Privacy Policy

Last updated: 9 June 2026

Bojan Gurbaj, based in Rotterdam, is responsible for the processing of personal data as described in this privacy policy.

Contact: info@bojangurbaj.com · bojangurbaj.com

What data do we process?

We process the following personal data:

• When placing an order: full name, email address, phone number, delivery address, and any notes you provide.
• When subscribing to the newsletter: email address and language preference.
• When using the website: functional session data, and — only after your consent — statistical data via Google Analytics (see "Cookies" below).

Why do we process this data?

• Orders: to execute the purchase agreement and process delivery (legal basis: performance of a contract – GDPR art. 6(1)(b)).
• Newsletter: to send news about new works and exhibitions, based on your consent (legal basis: GDPR art. 6(1)(a)). You can unsubscribe at any time by contacting us.
• Legal obligation: order data is retained for 7 years to comply with tax regulations (legal basis: GDPR art. 6(1)(c)).

How long do we retain your data?

• Order data: 7 years (statutory retention period).
• Newsletter subscriptions: until you unsubscribe.

Sharing with third parties and processors

Your personal data is not sold. We only share data with third parties where necessary for our services or where legally required. We engage the following processors, with whom we have concluded data processing agreements:

• Hosting provider: for the technical operation and storage of the website and database.
• Payment provider (Mollie): to process your payment securely. Mollie processes the payment data required for the transaction.
• Shipping carrier: to deliver your order (your name and delivery address).
• Newsletter provider (Mailchimp): to send our newsletter. Your email address and first name are stored with Mailchimp.
• Analytics (Google Analytics 4): to compile anonymous usage statistics. Provided by Google LLC, and only active after you have accepted analytics cookies.

Transfer outside the European Economic Area

Our newsletter provider Mailchimp (Intuit Inc.) and — if you accept analytics cookies — Google Analytics (Google LLC) are based in the United States, so your data may be transferred to the US. These transfers are safeguarded under the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses. All other personal data is processed within the European Economic Area.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted (where legally permitted).
• Object to or restrict processing.
• Data portability.

To exercise these rights, contact us at info@bojangurbaj.com. We will respond within 30 days.

Cookies

This website uses functional session cookies that are necessary for the shopping cart and language preference to work. These are always placed and cannot be switched off.

In addition, we use Google Analytics to understand how the website is used. The associated analytics cookies are only placed after you have given your consent via the cookie banner. If you decline, no analytics cookies are placed and no data is sent to Google. We do not use advertising cookies. You can withdraw your consent at any time by clearing the cookies in your browser, after which the banner will appear again.

All fonts are hosted on our own server. No data is transmitted to external font providers (such as Google Fonts) when you visit this website.

Complaints

If you have a complaint about how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.