Legal

Privacy Policy

Last updated 19 September 2026

This page explains what happens to your personal data when you use nikolov-art.com. It is written to be read, not to be survived.

The short version: this website sets no cookies, runs no analytics and contains no advertising or tracking scripts. The only personal data collected is what you type into one of the two forms yourself.

Who is responsible for your data

The data controller is Ivailo Nikolov, an artist based in Bulgaria, acting as a private individual.

You can reach me at [email protected] for any question about your data, including all the requests described further down this page.

What is collected, and why

There are exactly two places on this site where personal data is collected, and in both cases you enter it yourself.

The contact form collects your first name, last name, email address and the message you write. It is used for one purpose: to answer you.
The collectors' list collects your email address only. It is used to send occasional updates about new paintings, studio news and availability.

Nothing else is collected. There is no account to create, no profile built about you, and no data bought from or sold to anyone.

The legal basis

Both forms rely on your consent, which you give by ticking the box before you send the form. Consent is freely given and you may withdraw it at any time — see below.

Who else sees it

Two service providers are involved in delivering this website, and they process data strictly on my instructions:

Formspree receives and forwards what you submit through the forms. Formspree operates from the United States, and the transfer relies on the European Commission's Standard Contractual Clauses.
Cloudflare hosts the site and delivers its pages. As part of normal hosting, server logs may briefly record technical information such as an IP address; these logs are not used to identify or profile visitors.

Your data is never sold, rented or shared for advertising.

How long it is kept

Enquiries are kept for as long as the conversation is useful — typically up to two years — and then deleted. Email addresses on the collectors' list are kept until you unsubscribe or ask me to remove them.

Cookies and tracking

This site sets no cookies and stores nothing in your browser. There is no Google Analytics, no Meta pixel and no third-party tracking of any kind. That is why you were not greeted by a cookie banner.

Your rights

Under the GDPR you may ask me to:

tell you what data about you I hold, and give you a copy of it;
correct anything that is wrong;
delete your data entirely;
restrict or object to how it is used;
withdraw your consent, at any time and without giving a reason.

Write to [email protected] and I will act on it within one month. Unsubscribing from the collectors' list also works through the link in any email I send.

If you are not satisfied

You have the right to complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), at cpdp.bg.

Children

This site is not directed at children and I do not knowingly collect data from anyone under 16.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. Nothing already collected is ever repurposed without asking you first.