In accordance with Article 13(1-2) of the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter "GDPR"), I inform you that:

1. The administrator of your personal data is Sebastian Bal, an abstract artist operating under the name Sebastian Bal, located at ul. św. Rocha 195, 35-330 Rzeszów, with email contact: kontakt@balonpourart.com, hereinafter referred to as the "Administrator."

2. Possible forms of contact with the Administrator are:

   • phone contact: 513 132 458,

   • email contact: kontakt@balonpourart.com,

   • postal contact at the office address: ul. św. Rocha 195, 35-330 Rzeszów.

3. Your personal data will be processed solely for the purpose of selling and promoting artworks, communicating with you regarding the artworks you are interested in, and fulfilling any contractual obligations, in accordance with the principles outlined in Article 5 of the GDPR and Article 6 of the Act on the Protection of Artistic Work, i.e.:

   • fulfilling the Administrator's obligations arising from the purchase or commission of artwork, pursuant to Article 6(1)(a) GDPR,

   • fulfilling the Administrator's obligations in the interest of the data subject before the contract is concluded, pursuant to Article 6(1)(b) GDPR,

   • fulfilling legal obligations for tax and commercial purposes, pursuant to Article 6(1)(c) GDPR.

4. Providing personal data is voluntary. However, processing of personal data is necessary for fulfilling the contractual obligations related to the purchase, commission, or promotion of artwork.

5. The Administrator will process the following personal data of yours:

   • identification data (first name, last name, address, email, phone number),

   • contact data (email address, phone number, mailing address),

   • data related to the artwork purchase or commission (details of the transaction, payment information),

   • any additional data voluntarily provided during communication or by purchase.

6. The recipients of your personal data are entities entitled to obtain personal data under the law and processors performing services on behalf of the Administrator, i.e.:

   • entities handling accounting and invoicing services for the Administrator's business,

   • entities handling online payment processing or shipping services,

   • entities cooperating with the Administrator, to the extent necessary for completing artwork commissions or sales,

   • state institutions, public authorities, and other bodies as required by law (e.g., tax authorities).

7. The Administrator does not intend to transfer your personal data to a third country or international organization.

8. Your data will be processed until the purpose of its processing in relation to the transaction or commission ceases, or until the consent for processing is withdrawn, but no longer than required for legal or tax purposes.

9. The processing of your personal data will not be subject to automated decision-making, including profiling, as referred to in Articles 22(1) and (4) GDPR.

10. In relation to the processing of data, you have the following rights:

    • the right to access data, in accordance with Article 24(1)(3) of the Personal Data Protection Act and Article 15 GDPR,

    • the right to rectify data, in accordance with Article 24(1)(3) of the Personal Data Protection Act and Article 16 GDPR,

    • the right to erasure of data ("right to be forgotten"), in accordance with Article 17 GDPR,

    • the right to restrict data, in accordance with Article 18 GDPR,

    • the right to data portability, in accordance with Article 20 GDPR,

    • the right to object to the processing of data, in accordance with Article 21 GDPR.

    To exercise the above rights, please contact the Administrator via one of the methods listed in point II.

11. The data subject also has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office – if they believe that the processing of their personal data violates the GDPR.

12. The content posted on the website www.balonpourart.com and the information contained therein are for informational purposes about the artwork created and sold. This information does not constitute an art consultation. If you are interested in purchasing or commissioning a painting, please contact me via phone, email, or the contact form.

13. The website may use cookies. These are small files stored on your computer or other device when you visit websites. Cookies are sent by the server through web browsers. Cookies allow storing certain information on your device and then reading it by the service that created them. Cookies help in using previously visited websites.

    The collected information may include your IP address, browser type, language, operating system, internet service provider, time and date, location, and other information voluntarily provided by you via the contact form.

    Cookies are used to monitor and create statistics that help improve website usage and service operation, ensuring more effective navigation. This data is used solely for website administration and the provision of services.

    If cookies are used on the website www.balonpourart.com, you have the option to block cookies in your browser. To manage cookie settings, please follow the instructions for your web browser.