Legal notice and privacy policy

Introduction

This page contains the legal notice for boriskislitsin.com, as required by Article 10 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), and explains how personal data is collected, used and protected when you visit the website or contact me about my professional services.

I process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Website owner and data controller

Name: Boris Kislitsin

Legal status: Self-employed professional (autónomo), registered in Spain

NIE: Z0438140H

Address: 10-114 Paseig del Saladar, 03700 Dénia, Alicante, Comunidad Valenciana, Spain

Email: hello@boriskislitsin.com

Website: https://boriskislitsin.com

Activity: museum and cultural strategy, curatorial and concept development, and creative direction services

2. Data I collect

• Contact data: your name, email address and anything you send through the contact form or by email, including the subject, message and links to additional materials.
• Professional correspondence: project details, enquiries, proposals and information about potential or ongoing collaborations.
• Technical data: IP address, browser and device information, and server logs needed to run and secure the website.
• Usage statistics: aggregated, cookie-free statistics on visits, pages viewed and referring websites, collected by Framer's built-in analytics.

Providing personal data is voluntary. Without your name and email address, I cannot reply to your enquiry.

3. Purposes and legal bases

• Replying to enquiries and preparing proposals: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in managing professional communications (Art. 6(1)(f) GDPR).
• Providing commissioned services: performance of a contract (Art. 6(1)(b) GDPR).
• Accounting and tax obligations: legal obligation (Art. 6(1)(c) GDPR).
• Website operation, security and usage statistics: my legitimate interest in running a secure website and understanding how it is used (Art. 6(1)(f) GDPR).

I do not sell personal data, do not use enquiries for unsolicited marketing, and do not carry out automated decision-making or profiling.

4. Website statistics

This website uses Framer's built-in analytics to measure visits in aggregate. It does not use cookies, does not store data on your device and does not create individual visitor profiles. The statistics are used only to understand which content is useful and to improve the website.

5. Cookies

This website uses only the strictly necessary technical storage it needs to function. No analytics, advertising or tracking cookies are used, so no cookie consent is required.

If this changes, this page will be updated and your consent will be requested before any optional cookies are set.

6. Service providers and international transfers

I use the following providers, which process data on my behalf:

• Framer B.V. (Netherlands): website hosting, the contact form and website statistics.
• Google Ireland Limited: email, through Google Workspace.

Some of these providers may transfer data to the United States. Such transfers rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

7. Retention

• Enquiries that do not lead to a commission: deleted 12 months after our last contact.
• Contracts, invoices and related correspondence: kept for 6 years, as required by the Spanish Commercial Code (art. 30), which also covers tax limitation periods.
• Server and security logs: kept according to the hosting provider's settings.
• Usage statistics: kept in aggregated form only.

After these periods, data is deleted or anonymised.

8. Your rights

Under the GDPR, you have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion;
• restrict or object to processing;
• request data portability;
• withdraw consent at any time where processing is based on consent, without affecting earlier processing.

To exercise these rights, write to hello@boriskislitsin.com. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es

9. Security

I use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure.

10. Intellectual property

All content on this website, including texts, images, project descriptions and design, belongs to Boris Kislitsin or is used with the permission of its owners. Project images are credited where required. Reproduction, distribution or modification without prior written permission is not allowed, except for private, non-commercial viewing.

11. Liability and external links

I take care to keep the information on this website accurate, but I cannot guarantee that it is complete or free of errors. I am not liable for damage arising from use of the website or from interruptions to its availability.

Links to external websites are provided for information. I have no control over their content or privacy practices and accept no responsibility for them.

12. Applicable law and jurisdiction

This legal notice and privacy policy are governed by Spanish law. Disputes are submitted to the courts of Dénia, Spain, unless the law grants consumers the right to go to the courts of their own domicile.

13. Changes

This page may be updated to reflect changes to the website, my services or the law. The current version and its date are always published here.

14. Contact

Boris Kislitsin · Independent Museum & Cultural Strategy Practice

hello@boriskislitsin.com · 10-114 Paseig del Saladar, 03700 Dénia, Alicante, Spain