Privacy policy

Last updated date: November 25, 2025

Who I am

Name: Kim Hartman • Kimhart Art
Country: The Netherlands
Email: hello@kimhartart.com
Website: https://www.kimhartart.com

Scope

This privacy policy applies to visitors of my website and to people who contact me via the site (e.g., through a contact form). It is intended to comply with the GDPR/AVG.

What personal data is processed

Contact data (when you submit a form or email me): first name, last name, email address, your message (and any information you choose to include).
Technical data: IP address (anonymised where possible), device & browser info, language settings, timestamps, basic server logs.
Cookie & consent data: your choices in the cookie banner (consent logs).
Portfolio/commissions (if applicable and with permission): images/texts you provide.

Why your data is used

Contact and follow-up: to reply to your requests and messages.
Site functionality and security: to load pages, diagnose errors, prevent abuse.
Analytics and improvement (only with consent): to understand website usage through Google Analytics 4 (via Google Tag Manager and Consent Mode v2).
Marketing (only with consent): newsletter and/or online advertising.

legal bases

Consent (Art. 6(1)(a) GDPR): non-essential cookies/analytics; newsletter.
Agreement/preliminary steps (Art. 6(1)(b)): responding to your request/question/offer/commission.
Legitimate interest (Art. 6(1)(f)): security, basic log files, displaying the website.
Legal obligation (Art. 6(1)(c)): tax/administrative retention obligations.

cookies

My cookie banner ensures prior consent: non-essential cookies (e.g., GA4) are only placed after you agree. You can change or withdraw your choices at any time via the Cookie Policy page, which can also be found in the footer. The types of cookies are:

Functional cookies: required for basic functionality and security.
Analytical cookies (opt-in): Google Analytics 4 via Google Tag Manager and Consent Mode v2.
Marketing cookies (opt-in): used for targeted advertising if enabled.

See the cookie policy for details and the current list of cookies and providers.

Who processes your data

I do not share your personal information or data with third parties for their own marketing. I use trusted service providers (processors) who act on my behalf:

Web hosting & email: mijn.host (NL) – website and email hosting.
Website software: WordPress and selected plugins (e.g., form & security plugins).
Analytics (with consent): Google Tag Manager and Google Analytics 4.

Data may be processed outside the EEA (e.g., by Google). In such cases, I rely on appropriate safeguards (e.g., Standard Contractual Clauses and supplementary measures).

Retention

Contact forms/emails: kept as long as needed to handle your request.
Newsletter data (if used): until you unsubscribe or for 24 months of inactivity.
Analytics (with consent): per standard GA4 settings (14 months) and used in aggregate.

Security

I take appropriate measures, including HTTPS/SSL, restricted access rights, up-to-date systems/plugins, and backups. Despite these measures, 100% security cannot be guaranteed.

Your rights

You have the right to access, rectification, erasure, restriction, objection, data portability and withdrawal of consent (this does not affect the lawfulness before withdrawal). You can also request that I erase any personal data I hold about you.

If you have any requests, email me at hello@kimhartart.com.

Children

This website is not directed at children under 16. If you believe children’s data was collected without parental consent, please contact me.

External links

This website may contain links to external websites. I am not responsible for their content or privacy practices.

changes

I may update this privacy statement from time to time. The last updated date is always shown at the top. For material changes, I will notify you via the website and/or email where appropriate.