Privacy policy

Courtesy translation. The Spanish version is the legally binding text.

Last updated: 21 October 2026.

1. Data controller

This policy explains how the personal data of people who get in touch through this website is processed, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD) and Law 34/2002 (LSSI-CE).

2. What data we process and where it comes from

We only process the data you provide yourself when you fill in the contact form or write to us by email: your name, email address, subject and the content of your message, together with any data you choose to include in it (for example, the name of your institution or company). This website has no user registration, shop or newsletter subscription.

3. Purposes, legal basis and retention

  • Handling your enquiry or request (information, arranging visits, collaboration or exhibition proposals). Legal basis: your consent (Art. 6.1.a GDPR), given by ticking the box on the form and, where the contact is to arrange a visit or a collaboration, the application of pre-contractual measures at your request (Art. 6.1.b GDPR). Retention: for as long as needed to handle your request and, afterwards, blocked for the limitation periods of possible legal liabilities.
  • Complying with legal obligations that apply to us. Legal basis: Art. 6.1.c GDPR. Retention: for the periods set by the applicable regulations.

We do not make automated decisions or build profiles with your data, and we do not use it to send you commercial communications you have not requested.

4. Recipients of the data

We do not disclose your data to third parties, except where legally required. In order to provide the service, your data may be processed by providers acting as data processors under contract and with the safeguards required by law: the web hosting provider and the email service provider. Embedded YouTube videos are explained in section 6.

5. International transfers

We do not carry out international data transfers on our own initiative. If any of the providers mentioned were located outside the European Economic Area, the transfer would be covered by a European Commission adequacy decision or by appropriate safeguards, such as standard contractual clauses.

6. Embedded third-party services

Some videos on this site are shown using the YouTube player (Google), and video thumbnails are loaded from YouTube servers. When you watch this content, YouTube may receive your IP address and process data according to its own privacy policy. The site’s typefaces are served from our own server, with no connection to external services. For more information, see the Cookie policy.

7. Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent without affecting the lawfulness of prior processing. To do so, write to info@coleccionpereztrespalacios.com stating the right you wish to exercise and attaching a copy of an identity document, or send a letter to the controller’s postal address.

8. Complaints

If you believe your data is not being processed properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan, 6, 28001 Madrid. We would appreciate it if you contacted us first to try to resolve the matter.

9. Minors

This site is not directed at children under 14. If you are under that age, you need the consent of your parent or legal guardian to provide us with your data.

10. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration, according to the risk and the nature of the data processed.

11. Changes to this policy

We may update this policy to adapt it to legal or website changes. The date of the latest update appears at the top of the page.