Data protection
Privacy policy
Last updated: 8 September 2026
This policy explains how YANI ART (Janina Vakhovich) processes the personal data of visitors and customers of yaniart.pl, in line with the EU General Data Protection Regulation (GDPR).
1. Data controller
The data controller is Janina Vakhovich, trading as YANI ART, based in Warsaw, Poland. For data protection questions, contact: contact@yaniart.pl (or the contact address shown on the storefront).
2. What I collect and why
I process your email address, name, shipping address, phone number, and order details — to fulfil purchases, ship paintings, and handle inquiries, visualization requests, and complaints. For registered users I also store account data (an encrypted password and order history). Contact form and blog comment data is used only to reply and moderate. On inquiry forms (contact, ask the artist, commission, visualization) you may attach photos — they are emailed to the artist and are not saved on the shop server; phone originals may include metadata such as GPS location.
3. Legal basis for processing
Data is processed on the basis of: performance of a sales contract (Art. 6(1)(b) GDPR), legal obligations such as tax and accounting duties (Art. 6(1)(c) GDPR), and the controller's legitimate interest in handling inquiries, preventing abuse, and basic site analytics (Art. 6(1)(f) GDPR).
4. Who receives your data
Data may be shared with payment processors (e.g. Stripe), couriers and parcel-locker operators handling delivery, the hosting provider, and — where enabled — Google for Ads/analytics, only to the extent needed to provide these services. Each of these providers is bound by a data processing agreement or its own GDPR-compliant privacy policy.
5. How long data is kept
Order-related data is kept for as long as required by tax and accounting law (typically 5 years from the end of the year the transaction occurred). Account data is kept until you delete your account, and contact-form data until the correspondence is resolved, or as needed to defend against legal claims. Photos attached to inquiries are deleted from the mailbox when the request is closed (they are not stored in the shop database).
6. Your rights
You have the right to access, correct, delete, or restrict the processing of your data, to data portability, and to object to processing based on legitimate interest. You may withdraw consent at any time where processing relied on it. You may also lodge a complaint with your local data protection authority, or with Poland's UODO.
7. Cookies and analytics
The store uses essential cookies (e.g. for your selection of works and sign-in) and, where enabled, first-party analytics and Google Ads tools. Cookies required for the site to function are set without consent; others require consent, which you can withdraw at any time in your browser settings.
8. Data security
I use appropriate technical and organizational measures — including HTTPS encryption, hashed passwords, and restricted access — to protect personal data against unauthorized access, loss, or destruction.
9. Changes to this policy
This policy may be updated from time to time, for example following changes in the law or in the store's features. The current version, with its last-updated date, is always available on this page.
10. Contact
For any questions about your personal data, contact me at contact@yaniart.pl.