Privacypolicy.

01Who is responsible

RA Art is the studio of contemporary artist Abdulhakim Alsmadi. He is the data controller for everything described in this policy.

• Abdulhakim Alsmadi — RA Art
• Jacob Catsstraat 29, 9716 GA Groningen, The Netherlands
• info@ra-art.nl

02What we collect

We only process data you share with us directly:

• Inquiry form — your name, email address, subject of interest and message.
• Account — the email address you sign in with.
• Reservations — the works you reserve and the contact details you send by email or WhatsApp.
• Browser storage — your language (needed so every page stays in your language), plus your saved works and cart, which are only stored after your consent. Everything stays in your own browser.

Nothing is collected in the background: no tracking pixels, no analytics profiles, no advertising data.

03Why we use it

• To answer your inquiry and follow it up — legitimate interest and steps prior to a contract.
• To manage your account and reservations — performance of a contract.
• To keep the site working in your language — necessary for the service you request.
• To remember your saved works and cart — your consent, which you can withdraw at any time.

We never sell your data and never use it for advertising.

04Who processes it for us

A few carefully chosen services are needed to run this site. They process data on our behalf under data-processing agreements:

• Supabase — database and secure sign-in.
• Cloudinary — hosting of artwork images.
• Resend — sending confirmation and notification emails.

If you choose to contact us through WhatsApp, that conversation is also covered by the privacy policy of WhatsApp (Meta).

05How long we keep it

• Inquiries and correspondence — up to 2 years after our last contact.
• Account data — until you delete your account.
• Invoices and purchase records — 7 years, as required by Dutch tax law.

06Your rights

Under the GDPR you can at any time:

• request a copy of the data we hold about you;
• have incorrect data corrected;
• have your data deleted;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw a consent you gave earlier.

Email info@ra-art.nl and you will receive a response within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

07Security

All traffic to this site is encrypted (TLS). Data is stored with providers that meet modern security standards, and access is limited to the artist himself.

08Changes

This policy may be updated when the site changes. The current version is always published here, with the date shown above.