Privacy statement

This website belongs to Urša Prek, Temporary Art Centre, Vonderweg 1, 5611 BK Eindhoven, the Netherlands (Chamber of Commerce number 76577163). You can reach me with the contact form. This page says which personal data the website handles, why, and what your rights are.

What I use and why

The contact form. Your name, your e-mail address and your message, to answer you. The message is sent to my mailbox and kept in the website. I remove it within a year after our last contact.

An order in the shop. Your name, address, e-mail address, what you ordered and whether it is paid. I need these to carry out the contract with you: to send your order and to write to you about it. Without them I cannot deliver. The law obliges me to keep my bookkeeping, with the orders in it, for seven years.

Paying. Payments are handled by Stripe (Stripe Payments Europe Ltd, Ireland). Your card or bank details go straight to Stripe; I do not see or store them. See Stripe’s privacy policy.

Withdrawing from a contract. What you fill in on that form, to handle your withdrawal and repay you.

Who else gets your data

Only the parties I need to run the website and the shop: the hosting company where the website, its data and the visitor statistics are stored (Neoserv, run by Avant.Si d.o.o., Slovenia), the payment provider (Stripe), the carrier that brings your parcel (your name and address) and, when the law asks for it, the tax office. I do not sell or pass on your data for anything else.

Cookies and other companies’ services

The website sets no advertising cookies. The shop sets cookies that are needed for the cart and the checkout. On the pages of the items and at the checkout the payment provider Stripe sets two cookies against fraud (__stripe_mid, one year, and __stripe_sid, 30 minutes). The visitor statistics set the three cookies described below. The typeface is loaded from Adobe Fonts; Adobe then receives your IP address. Some project pages show a video from YouTube or Vimeo; those companies then receive your IP address and may set cookies of their own.

Stripe, Adobe, Google (YouTube) and Vimeo are based in the United States or use servers there. They handle data under the safeguards European law requires; their own privacy statements say how.

Visitor statistics

To see how the website and the shop are used, and to make them better, I measure visits with Matomo. Matomo runs on this website’s own server at the hosting company. The statistics stay there, only the people who run this website can see them, and they are not shared with, sold to or combined with anyone or anything else.

I can also follow the number of visits as they come in, for example on a busy day in the studio. I do not use this to find out which visit belongs to someone I see there.

What is recorded. The pages you view, how long you stay on them, how far you scroll down and how fast they load; which projects and shop items you see and click, and which menu you use; the filters you choose, the images you open large, the sound pieces and videos you play and how far, the files you download and the links you follow to other websites, such as Instagram or the newsletter; searches on this website, pages that do not exist and technical errors on a page; whether a contact message was sent; the items and shop categories you look at and put in the cart, also when you do not order, and whether you start the checkout; the website, campaign or QR code that brought you here; your browser, operating system, device, screen size and language, and the time of day on your device; and your approximate location (country, region and city). When you order, the statistics record what was ordered, the amount and the time; the order number is replaced by a random code.

From this I count how often a visit leads to a message, a click to Instagram, Facebook or the newsletter, a look at the route to the studio, playing a sound piece or video, a checkout or an order. My QR codes (at the studio, next to a work, on a card or a poster) open the website with the name of that code, such as “window” or “business card”, so I can count the visits each code brings; that name is the same for everyone who scans the code and says nothing about who you are. A code that leads to Instagram, Facebook or my newsletter passes through this website for a moment: the website counts the scan in the same way, with your shortened IP address and your browser, and then sends you on.

Your IP address is used to look up your approximate location. The statistics store it only shortened, with the last two of its four parts removed. When your cart changes without a new page being loaded, the website keeps the full address with that change until it is counted, at most two days. The statistics are not linked to your name, e-mail address or customer account. An order in them could in theory be matched to the order in the shop by its time and contents; I do not do that.

Cookies. Matomo sets three cookies that only this website reads: _pk_id recognises a returning browser (13 months), _pk_ses holds one visit together (30 minutes) and _pk_ref remembers which website, campaign or QR code brought you here (6 months).

How long. The details of each visit are deleted after about six months (old details are cleared once a week). After that only totals remain, such as the number of visits per month, which say nothing about you.

Why this is allowed. I have a legitimate interest in a website and a shop that work well (Article 6(1)(f) GDPR). Cookies that only measure the quality or effectiveness of a website and have little or no effect on your privacy need no permission under Dutch law (Article 11.7a(3)(b) of the Telecommunications Act).

Your right to object to the statistics

You can object to being measured at any time. The simplest way is to switch on Global Privacy Control or “Do Not Track” in your browser: this website then measures nothing about you and sets no statistics cookie. You can also write to me with the contact form; tell me the date and approximate time of your visits and I will delete the visits I can find. Deleting the _pk_ cookies makes your browser count as a new visitor from your next visit on.

Your rights

You can ask me which data I have about you, to correct or remove them, to limit their use or to hand them over to you, and you can object to their use. Write to me with the contact form. If you think I handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Version of 24 October 2026.