PRIVACY POLICY
This Privacy Policy explains what personal data Idylla Art processes when you use this website or contact us, why it is used and what choices you have.
Last updated: 6 September 2026
1. Data controller
2. When you contact us
The contact form asks for your name and email address and allows you to add an optional description of your project. Your name and email address are required to submit the form.
Submissions are handled through Squarespace and sent to Idylla Art by email through Microsoft 365, administered through GoDaddy. The information is used to respond, follow up your inquiry and, where relevant, prepare or provide an agreed service.
The legal basis is normally taking steps at your request before entering into a contract or our legitimate interest in responding to and following up business inquiries.
3. Clients and projects
When working with a client, Idylla Art may process contact details, project information, correspondence and information needed for agreements, project delivery, invoicing and statutory bookkeeping.
4. Technical information
Hosting, security tools and server logs may register your IP address, access time, browser, device and technical events. This information is used to keep the website stable and secure, prevent misuse and investigate errors.
The contact form uses Google reCAPTCHA to help prevent spam and automated submissions. In connection with this security function, Google may process technical information such as IP address, browser and device information in accordance with its own terms.
5. Analytics and cookies
Necessary cookies are used to keep the website functional and secure.
With your consent, Squarespace analytics and performance cookies may be used to help us understand how the website is used.
Portfolio films are displayed through an embedded Vimeo player. When a film is loaded or played, Vimeo may receive technical information such as your IP address, browser or device information and interaction with the player. Vimeo may also use cookies or similar technologies according to its own terms.
You can reject, change or withdraw your consent through the website’s cookie settings. Your choice does not affect necessary website functions.
6. Service providers and transfers
Information is shared only with providers needed for website hosting, email, forms, security, analytics or embedded films. These currently include Squarespace, Microsoft 365, GoDaddy, Vimeo and Google, where reCAPTCHA is used to protect the contact form.
The providers process information on behalf of Idylla Art or under their own terms, where relevant.
If a provider processes information outside the European Economic Area, the transfer must be based on a valid legal mechanism, such as the EU Standard Contractual Clauses.
7. Retention and deletion
Inquiries are deleted when they are no longer needed for follow-up.
If an inquiry leads to a client relationship, relevant information may be kept for as long as the relationship continues and afterwards for as long as required by law, accounting obligations or possible legal claims.
Accounting records are retained according to applicable bookkeeping rules. Technical logs and analytics data follow the purpose and retention settings of the relevant services.
8. Your rights
You may request access, correction, deletion, restriction or data portability, and you may object to processing based on legitimate interests. Consent may be withdrawn at any time.
Contact natalia@idylla.art. You may also submit a complaint to Datatilsynet.
9. Changes
This Privacy Policy will be updated if our processing activities, service providers or legal requirements change. The date above shows when it was last materially updated.