Privacy policy
Preamble
This policy describes how your personal data is collected and processed when you visit the website andrenadal.com or use its contact form. It is drawn up in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978 as amended, known as the “Informatique et Libertés” Act.
Data controller
André Nadal
Data collected and purposes
Contact form
When you use the contact form, we collect the data you enter in it: first name, last name, email address, the subject of your request, the reference of the artwork concerned (optional) and the content of your message.
This data is processed for the sole purpose of responding to your request (information, acquisition of an artwork, exhibition, press). The legal basis for this processing is your consent, expressed by ticking the box on the form, together with our legitimate interest in responding to the enquiries addressed to us.
This data is not used for any commercial prospecting purpose and is neither sold, nor transferred, nor rented to third parties.
Audience measurement
This website does not use any audience measurement tool and does not set any tracking cookies. Only cookies strictly necessary for the technical operation of the website may be set; they do not collect any personal data and do not require your consent.
Third-party content
The “Media” page embeds videos hosted by YouTube (Google). Playing a video involves an exchange of data with YouTube’s servers and the possible setting of cookies by that platform, subject to its own privacy policy. Videos are loaded only at your request, when you click to play them; no data is transmitted to YouTube until you start playback.
Recipients of the data
The data from the contact form is accessible only to the artist and to the persons in charge of handling your request. It may pass through our technical service providers (hosting provider, email delivery service), which act as processors and may not use it for any other purpose.
Retention period
Data collected through the contact form is kept for as long as necessary to handle your request, and then for a maximum of 3 years from the last exchange, unless a longer retention period is required by law (for example in the event of the acquisition of an artwork, where the documents relating to the transaction are subject to accounting and tax retention periods).
Your rights
In accordance with the GDPR, you have the following rights regarding your data: access, rectification, erasure, restriction of processing, objection and portability, as well as the right to withdraw your consent at any time (without this withdrawal affecting the lawfulness of processing carried out beforehand).
To exercise these rights, simply write to [email address] or by post to the address of the data controller, providing proof of your identity.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr).
Security
The website is served over HTTPS; data transmitted via the form is encrypted in transit. We implement reasonable technical and organisational measures to protect your data against loss, unauthorised access or disclosure.
Changes
This policy may be updated to reflect changes to the website or to the applicable regulations. The date of the last update appears below; in the event of a substantial change, the information will be indicated on the website.
Last updated: August 18, 2026.