Privacy Policy

Who is responsible for your data

Raymond Stuwe, a self-employed artist operating under the name STURAYART, is the controller of the personal data described in this notice. The business address is Calle de la Playa 15, 38870 Valle Gran Rey, La Gomera, Canary Islands, Spain. For privacy enquiries, email artist@sturayart.com.

When you visit this website

When you visit sturayart.com, the hosting and security systems may process technical information such as your IP address, browser information, requested pages and access times. This information is used to deliver the website, troubleshoot errors and protect it against abuse. The legal basis is our legitimate interest in providing a secure and reliable website under Article 6(1)(f) GDPR.

ALL-INKL’s server log files are kept for 190 days. Visitor IP addresses are fully anonymised in those files, which are used to generate website access statistics. Separately, Wordfence is configured to log security-related traffic only. Its Live Traffic records are kept for up to 30 days.

When you contact me

If you contact me by email or WhatsApp, I use the contact details you provide, your message and any attachments to respond and follow up. For a request about a purchase or commission, the legal basis is taking steps at your request before entering into a contract under Article 6(1)(b) GDPR. For general enquiries, the legal basis is my legitimate interest in responding to correspondence under Article 6(1)(f) GDPR.

If you contact me via WhatsApp, WhatsApp Ireland Limited processes information to provide its messaging service. It may process data outside the European Economic Area (EEA), including in the United States. Its EEA Privacy Policy explains the applicable safeguards. You can contact me by email instead.

Who receives personal data

The website and incoming mail for sturayart.com are hosted by ALL-INKL.COM – Neue Medien Münnich in Germany. The site also uses Wordfence, a security service from Defiant, Inc. in the United States. Wordfence can send visitor IP addresses to its servers to look up their approximate location for security features. Defiant provides EU Standard Contractual Clauses for applicable transfers outside the EEA.

How long data is kept

Routine email and WhatsApp enquiries are kept for 30 days after they have been dealt with, then deleted from the mailbox or chat. Records may be retained longer where required by law or necessary to establish, exercise or defend legal claims. ALL-INKL creates rotating backups of the website files, database and email mailbox for recovery. These backups can retain data after deletion from the live system. The available backup dates depend on the host’s backup rotation. When checked on 10 November 2026, the oldest available backup for each was 23 days old.

Cookies and similar technologies

The public portfolio pages do not set cookies during ordinary browsing. If you choose to follow a link to a separate service, such as WhatsApp or Instagram, that service may use cookies or similar technologies under its own privacy information.

Your rights

You can request access to your data, correction, erasure or restriction, and object to processing based on legitimate interests. You may also request data portability where it applies. Where processing is based on consent, you can withdraw it at any time. To exercise these rights, email artist@sturayart.com. You can lodge a complaint with a data protection supervisory authority, including the Spanish Data Protection Agency (AEPD).