Privacy Policy

1. Who we are

This website (vartanmotion.tv) is operated by Abel Vartan, a freelance 3D artist and motion designer based in Spain (the "Controller", "we", "us"). For any privacy-related question you can contact us at abel@vartanmotion.tv.

2. Scope

This policy describes how we process personal data when you visit the site, chat with our AI assistant, send us a message through the contact form, or book an introductory call through the calendar.

3. Data we collect and why

a. AI chat assistant

The site features an AI assistant that answers questions about our work. When you interact with it we process:

• the messages you type and the assistant's replies;
• a randomly generated session identifier stored in your browser's local storage to group messages belonging to the same conversation;
• the user-agent string and referring URL of the request.

Conversations are stored in our backend database and, once a conversation has been inactive for several minutes, a transcript is automatically emailed to the site owner so they can follow up if appropriate. The model that generates the answers is operated through the Lovable AI Gateway and runs on Google's Gemini family of models. Please do not share sensitive personal data through the chat.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in operating a functional assistant and following up on commercial enquiries.

b. Contact form

When you send us a message we collect your name, email address, the content of the message, the time the message was sent, and the IP address used to send it (the latter only to prevent abuse). The message is delivered to our inbox via the Gmail API.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

c. Booking a call

When you book an introductory call we collect your name, email address, the date and time slot you select, and any optional notes you provide. We use this information to create a calendar event on our Google Calendar and to send you a confirmation email. We also log the IP address of the booking request to prevent abuse and rate-limit repeated requests.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

d. Technical data

Like any web server, our hosting infrastructure processes basic technical data needed to deliver the site (IP address, browser type, requested URL, timestamp). This data is used for security, debugging and to keep the site running.

Legal basis: legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR).

4. Analytics and tracking

We do not use third-party analytics, advertising pixels, or cross-site tracking technologies. We do not build behavioural profiles of our visitors.

5. Service providers

To deliver the services described above we rely on the following processors:

• Supabase — database and backend hosting (EU/US).
• Cloudflare — edge runtime and content delivery.
• Lovable — application hosting and AI gateway (which proxies requests to Google for the chat assistant).
• Google — Gmail API for transactional email, Google Calendar API for bookings, and Gemini models for the AI assistant.
• YouTube — embedded showreel video via the privacy-enhanced (youtube-nocookie.com) domain.
• Google Fonts — typography served from Google's CDN.

Where these providers are located outside the European Economic Area, transfers are based on the European Commission's Standard Contractual Clauses or on an adequacy decision.

6. Retention

• Chat conversations and transcripts: up to 24 months, or earlier on request.
• Contact-form messages: kept for as long as needed to handle your enquiry and any resulting collaboration.
• Booking records and abuse-prevention logs: up to 12 months.
• Server logs: typically up to 30 days.

7. Your rights

Under the GDPR and applicable Spanish data-protection law you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es). To exercise any of these rights please email abel@vartanmotion.tv.

8. Security

We apply reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS), restricted database access and the use of service-role credentials kept exclusively on the server side.

9. Changes

We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date at the top of this page.