A

Privacy Policy

Last updated: 11 April 2026
www.ahmedalosaimi.com

Document Structure Clause:
This official Privacy Policy is structurally organized into 11 comprehensive sections, established from Section 1: Data Controller through to Section 11: Changes to this Policy, constituting the full regulatory framework for this digital domain.

1. Data Controller

Your privacy is important to us. This Privacy Policy covers what we collect and how we use, disclose, transfer, and store your information. We handle your data responsibly and in full compliance with GDPR, Spanish Law (LOPDGDD), and the Law on Information Society Services (LSSI-CE).

    The person responsible within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is the

  • Owner: AHMED ALOSAIMI
  • NIE: Y8192260L
  • Address: Poblenou, 08018 Barcelona, Spain. (Full address available upon request for exercising data rights).
  • Email: info@ahmedalosaimi.com

This means we are legally responsible for protecting your personal data and using it only for the purposes described here.

A. Data Protection Officer

You can contact our data protection officer directly for any privacy-related inquiries:

  • Name: AHMED ALOSAIMI
  • Address: Poblenou, 08018 Barcelona, Spain. (Full address available upon request for exercising data rights).
  • Email: info@ahmedalosaimi.com

2. Information We Collect

We only collect the information necessary to provide you with a smooth shopping experience, process orders, and comply with legal obligations:

  • Personal Identification: Name, email, phone, shipping and billing addresses. This allows us to communicate and deliver your services, products, or artworks securely.
  • Purchase Details: Items purchased, order history, and payment records, used to manage orders efficiently.
  • Legal & Tax Data: Information required for invoicing and tax reporting (including NIE where applicable) according to Spanish law.
  • Optional Data: Newsletter subscriptions or feedback voluntarily provided to improve services.

3. Legal Basis for Data Processing

We process your data according to legal bases under GDPR:

  • Contractual necessity: Processing orders and delivering artworks.
  • Consent: For newsletters and marketing communications.
  • Legal obligation: For invoicing, tax reporting, and compliance with Spanish law.
  • Legitimate interest: For website improvements, fraud prevention, and service enhancement.
  • Exceptions (Art. 6.1): In cases where prior consent cannot be obtained for factual reasons, data processing is permitted if allowed by law.
  • Pre-contractual Actions: Legal basis extends to processing required to carry out pre-contractual measures (Art. 6.1.b).

4. How We Use Your Data

  • Order Processing: To process payments and ship artworks securely.
  • Customer Communication: To provide updates, respond to inquiries, and ensure customer satisfaction.
  • Legal Compliance: To meet tax and legal obligations.
  • Service Improvement: Aggregate anonymous data may be used to enhance user experience and website functionality.

5. Data Protection & Security

  • No Third-Party Marketing: Your personal data is never sold or shared for advertising.
  • Trusted Service Providers: Data may be shared only with payment providers (Squarespace Payments, PayPal), hosting and analytics services (Squarespace Analytics), and shipping companies.
  • Encryption & Security: All sensitive information, including payment data, is transmitted using SSL encryption and is securely processed by our payment providers. We do not store full payment card details on our servers.
  • Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Specifically: Transaction & Tax Records: In accordance with the Spanish Commercial Code (Código de Comercio), we store billing and payment information for a period of 6 years. Customer Account & Support: Data is kept as long as you maintain an active account or until you request its deletion. Marketing Data: Information for newsletters is retained until you withdraw your consent. Once these periods expire, your data is securely deleted or anonymized.
  • International Transfers: Some providers may process data outside the EU, including the United States. Standard contractual clauses or equivalent safeguards are used in such cases.
  • Monitoring & Auditing: We perform regular security audits to prevent unauthorized access or breaches.

6. Your Rights

Under the GDPR and the Spanish LOPDGDD, you have the following rights regarding your personal data:

Right to Information & Access (Art. 15 GDPR):

Request a copy of the personal data we hold about you.

Right to Rectification (Art. 16 GDPR):

Update or fix inaccurate or incomplete information.

Right to Erasure / "To be Forgotten" (Art. 17 GDPR):

Request deletion of your data, except where legally required.

Right to Restriction (Art. 18 GDPR):

Request that we limit the processing of your data under certain conditions.

Right to Data Portability (Art. 20 GDPR):

Receive your data in a structured, machine-readable format.

Right to Object (Art. 21 GDPR):

Object to the processing of your data for specific purposes.

Right to Withdraw Consent:

Opt out of newsletters or marketing emails at any time.

How to Exercise Your Rights: To exercise any of the rights described above, please email info@ahmedalosaimi.com. We will respond within one month (30 days).

Right to Complain: You have the right to file a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

7. Cookies & Tracking

We use cookies and similar technologies to ensure our website functions properly, analyze traffic, and personalize your experience. We categorize these as follows:

  • Essential Cookies: Necessary for the website to function (e.g., secure login, shopping cart). These do not require prior consent.
  • Analytics Cookies: We use tools like Squarespace Analytics to understand how visitors interact with the site. These are used only with your consent.
  • Marketing Cookies: Used to track the effectiveness of our advertising, only if you have opted-in.

Managing Preferences: You can manage, block, or delete cookies through your browser settings or our dedicated Cookie Policy. For more details on how we protect your data during international transfers (e.g., to servers outside the EU), we ensure Standard Contractual Clauses (SCCs) are in place with our service providers.

8. External Links

Our website may contain links to third-party websites (such as payment processors or social media platforms). These external sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content, privacy practices, or activities of these linked websites. Nonetheless, we seek to protect the integrity of our website and welcome any feedback about these sites.

9. Minors

Our services are not aimed at children under 14 years of age (the legal age in Spain for data consent). We do not knowingly collect information from children under this age. If you have not reached the age limit, please do not use our services or provide us with any personal information. If you are a parent or guardian and discover that your child has provided us with personal data, please contact us at info@ahmedalosaimi.com to request the deletion of such information.

10. Data Security

Protecting your information is our priority. We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, or misuse. Our website is hosted on secure servers (Squarespace), which use SSL encryption to ensure that the data you provide remains confidential and secure.

11. Changes to this Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our services or legal requirements. Any updates will be posted on this page with an updated revision date. In the event of material changes that affect your rights or our obligations, we will provide a clear notice on this page to inform you of these updates.