Privacy Policy

Last updated: 24 August 2026

1. Who is responsible for your data

Controller: Boris Alexander Eric Schipper
Registered address: Calle del Carmen 8 – 2b, 28013 Madrid, Spain
Email: studio@borisalexndr.com
Website: borisalexndr.com

2. What data we collect and why

  • Name and email address, to send the mailing list: exhibition announcements, new work and studio news. Legal basis: your consent (Art. 6.1.a GDPR).
  • Name, email and message content, to respond to enquiries sent through the contact form or by email. Legal basis: your consent and our legitimate interest in answering you (Art. 6.1.a and 6.1.f GDPR).
  • Name, contact and billing details, to manage sales, commissions, invoices and legal accounting obligations. Legal basis: performance of a contract and compliance with a legal obligation (Art. 6.1.b and 6.1.c GDPR).
  • Technical data such as IP address, browser and pages visited, to operate and secure the website. Legal basis: legitimate interest (Art. 6.1.f GDPR).

We do not collect special categories of data, and we do not make automated decisions or profile you in any way that produces legal effects.

3. Who we share it with

We do not sell your data and we do not share it for anyone else’s marketing. We use the following service providers, who process data on our instructions under a data processing agreement:

  • Artlogic Ltd (United Kingdom): mailing list, contact database and artwork records.
  • Kinamo: hosting of borisalexndr.com and email correspondence.

We may also disclose data where required by law, or to our accountants and legal advisers.

4. International transfers

Data processed by Artlogic Ltd is transferred to the United Kingdom, which the European Commission has recognised as providing an adequate level of data protection. Where any provider processes data outside the European Economic Area without an adequacy decision, the transfer is covered by the European Commission’s Standard Contractual Clauses.

5. How long we keep it

Mailing list data is kept until you unsubscribe or ask us to delete it. Enquiries are kept for as long as needed to deal with them and for one year afterwards. Data connected to sales and invoices is kept for the periods required by Spanish commercial and tax law, generally six years.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you may withdraw that consent at any time, which does not affect the lawfulness of processing carried out before you withdrew it.

To exercise any of these rights, write to studio@borisalexndr.com. Every mailing we send also contains an unsubscribe link.

If you believe your data has been handled improperly, you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

7. Cookies

This website uses only cookies that are strictly necessary for it to work. It does not use analytics, advertising or social media tracking, and fonts are served from our own server rather than from a third party.

The site sets a small number of technical cookies required by WordPress to keep the site functioning and to remember your display preferences. These are deleted when your session ends or shortly afterwards.

The homepage includes a video hosted by Vimeo (Vimeo Inc., United States). The player is loaded with Vimeo’s do-not-track parameter enabled, which prevents Vimeo from setting analytics or identification cookies. The player still sets a small number of security cookies (player_clearance, cf_clearance, __cf_bm, _cfuvid) which protect the service against automated abuse and are necessary for playback. When the video loads, your IP address is transmitted to Vimeo in the United States for that purpose. Vimeo’s own cookie and privacy policies are available at vimeo.com. If you prefer that no data reaches Vimeo, block third party cookies in your browser or do not play the video.

You can delete or block cookies through your browser settings. Blocking the technical cookies may stop parts of the site from working.

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

9. Changes

We may update this policy. The version published on this page, with the date shown above, is the one in force.