Privacy Policy
Last updated: November 2026
1. Who processes your personal data?
Leila Djuheric processes personal data of customers and visitors to the website.
Business Details:
Business Name: Leila Djuheric Art
Artist: Leila Djuheric
Chamber of Commerce (KvK) number: 91150299
VAT ID: NL004869583B75
Contact Email: leiladjuheric.art@gmail.com
Location: The Netherlands
---
2. Which personal data is processed?
When you visit the website, place an order, or contact us, Leila Djuheric may process the following personal data:
* First and last name;
* Email address;
* Phone number;
* Shipping and billing address;
* Payment and transaction details;
* Details regarding your order or inquiry;
* Correspondence and communication with us.
Only data strictly necessary for the fulfillment of your order and service provision will be processed.
---
3. Purpose of data processing
Personal data is used exclusively for:
* Processing and fulfilling your orders and transactions;
* Packaging and shipping the purchased artworks;
* Handling payments via secure payment gateways;
* Communicating about your order, shipping status, or customer service inquiries;
* Maintaining financial records and legal accounting obligations;
* Handling potential complaints or disputes.
Personal data will not be used for direct marketing unless you have given explicit prior consent.
---
4. Legal basis for processing
Personal data is processed solely when a valid legal basis exists under the EU General Data Protection Regulation, including:
Contractual necessity: Processing is required to perform the sales agreement (delivering your artwork) or to take pre-contractual steps upon request;
Legal obligation: Processing is required to comply with statutory tax and accounting laws;
Consent: Where applicable, if explicit permission has been provided.
---
5. Data retention periods
Personal data will not be retained longer than necessary to fulfill the purposes for which it was collected:
Financial Administration: Data included in accounting and invoicing records is retained for the statutory tax retention period mandated by Dutch law.
General Inquiries & Correspondence: Customer communications are stored for as long as necessary to handle the inquiry or potential warranty/return requests, after which they are deleted.
---
6. Website hosting and technical services
To operate the website securely and efficiently, Leila Djuheric relies on professional third-party technical providers (such as Wix for website hosting and e-commerce infrastructure).
These infrastructure providers apply high-level security measures including encrypted data transmission (SSL), access management, system monitoring, and compliance with internationally recognized security standards (such as ISO 27001 and SOC 2 Type II).
---
7. Data security
Appropriate technical and organizational measures are taken to protect personal data against loss, misuse, unauthorized access, disclosure, or alteration. These measures include:
* Secure SSL connections (HTTPS) across the entire website;
* Secure, restricted access control to administrative accounts;
* Secure payment handling via specialized third-party payment service providers.
---
8. Sharing personal data with third parties
Leila Djuheric does not sell personal data to third parties.
Data is shared only with trusted third parties necessary for business operations and order execution:
* E-commerce & Hosting Providers;
* Payment Service Providers;
* Shipping & Courier Services to deliver your package;
* Accounting Software / Accountant: For legally required financial administration.
These parties receive only the data strictly necessary for their specific role and are bound to process data in accordance with applicable privacy laws.
---
9. International data transfers
If personal data is processed outside the European Economic Area (EEA) - for instance, via cloud service providers or international payment networks - it is executed only with valid legal safeguards in place, such as EU Adequacy Decisions or Standard Contractual Clauses (SCCs) approved by the European Commission.
---
10. Cookies
The website utilizes functional and essential cookies necessary for the store to operate smoothly (e.g., managing the shopping cart, checkout process, and security).
Essential and functional cookies do not require prior consent under applicable e-privacy regulations.
If analytical or marketing cookies are integrated in the future, they will only be activated after obtaining your consent via a cookie banner.
---
11. Your privacy rights
Under the GDPR, you have the following rights regarding your personal data:
* Right to access your personal data;
* Right to request correction or updating of inaccurate data;
* Right to request erasure of your data ("right to be forgotten");
* Right to restrict or object to data processing;
* Right to data portability.
To submit a privacy request, please contact us at: leiladjuheric.art@gmail.com.
Requests will be processed within the statutory timeframe (30 days).
Please note that certain data cannot be erased if retention is required by tax law.
---
12. Data breaches
In the event of a security breach affecting personal data, the situation will be assessed in accordance with GDPR regulations. If legally required, the breach will be reported to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and affected individuals will be notified.
---
13. Complaints
If you believe that your personal data is not processed carefully, please contact us at leiladjuheric.art@gmail.com.
You also have the right to lodge a complaint with the national supervisory authority, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
---
14. Changes to this policy
This Privacy Policy may be updated to reflect changes in services, software systems, or legal requirements.
The most recent version will always be published on the website.