Privacy & Cookie Policy

Effective Date: August 6, 2026

Data Controller: Delphine Rébois (DR Fine Art)

Location: Sweden

Contact Email: legal@wildatartbydr.com

At DR Fine Art, we value your privacy and are committed to protecting your personal data. This Privacy & Cookie Policy explains how we collect, use, store, and share your personal information when you visit our website, communicate with us, purchase art prints, or request custom pastel commissions.

1. Data Controller Identification

Under the EU General Data Protection Regulation (GDPR), the data controller responsible for processing your personal information is:

DR Fine Art (Delphine Rébois)

Registered for business and tax in Sweden (Innehar F-skattsedel)

Momsregistreringsnummer / VAT ID: SE760203916101

Contact: legal@wildatartbydr.com

2. Personal Data We Collect & Why

We collect and process personal data only when necessary to fulfill our contract with you, comply with legal duties, or improve your website experience:

Customer Purchases & Orders: When you place an order or request a custom commission, we collect your name, billing address, shipping address, email address, phone number, and order details. Purpose: To process, fulfill, and deliver your order, issue receipts, and communicate about your shipment.
Payment Processing: When you pay at checkout, your payment card details are collected and processed directly by our secure third-party payment gateway. We never store or have direct access to your full credit card details.
Inquiries & Custom Requests: When you fill out our contact or product request forms, we collect your name, email, and message details to respond to your inquiry.
Language & Translation Preferences: To display our website in your preferred language, standard network information (such as your IP address and language header) is processed.
Website Analytics & Functional Data: Information about how you interact with our website, including pages visited, browser type, and device information.

3. Legal Grounds for Processing

We process your data under the following legal bases under GDPR:

Contractual Performance (Art. 6(1)(b)): Necessary to complete transactions, deliver prints, and fulfill custom commission agreements.
Legal Obligation (Art. 6(1)(c)): Retaining invoice records to comply with Swedish tax law and the Accounting Act (Bokföringslagen).
Legitimate Interests (Art. 6(1)(f)): Operating a secure, functional website and responding to customer queries.
Consent (Art. 6(1)(a)): For the placement of non-essential cookies via our website banner.

4. Third-Party Service Providers (Data Processors)

To operate our shop and deliver high-quality services, we share necessary data with trusted third-party service providers who process information on our behalf:

Squarespace (Website & Shop Platform): Hosts our website, shop infrastructure, and manages secure checkout processes.
Stripe (Payment Processor): Encrypts and processes all credit card and digital wallet transactions securely.
Gelato (Print-on-Demand Fulfillment): Receives necessary shipping details (recipient name, address, phone number, and item specs) strictly to manufacture and deliver your fine art prints and canvas orders.
Weglot (Translation Service): Processes temporary request data to deliver dynamic translations of site content without storing personal customer histories.
Easyship (Shipping & Logistics Platform): Receives customer shipping details (name, delivery address, phone number, and order dimensions) strictly to calculate shipping rates, generate customs declarations, create carrier shipping labels, and send tracking notifications.

We ensure all third-party processors comply with strict GDPR standards and data protection agreements.

5. Data Retention

Order & Accounting Records: Kept for 7 years following the end of the calendar year to comply with Swedish accounting laws (Bokföringslagen).
Commission Communication: Emails and project files related to custom artwork are retained for reference until project completion and guarantee periods expire.
General Inquiries: Deleted once your query has been fully resolved, unless required for ongoing order records.

6. Cookie Policy

Our website uses cookies (small text files placed on your device) to ensure website functionality, security, and performance.

Types of Cookies We Use:

Essential / Strict Functional Cookies (Always Active):
Provided by Squarespace, Stripe, and Weglot. These are strictly necessary for core features such as keeping items in your shopping cart, processing payments securely, preventing fraudulent checkouts, and remembering your chosen site language.
Analytics & Performance Cookies (Optional):
Help us understand how visitors navigate and interact with our website. These cookies collect anonymous aggregate data.

Managing Your Preferences

When you first visit our site, a cookie consent banner allows you to accept or decline non-essential cookies. You can update or revoke your consent at any time by clearing your browser cookies or adjusting your browser settings.

7. Your GDPR Rights

As a resident of the European Union, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request corrections to inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request that we delete your personal data (excluding records we are legally required to retain under Swedish accounting laws).
Right to Restrict or Object: Limit or object to how we process your data under certain conditions.
Right to Data Portability: Request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at legal@wildatartbydr.com.

If you believe your data has been handled improperly, you also have the right to submit a complaint to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten - IMY) at imy.se.

8. Updates to This Policy

We may update this policy occasionally to reflect changes in our operations, technology, or legal duties. The latest version will always be published on this page with the updated effective date.