Last updated: 21 September 2026
This Privacy Policy explains how Karin van Os collects, uses and protects personal data through the website karinvanos-concepts.com. It is written in accordance with the EU General Data Protection Regulation (GDPR) and French data protection law.
1. Data controller
The data controller is Karin van Os, artist, 5 Chemin des Loriots, 83600 Les Adrets-de-l’Estérel, France.
Email: info@karinvanos-concepts.com
Telephone: +33 6 80 98 62 73
Registration number (SIRET): [to be completed]
2. What personal data we collect
We only collect data that you provide to us or that is strictly necessary to operate this website.
- Contact form — your name, email address, and the content of your message.
- Orders — your name, billing and delivery address, email address, telephone number, order details and payment status.
- Customer account (optional) — your name, email address, password and saved addresses.
- Newsletter (optional) — your email address and, if provided, your first name.
- Technical data — IP address, browser type, pages visited and approximate location, collected through cookies and server logs.
We never collect payment card details. Card data is entered directly on the secure servers of our payment provider and is never transmitted to or stored by this website.
3. Why we process your data, and on what legal basis
- To answer your enquiries — legitimate interest in responding to people who contact us.
- To process and deliver your order, and to issue invoices — performance of a contract, and compliance with our legal accounting obligations.
- To manage your customer account — performance of a contract.
- To send you our newsletter — your consent, which you may withdraw at any time.
- To secure the website and measure its audience — legitimate interest, and your consent for non-essential cookies.
4. Who has access to your data
Your data is never sold or rented. It is shared only with the service providers strictly necessary to operate this website, each acting as a processor on our instructions:
- o2switch (France) — website and email hosting.
- WooPayments / Stripe — payment processing.
- MailPoet / Automattic — newsletter delivery.
- Google — audience measurement and search performance data.
- Wordfence — website security and intrusion prevention.
- Carriers and specialised art transport companies — delivery of your artwork, limited to the data needed to deliver it.
Some of these providers may process data outside the European Union. Where that is the case, transfers are governed by the European Commission’s Standard Contractual Clauses or an equivalent safeguard.
5. How long we keep your data
- Contact form messages: 3 years from our last exchange.
- Order and invoice records: 10 years, as required by French commercial and tax law.
- Customer accounts: for as long as the account remains open, then 3 years of inactivity.
- Newsletter subscriptions: until you unsubscribe, then deleted.
- Server and security logs: 12 months maximum.
6. Cookies
This website uses cookies that are strictly necessary for it to function — keeping your shopping basket, keeping you signed in, and protecting the site against attacks. These do not require your consent.
It may also use audience measurement cookies, which are only placed with your consent. You can withdraw your consent at any time, and you can block or delete cookies through your browser settings.
7. Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time. You may also give instructions on what happens to your data after your death.
To exercise any of these rights, write to info@karinvanos-concepts.com. We will reply within one month. If you are not satisfied with our response, you may lodge a complaint with the CNIL, the French data protection authority, at cnil.fr.
8. Security
This website is served exclusively over HTTPS. Access to the administration area is restricted, protected by a firewall and monitored for intrusion attempts. Payment pages are handled entirely by our payment provider on their own secure infrastructure.
9. Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The date at the top of this page always indicates the version in force.