Privacy Policy

Last updated: 06 June 2026

Bojan Gurbaj, based in Rotterdam, is responsible for the processing of personal data as described in this privacy policy.

Contact: info@bojangurbaj.com · bojangurbaj.com

What data do we process?

We process the following personal data:

• When placing an order: full name, email address, phone number, delivery address, and any notes you provide.
• When subscribing to the newsletter: email address and language preference.
• When using the website: session data (no tracking or advertising cookies are used).

Why do we process this data?

• Orders: to execute the purchase agreement and process delivery (legal basis: performance of a contract – GDPR art. 6(1)(b)).
• Newsletter: to send news about new works and exhibitions, based on your consent (legal basis: GDPR art. 6(1)(a)). You can unsubscribe at any time by contacting us.
• Legal obligation: order data is retained for 7 years to comply with tax regulations (legal basis: GDPR art. 6(1)(c)).

How long do we retain your data?

• Order data: 7 years (statutory retention period).
• Newsletter subscriptions: until you unsubscribe.

Sharing with third parties

Your personal data is not sold or shared with third parties, except where required to fulfil your order (e.g. shipping carriers) or where legally required.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted (where legally permitted).
• Object to or restrict processing.
• Data portability.

To exercise these rights, contact us at info@bojangurbaj.com. We will respond within 30 days.

Cookies

This website uses only functional session cookies that are necessary for the shopping cart and language preference to work. No tracking or advertising cookies are used.

Google Fonts are loaded from Google's servers. This means your IP address may be transmitted to Google. See Google's privacy policy for more information.

Complaints

If you have a complaint about how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.