Privacy notice

1. Data controller
Alberto Pinotello («Pinotello»), with address at Presa Santa Catarina, Querétaro, Mexico, is responsible for the processing of the personal data you provide through pinotello.art, in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.
For any matter related to your personal data, write to sitio@pinotello.art.

2. Personal data we process
Only what you enter in our forms: name, email address, telephone, country, your message and, depending on the form, details of your request (for example, the work you are interested in, the media outlet you write for, the date and number of people for a visit, your company or the area in which you would like to collaborate).
When you submit a form we also automatically record the IP address, the type of browser, the page you came from and, if present, the parameters of the campaign that brought you to the site. We use them to prevent abuse and to understand how people find us.
We do not request sensitive personal data. Please do not include it in your messages.
This site is not directed at minors.

3. Purposes
We use your data to: (a) handle and follow up on your request (information about the work, purchases, advice, visits to the sculpture garden or the studio, press, activities, collaboration proposals or comments); (b) send you an acknowledgement of receipt and reply by email or telephone; (c) prevent misuse of the forms.
These purposes are necessary to handle what you ask of us. We do not use your data for advertising or any other purpose. Should we wish to do so in the future (for example, to send you news), we will ask for your consent first.

4. Consent
By ticking «I have read and accept the privacy notice» and submitting a form, you consent to the processing described here. We keep a record of the version of this notice you accepted and the date.

5. Who we share your data with
We do not sell or assign your personal data. We do not transfer it to third parties, except where the law allows it without your consent or a competent authority requires it.
To run the site we rely on web hosting and email providers, which process the data only on our behalf, under our instructions and with security measures.

6. How long we keep it
We keep your requests for 24 months from the date we receive them; after that they are deleted automatically, unless a legal obligation requires us to keep them longer.

7. Your rights (ARCO), withdrawal and limitation
You may access, rectify or cancel your data, or object to its processing (ARCO rights), as well as withdraw your consent or limit the use and disclosure of your data.
Send your request to sitio@pinotello.art with: your name and an email address for our reply; a copy of an official ID (or, if acting on behalf of someone else, the document proving your authority); a clear description of the right you wish to exercise and the data concerned; and any detail that helps us locate it (for example, the approximate date you wrote to us).
We will reply by email within the time limits set by law (up to 20 business days to notify our response) and, where applicable, give effect to it within the following 15 business days.
If you believe your request was not properly handled, you may turn to the Secretaría Anticorrupción y Buen Gobierno, Mexico's data protection authority.

8. Cookies and similar technologies
This site uses only the technical cookies it needs to work: the session cookie and the form security cookie. We do not use advertising or third-party tracking cookies. If we measure visits, we do so with tools that use no cookies and do not identify individuals.
You can block or delete cookies in your browser; the forms might stop working.

9. Security
We apply administrative, technical and physical measures to protect your data: encrypted connection (HTTPS), password-protected access to the admin panel for authorised staff only, and a log of changes.

10. Changes to this notice
Any change will be published on this page with its version number and effective date. If a change requires your consent, we will ask for it.

This is a translation. In case of any discrepancy, the Spanish version prevails.