Privacy Policy

Last updated: August 2026

Curiosity Requires Trust

At El Culto, we believe that exploring ideas, art, and culture should never come at the expense of your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit elculto.art, contact us, submit a contribution, or inquire about an artwork.

We are committed to handling your personal data responsibly, transparently, and in accordance with the General Data Protection Regulation (GDPR).

Data Controller

El Culto is an independent cultural institution operated by José Nikolaj Bedoya Cabezas, who is the data controller responsible for processing personal information collected through this website. El Culto is not currently registered as a company, and the controller is therefore a private individual.

Contact
Email: el.culto.official@gmail.com

Information We Collect

Information You Choose to Provide

When you contact us, submit a contribution, or inquire about an artwork, you may provide:

  • Your name — or the alias, artist name, or handle you go by
  • Your email address
  • The content of your message
  • Any additional information you choose to share

You decide what information you provide. A name or alias and an email address are necessary for us to reply to you — without them we cannot respond to your message. Everything else is optional.

Information Collected Automatically

When you visit elculto.art, our hosting provider automatically records the following in its server logs:

  • your IP address
  • the browser and operating system you use
  • the page you requested
  • the date and time of the request

We use this only to operate and secure the website. When you submit a form, we also hold your IP address in temporary memory for up to one minute in order to limit automated abuse. It is not stored afterwards.

We do not build profiles, and we do not make automated decisions about you.

Why We Process Your Information

We process personal information in order to:

  • Respond to inquiries
  • Facilitate communication regarding artworks and exhibitions
  • Review collaboration and contribution submissions
  • Operate and improve the website
  • Maintain the security and functionality of the platform

We only process personal data when we have a lawful basis under the GDPR.

Depending on the situation, this may include:

  • responding to your request before entering into an agreement (Article 6(1)(b) GDPR);
  • our legitimate interest in communicating with visitors and operating El Culto (Article 6(1)(f) GDPR); or
  • your consent where required by law (Article 6(1)(a) GDPR).

Artwork Inquiries

El Culto acts as the initial point of contact between visitors and featured artists.

When you inquire about an artwork, we use the information you provide to:

  • respond to your inquiry;
  • answer your questions;
  • confirm availability; and
  • facilitate communication regarding a potential acquisition.

We only share your information with the relevant artist when this is necessary to handle your inquiry.

Sharing Your Information

We do not sell, rent, or trade personal information.

Where necessary, we may share information with trusted service providers who help us operate the website or provide our services. These providers process data only on our behalf and under appropriate contractual safeguards.

These providers are Resend, which delivers messages submitted through our forms; Vercel, which hosts this website and provides the cookieless analytics described in the Cookies section below; and Google, which provides the email account in which we receive and keep your message. All three process data in the United States, as described under International Transfers below.

We may also disclose information where required by law.

International Transfers

Resend, Vercel, and Google process personal information in the United States, outside the European Economic Area (EEA).

These transfers are protected by the European Commission's Standard Contractual Clauses and, where the provider participates in it, by the EU–U.S. Data Privacy Framework. You are welcome to contact us for further information about these safeguards.

Cookies

El Culto sets no cookies at all — neither necessary nor optional. Because we place no cookies and use no technology that requires it, we do not ask you for cookie consent. If that ever changes, we will ask for your consent first, where the law requires it.

The website does store a small amount of information in your browser's local storage, so it can remember your progress in the interactive parts of the site. This is limited to simple markers and counters, contains no identifier, and never leaves your device. You can clear it at any time in your browser settings.

We use Vercel Web Analytics to understand how visitors use elculto.art. It is cookieless — it does not use cookies or store any device identifiers. It collects only aggregate page views and a small number of anonymous interaction events, and it does not collect personal data. We rely on our legitimate interest in understanding and improving the website (Article 6(1)(f) GDPR), and you have the right to object to this processing at any time.

We embed videos from YouTube. Nothing loads from YouTube until you choose to press play, and we use YouTube's no-cookie domain. If you do press play, YouTube may set cookies under Google's own privacy policy.

How Long We Keep Your Information

Messages sent through our contact, contribution, and artwork inquiry forms are kept for 12 months after our last correspondence with you, unless the conversation is still ongoing or a longer period is required by law.

Server logs are kept for a short period by our hosting provider for security and troubleshooting purposes.

When information is no longer required, it is deleted.

Your Rights

Under the GDPR, you may have the right to:

  • request access to your personal information;
  • request correction of inaccurate information;
  • request deletion of your personal information;
  • request restriction of processing;
  • object to certain processing;
  • request data portability where applicable; and
  • withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at:
el.culto.official@gmail.com

If you believe your personal information has been processed unlawfully, you also have the right to lodge a complaint with your local data protection authority. If you are located in Denmark, this is Datatilsynet.

Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Changes to This Policy

As El Culto evolves, this Privacy Policy may also be updated.

The latest version will always be published on this page together with the revision date.

Contact

If you have any questions regarding this Privacy Policy or how your personal information is handled, you are welcome to contact us at:
el.culto.official@gmail.com

A Final Word

Privacy, like curiosity, begins with respect.

We are committed to treating your information with the same care that we bring to the ideas, people, and works shared through El Culto.

Thank you for being part of our journey.