Privacy Policy
Last Updated: January 24, 2026
1. Introduction
This Privacy Policy describes how Sudin Art ("we," "us," or "our"), operated by Yevhen Sudin, collects, uses, and discloses your Personal Information when you visit or make a purchase from www.sudin.art (the "Site").
We are committed to protecting your privacy and handling your data in an open and transparent manner, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Portuguese data protection laws.
2. Who is the Data Controller?
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases.
A. Order Information (For Customers)
When you buy a Physical Painting or a Digital Sketch, we collect the following to fulfill the contract:
Identity Data: Name and Surname.
Contact Data: Email address (essential for delivering digital files) and Phone number (required by shipping carriers).
Shipping Data: Physical address (Street, City, Postal Code, Country) for delivering physical artworks.
Payment Data: We do not store your full credit card details. Payments are processed via secure third-party gateways (e.g., Stripe, PayPal, or Bank Transfer).
B. Communication Data
If you contact us regarding Mural Services or Commissions, we collect the information you provide in the contact form to respond to your inquiry.
C. Technical Data (Cookies)
Our website, powered by Odoo, automatically collects device information (IP address, web browser, time zone) to ensure the website functions correctly and to load your shopping cart.
4. How We Use Your Personal Information
We use your personal Data for the following purposes:
Fulfillment of Contracts: To process your payment, ship your artwork, or send you the download link for digital sketches.
Customer Service: To communicate with you about your order or commission requests.
Legal Obligations: To comply with Portuguese tax laws (invoicing and accounting).
Legitimate Interests: To screen for potential risk or fraud and to improve and optimize our Site.
5. Sharing Your Personal Information
We do not sell your personal data. However, we share your data with trusted third parties essential to our operations:
Service Providers: We use Odoo to power our online store.
Shipping Companies: For physical orders, we must share your Name, Address, and Phone Number with carriers (e.g., CTT, DHL, FedEx) to deliver the package.
Payment Processors: To securely handle transaction data.
Legal Authorities: If required by law to comply with a subpoena, tax investigation, or other legal processes.
6. International Data Transfers
Since we operate in Madeira (EU), your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA (e.g., if you are a customer in the USA or UK), we ensure it is protected by appropriate safeguards compliant with GDPR.
7. Data Retention
We retain your Order Information for our records to comply with tax and accounting laws (typically 10 years in Portugal for invoices) unless and until you ask us to delete this information, subject to legal retention requirements.
8. Your Rights (GDPR)
If you are a resident of the EEA, you have the right to:
Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate data.
Erasure: Request that we delete your personal data ("Right to be Forgotten"), provided we are not legally required to keep it (e.g., for tax purposes).
Object: Object to the processing of your data.
To exercise these rights, please contact us at fabula.consensual@gmail.com.
9. Digital Products & Copyright
Please note that purchasing a Digital Sketch or Original Painting grants you ownership of the physical or digital copy, but not the intellectual property rights. The copyright remains with the artist, Yevhen Sudin. You may not reproduce the images for commercial use without explicit permission.
10. Updates
We may update this privacy policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons.