Privacy policy

Controller: Luyten Gallery, S.L. (Tax ID B21619937), C/ Arnald de Solsona 6, 1.º, 25005 Lleida, Spain · info@artdebutprice.com.

If you are an artist (you have an account)

• What data: your email; your artist name, Instagram username, currency, language and time zone; the “I want it” destinations you set (WhatsApp number, email or link to your shop); your debuts (photos, title, details, prices, dates, accepted commitment) and their statistics; if you create one, your password (stored hashed, never in plain text); your pack purchases (Stripe tells us what you bought; card details are kept by Stripe, not by us); and your acceptance of the terms.
• Why and on what basis: to provide the service and handle your purchases (contract); to send you service emails: sign-in code, notices about your debuts (launched, no visits, last hours, ended, taken down), your purchases and your credits (contract); to remind you once a month, early in the month, that you have a free debut (legitimate interest, art. 21.2 of the Spanish LSSI: you can opt out with one click in the email itself or from your account); to invoice and meet tax obligations (legal obligation); to prevent abuse and fraud (legitimate interest).
• What is published: what you put on your debut page (photos, title, details, prices, commitment, artist name and Instagram username) and the “I want it” destinations you choose. That page is not shown in search engines.
• How long: while you have an account. If you delete it, your data, debuts and images are deleted. Invoices are kept as long as the law requires (up to 6 years). Unlaunched drafts are deleted after 30 days.

If you visit a debut page

• We ask you for no data. “I want it” opens your WhatsApp, your email or the artist’s shop: what you send goes straight to the artist, not to us. From then on, the artist handles your data as controller.
• To count visits (one per person per day), apply limits against abuse and record reports, we store a code derived from your IP address (an encrypted digest with a secret key), never the IP itself. Basis: legitimate interest.
• If you report a debut, we store the reason and that code.

Who helps us (processors)

Supabase (database and files, EU, Frankfurt), Vercel (web hosting), Brevo (email delivery, EU), Stripe (payments and invoices) and Google (only if you sign in with Google). Some may process data outside the European Economic Area; when they do, it is with GDPR safeguards (standard contractual clauses or the EU-US Data Privacy Framework). We do not sell data or use it for advertising.

Cookies: only strictly necessary ones. Details in the Cookie policy.

Your rights: access, rectification, erasure, objection, restriction and portability, by writing to info@artdebutprice.com. You can delete your account yourself in “Account”. If you think we have not handled your rights properly, you can complain to the Spanish Data Protection Agency (aepd.es).