Privacy notice

Who is responsible for your data

The data controller is Enrico Mollica, an artist based in Brussels, Belgium. For privacy questions or to exercise your rights, contact enrico.mollica1@gmail.com.

This notice covers Enrico Mollica’s portfolio website, its contact form and correspondence initiated through the website.

Information collected and why

• Browsing: the hosting service receives technical information, including your IP address, requested page, date and time and browser information, to deliver pages, diagnose errors and protect the website.
• Enquiries: your name, email and message are used to respond to you. If you select an artwork, its reference, link, medium, dimensions and year are included, together with the form’s language. You can remove the artwork reference before sending.
• Form security: the service provider may process your IP address and other request metadata to detect spam and abuse.

Name, email and message are required to submit the form; without them it cannot be sent. You can browse every artwork without using the form. Please avoid sensitive information or unnecessary personal information about others. The website does not enrol you in newsletters, profile you or make automated decisions with legal or similarly significant effects.

Legal bases

Enquiries about a possible purchase or agreement are processed to take steps at your request before entering into a contract (GDPR Article 6(1)(b)). General correspondence, website operation and security rely on the legitimate interests of responding to messages and providing a secure service (Article 6(1)(f)), taking your rights into account. Any statutory record-keeping obligations rely on Article 6(1)(c).

Sending an enquiry does not require or constitute consent to marketing.

Service providers and recipients

The website is hosted by Vercel. The form sends information directly to Web3Forms, operated by Web3Creative, which processes it on the controller’s behalf and forwards the enquiry to his email inbox. Messages may also be processed by the email provider and people authorised to handle correspondence. Messages are not published on the website.

Web3Forms uses sub-processors for infrastructure, email delivery and spam prevention; anti-spam providers may receive IP and email addresses. Details: Web3Forms privacy policy, processing agreement and sub-processors, Vercel privacy notice.

International transfers

Providers may process information outside the European Economic Area. Web3Creative operates from India; Vercel and sub-processors use international infrastructure, including in the United States. Their agreements describe applicable safeguards, including standard contractual clauses: Web3Forms DPA and Vercel DPA. You can ask the controller for information or a copy of the relevant safeguards.

Retention

Correspondence is kept for as long as needed to handle your enquiry and its follow-up. The criterion is completion of the conversation and the absence of further documented needs, such as an ongoing agreement, legal record-keeping obligations or the establishment or defence of a legal claim. Email inbox messages and any contractual records are separate from copies held by the form provider.

Web3Forms states that submissions are retained for up to three years, unless deleted earlier or a shorter plan-specific period applies. Dashboard visibility does not necessarily mean the underlying data has been deleted. Technical logs follow the providers’ retention periods. For deletion requests, contact enrico.mollica1@gmail.com.

Your rights

Where the GDPR applies, you can request access, correction, deletion, restriction and portability of your data. You may object to processing based on legitimate interests for reasons relating to your situation. Write to enrico.mollica1@gmail.com: you will normally receive a response within one month; if an extension is necessary, you will be told why and how long it will take. A proportionate identity check may be needed.

You can lodge a complaint with the Belgian Data Protection Authority or the competent authority where you normally live, work or where the alleged infringement occurred.

Cookies and external links

See the cookies page for the technologies used. Instagram is an ordinary link: this website embeds no Meta feeds or pixels. External websites have their own privacy notices. Changes to this notice will be reflected in the date at the top of this page.