Last Updated: October 2026
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how vasothoupou.com (“we”, “us”, or “our”) collects, uses, processes, and safeguards your personal information when you visit our website, use our contact form, or communicate with us.
1. Data Controller
The data controller responsible for your personal data is:
The data controller responsible for your personal data is:
- Name: Vaso Thoupou (Visual Artist)
- Email: info@vasothoupou.com
- Website: vasothoupou.com
2. The Data We Collect About You
We only collect the absolute minimum personal data necessary to interact with you and monitor our website’s technical health. This includes:
We only collect the absolute minimum personal data necessary to interact with you and monitor our website’s technical health. This includes:
- Identity & Contact Data: Your name and email address, which you voluntarily provide when you fill out our contact form or send us an email directly.
- Technical & Usage Data: Your anonymized IP address, browser type, operating system, referral source, pages visited, and time spent on our website, collected automatically via cookies.
3. How and Why We Use Your Personal Data
We process your personal data based on the following legal grounds under the GDPR:
We process your personal data based on the following legal grounds under the GDPR:
- To respond to your inquiries: We use the contact details you provide to answer your questions about artworks, upcoming exhibitions, or collaborations. (Legal basis: Consent & Legitimate Interest)
- To analyze website performance: We use Google Analytics to track user behavior in an aggregate, non-identifiable form to improve our online portfolio. (Legal basis: Consent via the Cookie Banner)
4. Data Sharing and Third-Party Tools
Your personal data is handled with strict confidentiality. We do not sell, rent, or trade your information with third parties. We only share data with trusted service providers essential for running this website:
Your personal data is handled with strict confidentiality. We do not sell, rent, or trade your information with third parties. We only share data with trusted service providers essential for running this website:
- Hosting Providers: Our website servers store technical logs securely.
- Google Analytics: Anonymized browsing behavior is processed by Google. We have enabled IP Anonymization, ensuring Google truncates your IP address and cannot link it to your true identity.
5. International Data Transfers
Since Google Analytics is a US-based service, some technical usage data may be transferred outside the European Economic Area (EEA). Google ensures compliance with EU data protection standards through Standard Contractual Clauses (SCCs).
Since Google Analytics is a US-based service, some technical usage data may be transferred outside the European Economic Area (EEA). Google ensures compliance with EU data protection standards through Standard Contractual Clauses (SCCs).
6. Data Retention
- Inquiries: Correspondence and data received via the contact form are retained only for as long as necessary to fulfill your request and maintain professional communication.
- Analytics Data: Aggregate, anonymous data collected by Google Analytics is kept according to Google’s standard retention cycles (typically 14 months) and cannot be traced back to you.
7. Your Legal Rights (Under the GDPR)
As a resident of the European Union, you hold the following rights regarding your data:
As a resident of the European Union, you hold the following rights regarding your data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request the correction of any inaccurate information.
- Right to Erasure (Right to be Forgotten): Request that we permanently delete your personal data.
- Right to Withdraw Consent: Withdraw your consent for data processing at any time (e.g., by asking us to delete your emails).
To exercise any of these rights, please contact us at info@vasothoupou.com. We will respond to your request within 30 days free of charge.
8. Security of Your Data
We implement appropriate technical and organizational security measures (including SSL encryption) to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure.
We implement appropriate technical and organizational security measures (including SSL encryption) to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted directly on this page.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted directly on this page.