Privacy

Artistivo is operated by PXL CREATIVE LIMITED, 7 Fairfax, Cambridge, CB1 3AY, United Kingdom (the “Controller”). When you use artistivo.com, the Controller decides how your personal data is processed. The platform is developed by BlenCode GmbH, which acts only as a technical service provider and is not the Controller of your personal data.

Questions about this policy or your data? Email privacy@artistivo.com.

Account data: email address, display name, username, and password hash (managed by AWS Cognito; we never see plaintext passwords).

Profile content: anything you choose to publish — bio, location, avatar, works, albums, events.

Usage data: pages viewed, search queries, and interaction events that help us understand what works. Aggregated and de-identified where possible.

Technical data: IP address, browser type, device class — used for security, fraud prevention, and basic analytics.

To deliver the platform, authenticate you, surface relevant artists and works, send transactional notifications (e.g. password reset, event invites you opted into), and improve the product. We do not sell your personal data.

Legal bases under GDPR: contract (delivering the service), consent (analytics, marketing email), and legitimate interest (security, abuse prevention).

We use a small number of strictly-necessary cookies for authentication and session persistence. Analytics and marketing cookies require your explicit consent via our cookie banner (powered by CCM19). Your consent choices are shared across the Artistivo network sites (artistivo.com, barcelonaartists.com, britishartists.com), all operated by the same controller — you decide once, and can withdraw at any time via Cookie Settings on any of these sites.

Google Analytics: with your consent, we use Google Analytics 4 (provided by Google Ireland Limited) to understand how the site is used so we can improve it. It sets the _ga and _ga_* cookies (up to 2 years) and processes pseudonymous usage data — pages viewed, approximate location from a truncated IP address, device and browser type, referring page, and a randomly generated identifier. The legal basis is your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG). Data may be transferred to Google in the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses. Analytics runs only after you accept the analytics category — decline or ignore the banner and Google Analytics loads nothing and sets no cookies.

You can revisit or withdraw your choices any time via Cookie Settings in the footer, or opt out with Google’s browser add-on.

Service providers (data processors) that help us run Artistivo: AWS (hosting, eu-central-1 region), AWS Cognito (authentication), Stripe (payments — only if you subscribe), Amazon SES (transactional email), and CCM19 (cookie consent).

All processors are contracted under GDPR-compliant Data Processing Agreements. Data remains in the EU unless explicitly stated otherwise.

Embedded media providers: some pages contain videos or audio hosted by YouTube (Google Ireland Limited), Vimeo, SoundCloud, or Spotify. These embeds are blocked by default — the provider only receives data (such as your IP address) after you explicitly choose to load the content. Where available we use the providers' privacy-enhanced modes (YouTube no-cookie, Vimeo Do-Not-Track).

You can at any time:

• access a copy of your personal data
• correct or update inaccurate information
• delete your account and all associated content
• export your content in a machine-readable format
• withdraw consent for any opt-in processing
• lodge a complaint with your supervisory authority

Most of the above is self-service from Account Settings. For everything else, write to privacy@artistivo.com and we’ll respond within 30 days.

Account data is kept while your account is active. After deletion, we retain anonymised usage logs for up to 12 months for security and analytics, then irreversibly delete them. Backups roll over within 30 days.

If we make material changes, we’ll notify you by email and update the “Last updated” date above. Continued use after the effective date means you accept the revised policy.