Legal

Privacy policy

vorarosa.com is operated by Dima Myriyevskyy, tax ID NIE X9278375Z, Calle de Sant Josep 23, 43540 Sant Carles de la Rapita, Tarragona, Spain, the data controller for the personal data described here. For any privacy request, contact contact@vorarosa.com. This page explains, in plain words, what data this site touches, why, and on what legal basis.

Orders and payments

Payments are processed entirely by Stripe on Stripe’s own secure pages. We never see or store your card details. When you place an order, Stripe shares with us the information needed to fulfil it: your name, shipping address, email and what you bought. We use it only to produce and ship your order and to answer your questions about it.

Analytics

We use Google Analytics 4 to understand which posters people love, and we run it in Google’s consent mode. What that means in practice:

If you accept the banner on your first visit, Google Analytics sets a cookie and collects aggregate usage data: pages seen, approximate location by country, device type.
If you decline, or simply ignore the banner, no cookie is set and no identifier is created. We still receive an anonymous signal that a page was viewed, with no way to recognise you, link your visits together or follow you to another site.

Advertising signals stay switched off in both cases: we do not run ads, we do not build advertising audiences, and we do not share analytics data for advertising. You can change your mind at any time by clearing this site’s data in your browser, which brings the banner back.

If you subscribe to the newsletter, we store your email address (nothing else) to send you occasional news about new art and editions. Every email includes a way to unsubscribe, and you can ask us to delete your address at any time at contact@vorarosa.com.

The shopping cart

Your cart is stored only in your own browser (localStorage). It never leaves your device until you decide to check out.

Legal bases and how long we keep data

We process your order data to perform the contract (fulfilling and shipping your purchase) and to meet our legal and tax obligations; order and invoicing records are kept for the period required by law. We process your newsletter email on the basis of your consent, until you unsubscribe. The analytics cookie is set only with your consent. The anonymous, cookie-free page counts described above involve no identifier and no access to information stored on your device; we rely on our legitimate interest in knowing how many people visit the shop.

Who we share data with

We share the minimum necessary with the providers that make the shop work: Stripe (payments), our print-and-fulfilment partner (to produce and ship your order), Cloudflare (hosting and security) and Google Analytics. Google receives an anonymous page-view signal from every visit; it receives cookie-based, per-visitor data only if you accepted the banner. We never sell your data.

Your rights

Under the GDPR you can ask us to access, correct, delete, port or restrict the personal data we hold about you (order details or newsletter address), and to withdraw consent at any time. Write to contact@vorarosa.com and we will handle it personally. You also have the right to lodge a complaint with your data-protection authority (in Spain, the AEPD, aepd.es).