Privacy Policy

1. Data controller

The controller responsible for personal data processed through this website is Antti Joronen.

For privacy-related enquiries, please use the contact form and write “Privacy request” in your message.

2. Personal data processed

When you use the contact form, the following data is processed:

• your name;
• your email address;
• the content of your message;
• your IP address and the time of submission for abuse prevention.

The web server may also record technical information such as the IP address, date and time, requested page, browser type and similar connection data.

The name, email address and message are required in order to submit the contact form. Without this information, the message cannot be sent.

3. Purposes and legal basis

Personal data is processed in order to:

• reply to enquiries;
• discuss exhibitions, collaborations, commissions or artwork enquiries;
• take steps requested before a possible agreement;
• protect the website and contact form against abuse and spam.

The legal bases are Article 6(1)(b) of the GDPR, where processing is necessary to take steps at your request before a possible agreement, and Article 6(1)(f), the legitimate interest in responding to enquiries and protecting the website against abuse.

The website does not use automated decision-making or profiling.

4. Service providers and data transfers

Contact form messages are delivered using Resend, an email delivery service operated by Plus Five Five, Inc. The name, email address and message content are transmitted to Resend for this purpose.

Resend may process personal data in the United States. Transfers are covered by the European Commission’s Standard Contractual Clauses under Resend’s Data Processing Addendum.

More information is available in Resend’s Privacy Policy and Data Processing Addendum.

Technical data may also be processed by service providers required for hosting, maintaining and securing the website.

5. Retention

Correspondence is retained only for as long as necessary to reply and manage the matter concerned, unless a longer period is required by law.

IP addresses recorded specifically for contact-form rate limiting are deleted automatically after approximately one hour. Web-server access and error logs are retained for up to 14 days for security, troubleshooting and maintenance.

6. Browser storage and cookies

The website does not use advertising or analytics cookies.

Essential browser storage is used to remember:

• age confirmation for 12 hours;
• the selected language until the browser data is cleared.

This storage is used only to provide the functions selected by the visitor.

7. Your rights

Subject to the conditions of applicable data protection law, you may request access to, correction or deletion of your personal data, restriction of processing, data portability, or object to processing.

You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland.

8. External links

The website contains a link to Instagram. No data is sent to Instagram merely by displaying the link. When you follow it, the privacy practices of Instagram apply.

9. Changes

This Privacy Policy may be updated when the website or its data processing practices change. The current version is published on this page.