Privacy Policy

Last updated: September 4, 2026

1. Data Controller

The controller responsible for the processing of personal data through maxpixart.com is:

Mária Bosnovičová, artist
Slovakia

Email: info@maxpixart.com

For any questions regarding the processing of your personal data or the exercise of your rights, you may contact us using the email address above.

2. Applicable Data Protection Law

Personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Act No. 18/2018 Coll. on Personal Data Protection, and other applicable laws of the Slovak Republic and the European Union.

3. Personal Data We Process

We process personal data only where necessary and for specific purposes.

Contact Form and Direct Inquiries

Data processed:
Name, email address, and any personal information contained in your message.

Purpose:
To respond to your inquiry and communicate with you.

Legal basis:
Our legitimate interest under Article 6(1)(f) GDPR in responding to communications initiated by website visitors and potential clients.

Where your inquiry relates to entering into or performing a contract, processing may also be based on Article 6(1)(b) GDPR.

Retention period:
We normally retain correspondence for as long as necessary to handle your inquiry and, where appropriate, for up to 1 year after the last communication, unless a longer retention period is required by law or necessary for the establishment, exercise, or defence of legal claims.

Newsletter

Data processed:
Email address and, where provided, your name.

Purpose:
To send you news, updates, information about artworks, exhibitions, and other promotional communications relating to Max&Pix art.

Legal basis:
Your consent under Article 6(1)(a) GDPR.

You may withdraw your consent at any time by clicking the unsubscribe link included in our emails or by contacting us.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Retention period:
We process your data for newsletter purposes until you unsubscribe or otherwise withdraw your consent.

4. Service Providers and Recipients of Personal Data

We do not sell or rent your personal data.

We may disclose or make personal data available to service providers that help us operate the website and communicate with visitors.

These currently include:

• WebSupport – website hosting and technical infrastructure
• Mailchimp – newsletter distribution and management

These service providers process personal data only to the extent necessary to provide their services and in accordance with applicable data protection requirements.

Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards required by the GDPR are used, such as an adequacy decision or other legally recognised transfer mechanisms.

5. Server and Technical Data

When you visit the website, certain technical information may be processed automatically by our hosting provider or website infrastructure.

This may include information such as:

• IP address
• browser and device information
• date and time of access
• pages requested
• technical logs and security information

Such information may be processed for the purposes of operating, maintaining, and protecting the security of the website.

The legal basis for this processing is our legitimate interest under Article 6(1)(f) GDPR in ensuring the security and proper functioning of the website.

6. Your Rights

Under the GDPR, depending on the circumstances, you may have the right to:

• Access your personal data and obtain information about how it is processed.
• Rectify inaccurate or incomplete personal data.
• Request erasure of your personal data where the legal requirements are met.
• Request restriction of processing of your personal data.
• Object to processing based on legitimate interests.
• Data portability, where the legal requirements for this right are met.
• Withdraw your consent at any time where processing is based on consent.
• Lodge a complaint with the competent supervisory authority.

In Slovakia, the supervisory authority is:

Office for Personal Data Protection of the Slovak Republic
(Úrad na ochranu osobných údajov Slovenskej republiky)

Website: dataprotection.gov.sk

To exercise your rights, please contact:

info@maxpixart.com

or

maxandpix.art@gmail.com

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example if we change the services or technologies used on the website.

The date of the most recent update will always be displayed at the top of this page.