions, catalogue activity and use of interactive features.

• Engagement information: achievements, game results, artwork preferences, digital photography activity, downloads and interactions with exhibition content or external links.

• Enquiries and communications: contact details, professional information, artworks of interest and messages voluntarily submitted through enquiry forms or other communication channels.

• Consent and preferences: privacy choices, newsletter subscriptions and other preferences associated with the exhibition.

Certain information is collected only where the visitor has provided the relevant consent.

17.2) Purposes of Processing

Personal information may be processed for the following purposes:

• Providing access to the exhibition and its services.

• Maintaining functionality, security and continuity of the visitor experience.

• Preserving requested preferences and interactive features.

• Understanding exhibition attendance, audience interests and engagement with artworks.

• Producing statistical reports and evaluating the performance of exhibition content and interactive activities.

• Supporting curatorial research, exhibition development and personalised visitor relations.

• Responding to enquiries, managing artwork acquisition requests and related professional communications.

• Sending newsletters and artistic updates where separately requested by the visitor.

Where consent has been provided, exhibition interactions may be associated with a visitor profile to facilitate engagement analysis and relationship management.

Statistical information may also be used to assess artwork popularity, participation and overall exhibition performance.

Such analysis does not involve solely automated decisions producing legal or similarly significant effects on visitors.

17.3) Legal Bases and Consent

Data processing is carried out in accordance with Article 6 GDPR, relying on the performance of requested services, compliance with legal obligations, legitimate interests or consent, as appropriate.

Essential processing supports access, security and the functionality of requested services.

Optional analytics and engagement profiling are subject to the visitor's consent. Declining consent does not prevent access to the exhibition or its principal interactive features.

Newsletter subscriptions are managed independently and require the applicable separate authorisation. Consent to exhibition analytics does not constitute consent to receive promotional communications.

Visitors may review or modify their preferences through the “Privacy & cookie settings” option within the exhibition.

17.4) Cookies and Interactive Features

Vespera uses essential cookies and browser storage to manage access, security, language preferences and interactive features.

Subject to consent, additional technologies may be used to measure exhibition activity and understand visitor engagement.

Digital photographs created within the exhibition are ordinarily stored locally on the visitor's device. Related interaction data may be processed for statistical purposes where consent has been provided.

Visitors may also access external platforms, including Spotify, Singulart and social networks, which operate under their respective privacy policies.

Vespera does not currently implement Google Analytics, Meta Pixel or third-party advertising pixels.

17.5) Data Sharing, Security and Retention

Personal information is accessible to the Data Controller and specifically authorised personnel, and may be processed through trusted service providers supporting the exhibition.

These include OpenAI/Sites and Cloudflare for digital infrastructure and Mailchimp for newsletter services.

Appropriate technical and organisational measures are adopted to safeguard personal information and restrict unauthorised access.

Where applicable, international data transfers are subject to the requirements and safeguards established under the GDPR.

Personal data are retained only for as long as reasonably necessary to fulfil the purposes described above, including exhibition management, audience analysis, professional correspondence and applicable legal obligations.

Data no longer required are deleted or anonymised, subject to applicable retention requirements.

Personal information is not sold to third parties.

17.6) Your Rights

Visitors may exercise their rights under the GDPR, including access, rectification, erasure, restriction, portability, objection and withdrawal of consent, subject to applicable conditions.

Withdrawal of consent does not affect the lawfulness of processing carried out beforehand.

Requests may be addressed to segreteria@danielsalvi.com.

Visitors also retain the right to lodge a complaint with the competent data protection authority.

For further information, please refer to the general Daniel Salvi Art Privacy & Cookie Policy and the privacy notices of the relevant service providers.

 

18) Changes to this policy

 

We may update this Policy from time to time. The “Last updated” date at the top reflects the latest version.

​

​