Welcome to my website (odallocabstracts.com) of Nadine Collado trading as ODALLOC.ABSTRACTS.  I am  the controller of personal data obtained through the website and when you otherwise interact with me, meaning I am legally responsible for deciding how and for what purposes your information is used.

I take your privacy very seriously. Please read this privacy policy carefully as it contains important information about me and how and why I collect, store, use and share any information relating to you (your personal data) in connection with your use of the  Website. It also explains your rights in relation to your personal data and how to contact me or the regulator in the event you have a complaint. I collect, use and am responsible for certain personal data about you. When I do so I am  subject to the Gibraltar GDPR  .

Personal data I  collect about you

The personal data I  collect about you depends on the particular activities carried out through the  Website. I  will collect and use the following personal data about you:

(“Contact Data”):

•                 your first and last name, email address and telephone number.

(“Interaction Data”)

•                 any additional information you provide me including your particular interest for contacting me, artistical preferences, budget in any subsequent exchanges with me.

(“Payment Data”)

•           records of any payments made by you

 

If you do not provide me with information when I  ask it from you I  may not be able to deal with your enquiries.

I  collect and use this personal data for the purposes described in the section ‘How and why your personal data is used’ below.

How your personal data is collected

I collect personal data from you directly, when you enter or send information, such as when you register , contact me (including via email), or send me  messages or feedback via the  Website or otherwise..

In addition as you interact with my website, technical data about your equipment, browsing actions and patterns may be automatically collected. This personal data is collected by using cookies Please see the cookie policy of Squarespace (Cookie Policy — Squarespace) who process cookies on my behalf as data processor. You can change your cookies preference at any time by accessing the cookie panel on my website   

How and why your personal data is used

Under data protection law, I can only use your personal data if I have a proper reason, eg:

•                 where you have given consent

•                 to comply with my legal and regulatory obligations

•                 for the performance of a contract with you or to take steps at your request before entering into a contract, or

•                 for my  legitimate interests or those of a third party

A legitimate interest is when I  have a business or commercial reason to use your personal data, so long as this is not overridden by your own rights and interests. I will carry out an assessment when relying on legitimate interests, to balance our interests against your own. You can obtain details of this assessment by contacting me (see ‘How to contact me’ below).

The table below explains what I use your personal data for, the lawful basis relied on and the type of information that is used for that  purpose.

How and why your personal data is used —sharing

See ‘Who your personal data is shared with’ for further information on the steps  taken to protect your personal data where it needs to be shared with others.

Marketing

With your consent, I will use your personal data to send you updates (by email, text message, telephone or post) about me, my works and exhibitions.

You have the right to withdraw consent in respect of receiving marketing communications at any time by:

•                 contacting me us at nadine@odallocabstracts.com; or

•                 using the ‘unsubscribe’ link in emails or ‘STOP’ number in texts.

I  may also ask you to confirm or update your marketing preferences in the future if there are changes in the law, regulation, or the structure of our business.

For more information on your right to object at any time to your personal data being used for marketing purposes, see ‘Your rights’ below.

 

Who  your personal data is shared with

I routinely share personal data with third-party service providers, agents, subcontractors and other organisations for the purposes of providing services to me or directly to you on my  behalf at your request. Such third parties may include IT service providers (such as hosting and email management).

I or the third parties mentioned above occasionally also share personal data with:

•                 my and their professional advisors (such as lawyers and other advisors), in which case the recipient of the information will be bound by confidentiality obligations

•                 law enforcement agencies, courts, tribunals and regulatory bodies to comply with our legal and regulatory obligations

 

How long your personal data will be kept

I  will not keep your personal data for longer than I need it for the purpose for which it is used. Upon your request to unregister, I will deactivate or delete your information from the  active databases. However, I may retain some information in myfiles to prevent fraud, assist with any investigations, enforce  legal rights and/or comply with applicable legal requirements.

 

Transferring your personal data out of Gibraltar

Countries outside Gibraltar, the UK and the EEA have differing data protection laws, some of which may provide lower levels of protection of privacy.

It is sometimes necessary  to transfer your personal data to countries outside Gibraltar. In those cases I will comply with applicable data protection laws designed to ensure the privacy of your personal data.

Under Gibraltar GDPR your personal data can only be transferred  to a country outside Gibraltar where the UK government has decided the particular country ensures an adequate level of protection of personal data (known as an  ‘adequacy regulation’)  or if there are:

•           appropriate safeguards in place, together with enforceable rights and effective legal remedies for you; or

•           a specific exception applies under relevant data protection law for example in order to provide you with a particular service from a non Gibraltar country.

Where  your personal data is transferred outside Gibraltar, usually it will be on the basis of an adequacy regulation or adequacy decision (including the UKUS Data Bridge for transfers to the USA). Where this is not available, I will use  legally-approved standard data protection clauses recognised or issued further to Article 46(2) of the Gibraltar GDPR.

Your rights

You generally have the following rights, which you can usually exercise free of charge:

For further information on each of those rights, including the circumstances in which they do and do not apply, please contact me (see ‘How to contact me’ below).

If you would like to exercise any of those rights, please email, call or write to us—see below: ‘How to contact me’. When contacting us please:

•                 provide enough information to identify yourself eg your full name, address and any additional identity information I may reasonably request from you, and

•                 let me know which right(s) you want to exercise and the information to which your request relates

How to complain

Please contact us if you have any queries or concerns about the use of your personal data (see below ‘How to contact me’). I hope I will be able to resolve any issues you may have.

You also have the right to lodge a complaint with the Information Commissioner in Gibraltar by contacting the Gibraltar Regulatory Authority (www.gra.gi) or by telephone 20074636.

Changes to this privacy policy

This privacy policy was first published on 4th April 2025 and may be changed from time to time—when  significant changes are made, I will take steps to inform you, for example by including a prominent link to a description of those changes on the  Website for a reasonable period or by other means, such as email.

How to contact me

You can contact me , by email if you have any questions about this privacy policy or the information I hold about you, or  to exercise a right under data protection law or to make a complaint.

My contact details are shown below:

Nadine Collado:

Email:  nadine@odallocabstracts.com