Last updated: June 2026

At The Yellow Artist, accessible from https://theyellowartist.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by us and how we use it, in strict compliance with the General Data Protection Regulation (GDPR).

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us via email.

1. DATA CONTROLLER

• Website: The Yellow Artist (https://theyellowartist.com)
• Purpose: Managing inquiries through the contact form and receiving uploaded multimedia files.
• Contact Email: info@theyellowartist.com

2. INFORMATION WE COLLECT AND WHY

When you use our contact form, we collect the following personal data:

• Identity Data: Name and email address (strictly necessary to respond to your inquiry).
• Uploaded Files: Any document, image, or PDF file you voluntarily upload through the form so we can evaluate your request or project.
• Message Content: Any information you choose to include in the body text of your message.

3. WEBSITE SECURITY & PROTECTION (CLOUDFLARE TURNSTILE ADDENDUM)

To ensure the security of our website, protect your data, and prevent spam or malicious traffic from automated bots, we use the Cloudflare Turnstile service, operated by Cloudflare, Inc.

How it works and what data it processes:

Turnstile non-intrusively analyzes client-side technical signals from the visitor’s browser to distinguish human users from automated scripts. When interacting with our form, Turnstile processes the following technical data («Signals»), which are strictly necessary for this purpose:

• Visitor’s IP address.
• TLS Fingerprint.
• User-Agent Header.
• Sitekey and associated origin.

Legal basis and data processing roles:

• Website Security (Processing as a Data Processor): The Yellow Artist acts as the Data Controller, and Cloudflare acts as the Data Processor to ensure that web requests originate from human users. The legal basis for this processing is our legitimate interest in maintaining a secure, functional website. Cloudflare cannot directly identify any individuals from the Signals collected.
• Improving the Service (Processing as a Data Controller): Cloudflare independently processes these technical signals as a Data Controller under its own legitimate interest to refine its global threat and bot detection capabilities. For more details, please review Cloudflare’s main Privacy Policy or contact Cloudflare’s Data Protection Officer at dpo@cloudflare.com.

4. LEGAL BASIS FOR PROCESSING YOUR DATA

We process your personal data under the following lawful bases:

• Your Explicit Consent: By checking the box «I agree to the Privacy Policy» before submitting the form, you grant us permission to use your name, email, and attached files to handle your inquiry.
• Legitimate Interest: Applied to the technical security of the website and automated spam filtering using tools like Cloudflare Turnstile.

5. DATA RETENTION

The personal data provided through our contact form and any uploaded files will be stored only for as long as strictly necessary to resolve your inquiry or manage the resulting professional relationship. Following this, the data will be securely deleted unless there is a legal obligation to retain it.

6. SHARING DATA WITH THIRD PARTIES

We do not sell, rent, or lease your personal data to third parties. Your data is only processed by:

• Our trusted web hosting providers necessary to keep the website online.
• The Cloudflare Turnstile technical security service solely for the bot-filtering purposes detailed in Section 3.

7. YOUR GDPR DATA PROTECTION RIGHTS

We want to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate.
• The right to erasure («The right to be forgotten»): You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict or object to processing: You have the right to request that we restrict or stop the processing of your personal data, under certain conditions.

If you would like to exercise any of these rights, please contact us directly at our email address.