Legal
Privacy Policy
Last updated: 16 June 2026
This Privacy Policy describes how Irina Nesterova ("I", "me", "the artist") collects, uses and protects information that visitors provide when using this website. I am committed to handling your personal data responsibly and in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection law.
1. Data controller
- Name
- Irina Nesterova
- Country
- Finland
- irinesart@gmail.com
- Phone
- +358 40 723 8068
2. What personal data I collect
This website collects only the information you actively provide.
Contact form
When you send a message through the contact form, I receive your name, email address, the subject of your message, and its content. This information is used solely to respond to your enquiry.
Website analytics (planned)
In the future I intend to use Google Analytics 4 to understand how visitors navigate the site. This service may collect anonymised usage data such as pages visited, time spent and device type. It will only activate after you give explicit consent.
Cookies
This website uses cookies to remember your consent preferences. Full details are provided in the Cookie Policy.
3. Purpose and legal basis for processing
| Purpose | Data | Legal basis |
|---|---|---|
| Responding to contact form enquiries | Name, email, message | Legitimate interest (Art. 6(1)(f) GDPR) |
| Storing cookie preferences | Consent record | Legal obligation (Art. 6(1)(c) GDPR) |
| Website analytics (future) | Usage data | Consent (Art. 6(1)(a) GDPR) |
| Advertising (future) | Usage data | Consent (Art. 6(1)(a) GDPR) |
4. Data retention
Contact enquiries are retained only for as long as necessary to respond and follow up appropriately. Emails are stored within my personal email account and are not shared with third parties. Cookie consent preferences are stored in your browser and can be deleted at any time by clearing your browser data or visiting the Cookie Policy page.
5. Third-party services
Hosting — Vercel
This website is hosted by Vercel Inc. (USA). Vercel may process technical data such as IP addresses and server request logs in order to provide the hosting service. Vercel participates in the EU–US Data Privacy Framework and offers Standard Contractual Clauses for GDPR-compliant data transfers.
Future services
When analytics or advertising services are added (such as Google Analytics 4 or Google Ads), they will only load after you give explicit consent through the cookie preferences panel. This policy will be updated to describe each service at that time.
6. Your rights under GDPR
As a person whose data I process, you have the following rights:
- Right of accessYou can ask what personal data I hold about you.
- Right to rectificationYou can ask me to correct inaccurate data.
- Right to erasureYou can ask me to delete your personal data.
- Right to restrictionYou can ask me to limit how I use your data.
- Right to data portabilityYou can request your data in a structured, machine-readable format.
- Right to objectYou can object to processing based on legitimate interest.
- Right to withdraw consentWhere processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
7. How to exercise your rights
To exercise any of the rights listed above, or to request deletion of your personal data, please contact me directly:
Email: irinesart@gmail.com
Phone: +358 40 723 8068
I will respond to requests within 30 days. If you are not satisfied with my response, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
PO Box 800, FI-00531 Helsinki, Finland
tietosuoja.fi
8. Changes to this policy
This policy may be updated when new services are added or when the legal landscape changes. The date at the top of the page indicates when it was last revised. Significant changes will be communicated via the cookie consent banner.