Privacy Policy
This Privacy Policy explains how personal data is collected, used and protected through www.marcocondro.com, the official website of contemporary artist Marco Condrò.
Last updated: October 14, 2026
1. Data Controller
The data controller responsible for the processing of personal data is:
Marco Condrò
Rome, Italy
Email: info@marcocondro.com
Website: https://www.marcocondro.com
For any questions concerning personal data or the exercise of privacy rights, visitors may contact the data controller using the email address above.
2. Personal Data Collected
The website may process the following categories of personal data.
Information provided directly by visitors
When visitors use the contact form or communicate by email, the following information may be collected:
- Name.
- Email address.
- Type of enquiry.
- Subject of the message, where provided.
- Message content.
- Any additional information voluntarily included in the correspondence.
Visitors are requested not to submit sensitive personal information unless strictly necessary.
Technical and browsing information
During website navigation, certain technical information may be processed, including IP addresses, browser characteristics, device information, access times, requested pages and technical information required for website operation and security.
Depending on the technologies used, some information may be collected through cookies or similar tools.
3. Purposes and Legal Bases of Processing
Personal data is processed for the following purposes.
Responding to enquiries
To respond to requests concerning artworks, exhibitions, acquisitions, commissions, publications, press enquiries and professional collaborations.
Legal basis: taking steps at the request of the data subject prior to entering into a contract, where applicable (Article 6(1)(b) GDPR), or the legitimate interest in managing professional communications (Article 6(1)(f) GDPR).
Managing professional relationships
To maintain correspondence and manage relationships arising from enquiries, artistic projects or potential collaborations.
Legal basis: performance of a contract or pre-contractual measures, where applicable, or legitimate interests pursued by the data controller.
Website operation and security
To ensure the technical operation, maintenance and security of the website, including prevention of unauthorized access and malicious activity.
Legal basis: legitimate interests in protecting the website and its users, as well as compliance with applicable legal obligations where relevant.
Website statistics
The website uses Jetpack Stats, provided by Automattic, to obtain information about visits and interactions with its content.
The use of non-essential statistical cookies or similar tracking technologies requires consent where applicable.
Further information is provided in the Cookie Policy.
Legal basis: consent (Article 6(1)(a) GDPR) where required for statistical tracking, and legitimate interests where legally permitted for strictly necessary technical processing.
4. Contact Form and Email Communications
Messages submitted through the website’s contact form are used to respond to the visitor’s enquiry and to manage any related professional correspondence.
The information may be transmitted to and stored in the data controller’s email system.
Contact details submitted through the form are not automatically used to subscribe visitors to newsletters or promotional mailing lists.
Providing the information marked as mandatory in the contact form is necessary to submit an enquiry. Failure to provide it may prevent the request from being processed.
5. Cookies and External Services
The website uses WordPress and may employ cookies and similar technologies for essential functions, language preferences, security, statistics and external content.
Some pages include or provide access to content associated with third-party platforms, including:
YouTube (Google): videos relating to artworks and artistic processes. Playing embedded videos may involve the transmission of technical information to Google.
Privacy Policy: https://policies.google.com/privacy
Instagram (Meta): content associated with the artist’s Instagram profile. Where possible, images are displayed using locally stored copies. Direct loading of external content may involve communication with Meta’s services.
Privacy Policy: https://privacycenter.instagram.com/policy/
Jetpack Stats (Automattic): website statistics and analysis of visitor interactions.
Privacy Policy: https://automattic.com/privacy/
The website uses Complianz to provide cookie information and manage visitor consent preferences.
For further information about cookies, their purposes, retention periods and available consent controls, please consult the Cookie Policy:
https://www.marcocondro.com/cookie-policy/
6. Data Recipients and Service Providers
Personal data may be processed by technical service providers involved in website hosting, maintenance, security, email communications and statistical services, to the extent necessary for the purposes described above.
These may include:
- Aruba, for website hosting and associated technical or email services.
- Automattic, in connection with Jetpack services.
- Wordfence, for website security.
- Google and Meta, where visitors interact with content provided by their respective platforms.
Where required, service providers process data under appropriate contractual arrangements and applicable data protection obligations.
Personal data is not sold to third parties.
7. International Data Transfers
Some third-party service providers may process personal data outside the European Economic Area.
Where such transfers occur, they must be carried out in accordance with applicable data protection legislation, including adequacy decisions, appropriate contractual safeguards or other lawful transfer mechanisms.
Additional information about processing by individual providers is available through their respective privacy notices.
8. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.
Correspondence relating to enquiries is retained for the time necessary to respond, manage any subsequent professional communications and, where appropriate, protect legitimate legal interests.
Where an enquiry results in a contractual or commercial relationship, certain records may be retained for longer periods where required by applicable accounting, tax or other legal obligations.
Technical information and cookies are retained according to their respective purposes and applicable retention settings, as described in the Cookie Policy.
9. Data Subject Rights
Under the General Data Protection Regulation (GDPR), individuals may, where applicable:
- Request access to their personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of personal data.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Request data portability where applicable.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Requests may be submitted to:
Individuals also have the right to lodge a complaint with the competent supervisory authority.
In Italy, the supervisory authority is the Garante per la protezione dei dati personali:
10. Data Security
Reasonable technical and organizational measures are adopted to protect personal data against unauthorized access, loss, alteration or improper disclosure.
However, no system for transmitting or storing information online can guarantee absolute security.
11. Automated Decision-Making
The website does not use automated decision-making processes that produce legal effects or similarly significant effects concerning visitors.
12. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in the website, the services used or applicable legal requirements.
The date of the most recent update is indicated at the beginning of this document.
Visitors are encouraged to review this page periodically.