Who we are
This website, maragiliberti.com, is operated by Mara Giliberti, a self-employed visual artist based in Porto, Portugal. Mara is the data controller for any personal data collected on this site.
Contact for any data-protection matter: privacy@maragiliberti.com or via the contact form.
What data we collect
We collect the following categories of personal data:
- Newsletter signups — your email address (required) and your name (optional), when you submit our subscription form.
- Contact-form messages — your name, email, and the contents of your message, when you write to us through the contact form.
- Orders (shop) — when you place an order: name, billing/shipping address, email, telephone, and the products you ordered.
- Technical data — your IP address, browser type, pages visited, and approximate location (country/region), collected automatically by our hosting infrastructure and analytics.
Why we collect it
- To send you the newsletter you signed up for (legal basis: your consent, withdrawable any time).
- To respond to your contact-form message (legal basis: legitimate interest).
- To process and ship your orders, comply with Portuguese tax and accounting law, and offer customer service (legal bases: contract performance and legal obligation).
- To maintain and improve the website and understand how visitors use it (legal basis: legitimate interest, anonymised where possible).
Who has access (processors)
We use the following service providers to process your data on our behalf. Each is bound by a data-processing agreement and processes data only on our instructions.
- MailerLite (UAB MailerLite, Lithuania, EU) — newsletter delivery and subscriber management.
- Hetzner Online GmbH (Germany, EU) — web hosting and server infrastructure.
- Automattic, Inc. (USA, including Jetpack) — site security, performance, and anonymised statistics. Transfers protected by Standard Contractual Clauses.
- MaxMind, Inc. (USA) — IP-based country/region detection, used by the shop for tax and shipping. Transfers protected by Standard Contractual Clauses.
- Banks / payment partners — only when you place an order and pay by bank transfer. The data shared is the minimum required to identify your payment.
We never sell your data, and we do not share it with advertisers.
How long we keep it
- Newsletter subscribers: until you unsubscribe. You can do this any time via the link at the bottom of every email we send.
- Contact-form messages: up to 2 years from the last reply, then deleted.
- Order data: retained for the duration required by Portuguese tax law (currently 10 years for invoices), then deleted.
- Technical/analytics data: server logs retained up to 90 days; aggregated analytics may be retained longer in anonymised form.
Cookies
This site uses a small number of cookies, all functional or strictly necessary:
- WooCommerce session cookies (only if you add items to the cart) — required for the shop to work.
- WordPress login session (only if you log in to the dashboard).
- Anonymised analytics, where applicable.
We do not use advertising cookies and we do not currently use any cross-site tracking.
Your rights
Under the EU General Data Protection Regulation (GDPR), you have the right to:
- Access the data we hold about you.
- Correct inaccurate data.
- Delete your data (right to be forgotten), subject to our legal retention obligations.
- Restrict or object to processing.
- Portability — receive your data in a machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at privacy@maragiliberti.com. We will respond within 30 days.
If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Portuguese data-protection authority, Comissão Nacional de Proteção de Dados (CNPD).
Changes to this policy
We may update this policy from time to time. The latest version is always available on this page; substantial changes will be highlighted in the newsletter.
Last updated: 30 June 2026.
Manage your cookie preferences
You can review or change your cookie consent at any time: