Controller Lana Nobrega Gouveia
Website https://lananobrega.art/
Contact email info@lananobrega.art
Effective date 15 September 2026
This Privacy Policy explains how Lana Nobrega Gouveia (the “Controller”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you visit lananobrega.art, submit an enquiry, communicate with us, or otherwise interact with the website. It also explains the rights available to you under applicable data protection law.
Controller postal address: 197110, Russian Federation, Saint Petersburg, Konstantinovsky Prospekt 26, Apt. 77.
1. Scope and applicable law
This Policy applies to personal data processed through the website and in connection with enquiries submitted through it.
Depending on where you are located and how the website is offered to you, processing may be subject to applicable data protection laws, including Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” of the Russian Federation and, where applicable, Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”). Where a particular legal requirement applies, we process personal data in accordance with that requirement.
2. Personal data we collect
When you submit an enquiry through the website, we may collect:
Your name.
Your email address.
The content of your enquiry and any information you choose to include in it.
Information relating to the artwork, collection or page from which you contacted us, where this is included in the enquiry.
We may also receive limited technical information that is automatically processed by the website, hosting provider or other technical service providers, such as IP address, browser/device information, request logs and security-related data. We do not intentionally use website analytics or advertising pixels at the date of this Policy.
Please do not send sensitive or special-category personal data through the enquiry form unless it is genuinely necessary for your request.
3. How we collect personal data
We collect personal data primarily when you provide it directly to us, including when you complete the “Enquire” form, tick the personal data processing consent checkbox, or contact us by email.
Technical data may be generated automatically when you use the website as part of normal hosting, security and website operation.
4. Purposes and legal bases for processing
We may process personal data for the following purposes:
To receive, review and respond to enquiries about artworks, collections, availability, pricing, exhibitions, commissions, purchases, delivery or other related matters.
To take steps at your request before entering into a contract and, where relevant, to perform a contract with you.
To maintain correspondence and records relating to your enquiry or transaction.
To protect the website, prevent abuse, troubleshoot technical issues and ensure security.
To comply with legal, tax, accounting or regulatory obligations where applicable.
To send news, exhibition updates or other marketing communications only where we have an appropriate legal basis, including your consent where required.
Under the GDPR, where applicable, the legal bases may include your consent (Article 6(1)(a)), steps taken at your request before entering into a contract or performance of a contract (Article 6(1)(b)), compliance with a legal obligation (Article 6(1)(c)), and our legitimate interests in responding to genuine enquiries, maintaining security and managing our professional activities (Article 6(1)(f)), provided those interests are not overridden by your rights and freedoms.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. Marketing communications
We do not treat an ordinary artwork enquiry as automatic consent to receive promotional emails.
If we introduce newsletters, exhibition announcements or similar marketing communications, we will use your email address for those communications only where permitted by applicable law and, where required, after obtaining separate consent. You may unsubscribe or withdraw consent at any time by contacting info@lananobrega.art or by using an unsubscribe option if one is provided in the message.
6. Cookies and similar technologies
At the date of this Policy, we do not intentionally use analytics cookies, advertising pixels or behavioural advertising technologies on the website.
The website platform, hosting provider or security infrastructure may use strictly necessary or technical cookies and similar technologies required to deliver pages, maintain security, remember essential settings or operate website functionality. If non-essential analytics or advertising technologies are added in the future, this Policy and, where required, the website consent mechanism will be updated.
7. Recipients and service providers
Personal data may be processed by third parties acting as service providers where this is necessary to operate the website or communicate with you. These may include website hosting and site-building providers, email service providers, IT/security providers and professional advisers.
We do not sell personal data. We do not disclose personal data to third parties for their own independent marketing purposes without an appropriate legal basis.
We may disclose personal data where required by law, a lawful request from a competent authority, or where necessary to establish, exercise or defend legal claims.
8. International and cross-border processing
Because online services and email infrastructure may involve providers located in different countries, personal data may, where permitted by applicable law, be processed outside your country of residence.
Where the GDPR applies and personal data is transferred outside the European Economic Area, we will rely on an appropriate transfer mechanism or applicable derogation where required. Where Russian data localisation or cross-border transfer requirements apply, processing and transfers will be organised in accordance with the applicable requirements of Russian law.
9. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to respond to your enquiry, manage any resulting transaction, maintain appropriate business records, and comply with legal obligations.
As a general rule, enquiry correspondence that does not result in a transaction may be retained for up to 3 years after the last meaningful communication, unless a shorter or longer period is required by applicable law or justified by an ongoing relationship, dispute or legal obligation. Transaction-related information may be kept for longer where tax, accounting, consumer protection or other laws require it.
Marketing data based on consent is retained until you withdraw consent, unsubscribe, or the purpose no longer applies, subject to limited suppression records that may be kept to ensure your opt-out is respected.
10. Data security
We take reasonable technical and organisational measures appropriate to the nature of the processing to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction, alteration or disclosure.
No method of transmission or storage on the internet can be guaranteed to be completely secure. If we become aware of a personal data incident, we will take the steps required by applicable law.
11. Your rights
Depending on the law that applies to you, you may have the right to:
Request information about the processing of your personal data.
Request access to personal data we hold about you.
Request correction or updating of inaccurate or incomplete data.
Request deletion of personal data where there is no lawful reason to continue processing it.
Request restriction of processing in circumstances provided by law.
Object to certain processing, including direct marketing and, where applicable, processing based on legitimate interests.
Withdraw consent at any time where processing is based on consent.
Receive personal data in a structured, commonly used and machine-readable format and request portability where the GDPR applies and the legal conditions are met.
Lodge a complaint with a competent data protection authority.
To exercise a right, contact us at info@lananobrega.art. We may ask for information reasonably necessary to verify your identity before acting on a request.
12. Children
The website is intended for a general adult audience interested in art and is not designed to knowingly collect personal data from children. If you believe a child has provided personal data to us without appropriate authorisation, please contact us so that we can review and, where appropriate, delete the information.
13. Third-party links
The website may contain links to third-party websites, social networks, galleries, platforms or services. We are not responsible for the privacy practices of third parties. Please review their privacy notices before providing personal data to them.
14. Changes to this Policy
We may update this Policy when the website, our processing practices, service providers or applicable legal requirements change. The current version will be published on lananobrega.art with an updated effective date. Material changes may be communicated by additional means where required by law.
15. Contact
For questions about this Policy, the processing of your personal data, withdrawal of consent, or requests relating to your rights, please contact:
Lana Nobrega Gouveia
Email: info@lananobrega.art
Postal address