ARTISTAY MAGAZINE (“A.M”, “we”, “us” or “our”) is a company registered in Denmark and acts as the data controller for any personal information collected when you visit our website www.artistay.net (the “Magazine”), subscribe to our content, submit materials, or interact with us in any other way.

We take your privacy seriously and are fully committed to protecting your personal data. This Privacy Policy outlines how we collect, process, store, and disclose your information in accordance with the EU General Data Protection Regulation (GDPR).

1. Types of Personal Data We Collect

We collect personal data in the following ways:

Data you give us directly

• When you subscribe to our newsletter: your email address and communication preferences.

• When making a purchase or donation (if applicable): your name, billing and shipping address, and payment information.

• When contacting us or submitting content: any information you voluntarily provide through contact forms or submission portals.

Data collected automatically

• Technical information such as your IP address, browser type, device information, pages you visit, and how long you spend on the Magazine.

• Usage data gathered through cookies and similar tracking technologies, including tools like Google Analytics and Google Tag Manager.

Data received from third parties

• Information shared with us by payment processors, shipping companies (where relevant), and our service providers to help complete transactions or deliver services.

2. Legal Grounds for Processing Your Data

We only process your personal data when we have a valid legal basis, which includes:

• Your consent – for sending marketing communications, newsletters, and placing non-essential cookies.

• Performance of a contract – to fulfil orders or provide the services you have requested.

• Legitimate interests – such as improving our website, enhancing user experience, maintaining security, and preventing misuse.

• Legal obligations – to meet requirements under tax, accounting, or other applicable laws.

3. Purposes of Data Processing

We use the personal data we collect to:

• Process and deliver any orders, subscriptions, or requested services.

• Respond to your inquiries and provide customer support.

• Send newsletters and other editorial updates (only where you have given consent).

• Analyse and improve the performance, functionality, and security of our Magazine.

• Comply with our legal and regulatory responsibilities.

4. How Long We Keep Your Data

We only keep your personal data for as long as it is needed for the purposes set out above:

• Data related to purchases or orders: up to 10 years to comply with tax and accounting rules.

• Newsletter and marketing subscriptions: until you unsubscribe or after 2 years of inactivity.

• Customer support correspondence: for up to 5 years.

• Analytics and cookie data: according to the specific cookie lifetime (please see our Cookie Policy).

We regularly review our retention periods to ensure data is not kept longer than necessary.

5. Use of Cookies and Tracking Technologies

Our website uses cookies and similar technologies to provide the best possible experience. These include:

• Essential cookies – necessary for the website to function properly.

• Preference cookies – to remember your settings and personalise your visit.

• Analytics cookies – to understand how visitors use our content (e.g., via Google Analytics).

• Marketing cookies – currently not in use for targeted advertising.

You can manage your cookie preferences at any time through the cookie banner on our website. For more information, please refer to our separate Cookie Policy.

6. Sharing Your Personal Data

We may share your personal data with carefully selected third-party service providers, including:

• Payment processors such as Stripe and PayPal (when payments are involved).

• Email marketing platforms for delivering newsletters.

• Magazine and hosting providers, including analytics services (Google Analytics, Google Tag Manager).

• Any shipping carriers if physical products are delivered.

All third parties are required to process your data only on our instructions and in compliance with GDPR.

7. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), particularly in the United States (for example, Google, Stripe, PayPal, Vimeo, or YouTube).

Whenever we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, primarily through the use of European Commission-approved Standard Contractual Clauses (SCCs) or other valid transfer mechanisms.

8. Your Rights Under GDPR

You have several important rights regarding your personal data:

• The right to access the data we hold about you.

• The right to request correction of any inaccurate or incomplete data.

• The right to request deletion of your data (where we no longer have a valid reason to keep it).

• The right to restrict or object to certain types of processing.

• The right to data portability.

• The right to withdraw your consent at any time (this does not affect the lawfulness of processing carried out before withdrawal).

To exercise any of these rights, please contact us at info@artistay.net. We will respond to your request within one month.

9. Right to Lodge a Complaint

If you are not satisfied with how we handle your personal data, you have the right to complain to the relevant supervisory authority, please contact us at info@artistay.net.

10. Automated Decision-Making

We do not carry out any automated decision-making or profiling that has legal or similarly significant effects on you.

11. Protection of Children’s Privacy

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If we discover that we have collected such data by mistake, we will take immediate steps to delete it.

12. Data Security Measures

We use appropriate technical and organisational security measures, including encryption and access controls, to protect your personal data from unauthorised access, accidental loss, or unlawful processing.

13. Changes to This Privacy Policy

We may occasionally update this Privacy Policy to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a new effective date. We recommend that you review this policy from time to time.