Privacy Policy

Who we are

Our website address is: https://auliak.com.

Last updated: 01/13/2026

This Privacy Policy explains how AULIAK (“we”, “us”, “our”) collects, uses and protects your personal data when you visit auliak.com, browse our collections or acquire a work of art.

We are committed to treating your data with the same care and attention we dedicate to each edition we release.

Data controller
AULIAK
[Full legal name / company name]
[Registered address]
Email: privacy@auliak.com

Because we are based in the European Union, our processing of personal data is subject to the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.

1. Personal data we collect

We only collect data that is relevant to presenting our work, managing enquiries and fulfilling purchases.

1.1. Data you provide directly

Contact details
Name, email address, country, and any information you include when you write to us (for example via the contact form or directly by email).
Purchase and shipping details
Billing name, postal address, shipping address, country, phone number (if required for delivery), VAT / tax ID where applicable.
Payment information
We accept credit/debit cards and bank transfers.
Card details are processed securely by our payment service provider and are never stored on our servers. We may store partial information such as the last four digits of a card and payment confirmation, for accounting and anti-fraud purposes.
Account information (if applicable)
If we enable customer accounts in the future: username, password (stored in encrypted form) and purchase history.

1.2. Data collected automatically

When you visit auliak.com, certain technical data are collected automatically:

IP address
Browser type and version
Device type and operating system
Pages visited, time and date of visit, time spent on each page
Cookies and similar technologies (for analytics, security and to operate the shop).

Details about cookies are provided in our Cookie Policy.

2. Purposes and legal bases for processing

We process your personal data for the following purposes and under the following legal bases:

2.1. To manage enquiries and communication

Responding to your messages, requests for information, and project or collaboration enquiries.
Legal basis: legitimate interest in responding to potential collectors and partners, and performance of a contract when the communication relates to a purchase or pre-contractual steps.

2.2. To process orders and deliver works

Managing orders placed through the website.
Processing payments through our payment provider.
Preparing, packaging and shipping the photographic work and the numbered and signed certificate of authenticity once payment is confirmed.
Handling returns, cancellations or incidents related to the order.

Legal bases:

Performance of a contract with you (sale and delivery of the work).
Legal obligation to maintain invoicing and accounting records under Spanish and EU law.

2.3. To maintain and improve the website and shop

Ensuring the security and proper functioning of the site.
Producing aggregated, anonymous statistics on visits and navigation to understand how collectors find and experience the work.

Legal basis:

Legitimate interest in maintaining, protecting and improving our website and services.

2.4. To send information you have expressly requested

If in the future we offer a newsletter or similar communications (for example, about new editions or exhibitions), we will only send it:

When you have explicitly given your consent (opt-in), or
When it is strictly necessary in relation to a purchase (for example, emails about your order or shipping).

You can withdraw your consent at any time.

3. How long we keep your data

We keep your data only for as long as necessary for each purpose:

Order and invoicing data: for the period required by tax and accounting law (typically up to 6 years under Spanish regulations).
Basic contact data and correspondence: as long as the conversation or relationship is active and for a reasonable period afterwards to follow up on enquiries and potential projects.
Technical/analytics data: usually kept in aggregated or anonymised form.
When the data are no longer needed, they are securely deleted or anonymised.

4. Who we share your data with

We do not sell your data and we only share it with third parties involved in delivering our services:

Payment service providers
To process card payments securely.
Banks and financial institutions
When you pay by bank transfer and we must reconcile incoming payments.
Shipping and logistics providers
To deliver the artwork and its certificate to your chosen address.
IT and hosting providers
For web hosting, security, backup and maintenance.

These third parties act as data processors and only process your data according to our instructions and for the purposes described above, under appropriate data protection agreements.

We may also share data when required by law, for example with tax authorities or courts.

5. International transfers

Our website infrastructure and service providers may be located inside or outside the European Economic Area (EEA).

Where data are transferred outside the EEA, we will ensure that one of the following safeguards is in place:

An adequacy decision by the European Commission for the destination country.
Standard Contractual Clauses approved by the European Commission.
Other mechanisms recognised by the GDPR as providing an adequate level of protection.

You can contact us at privacy@auliak.com for more information about international transfers related to your data.

6. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access
To obtain confirmation of whether we process your data and, if so, to access them.
Right to rectification
To correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”)
When, for example, the data are no longer necessary for the purposes for which they were collected, and we have no legal obligation to keep them.
Right to restriction of processing
In certain cases provided by law.
Right to data portability
To receive your data in a structured, commonly used, machine-readable format and transmit them to another controller when processing is based on consent or a contract.
Right to object
To processing based on our legitimate interests, on grounds relating to your particular situation.
You may also object at any time to receiving direct marketing.
Right to withdraw consent
When processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, please contact us at privacy@auliak.com, indicating “Data protection” in the subject and specifying which right you wish to exercise.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the supervisory authority of your country of residence.

7. Security of your data

We apply appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

Secure server and hosting environments.
Use of encryption (HTTPS/SSL) when transmitting data.
Restricted access to personal data based on need-to-know.
Regular updates to software and security components.

No system is completely secure, but we work to keep the risk proportionate and to react promptly in case of any incident.

8. Minors

Our website and our editions are intended for adult collectors and professionals. We do not knowingly collect personal data from minors under the age applicable in each jurisdiction.

If you believe that a minor has provided personal data to us, please contact us at privacy@auliak.com and we will take appropriate steps to delete such data.

9. Links to other websites

Our website may contain links to third-party websites (for example, payment providers, social networks or external platforms). We are not responsible for the privacy practices of those sites.

We encourage you to read the privacy policies of any third-party site you visit.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in law, in our practices, or in the way we present and sell our work.

When we make material changes, we will indicate this by updating the “Last updated” date at the top of this page and, where appropriate, we may inform you by email or through the website.

11. Contact

For any questions about this Privacy Policy or about how we process your personal data, you can contact us at:

Email: privacy@auliak.com