Skip to content
Daleki Art
esen

Personal data

Privacy Policy

Last updated: September 27, 2026

Daleki Art is a conceptual art movement based in Quito. Here we explain what data of yours we use on dalekiart.com, what for, who we share it with, how long we keep it and how you can decide about it. We follow Ecuador's Organic Law on Personal Data Protection (LOPDP) and its General Regulation.

Who is responsible for your data

  • Controller: D-Legacy SAS, an Ecuadorian company domiciled in Quito, Ecuador. Daleki Art is a project of D-Legacy SAS.
  • Email for personal data matters: dalekiart@gmail.com
  • Phone and WhatsApp: +593 99 785 4652

What data we use and why

We only ask for what is needed for each thing you do on the site. If you don't give us a required field on a form, we won't be able to reply through that channel, but you can always write to us on WhatsApp or by email.

Contact form

  • Data: name and email (required); company or institution, job title, phone, city, season of interest, type of inquiry and message (optional).
  • Purpose: to answer your inquiry, prepare a cultural sponsorship proposal for your institution or get to know your work if you are an artist. When you submit the form you get a confirmation email and the team receives a notice with your message.
  • Legal basis: the pre-contractual steps you request (art. 7, item 5, LOPDP).

Curatorial letter

  • Data: email, your name if you enter it, the text and version of the consent you accepted, the date you confirmed, your subscription status and a unique code to unsubscribe.
  • Purpose: to send you the Daleki Art curatorial letter.
  • Legal basis: your consent (arts. 7 and 8 LOPDP). You give it by checking the box on the form and confirming from the email we send you. Without that confirmation we don't write to you.
  • Every letter includes a link to unsubscribe. Unsubscribing is immediate and free.

Art AI

Art AI is the museum's automated assistant and runs on an artificial intelligence model.

  • Data: what you write, Art AI's replies, a random conversation identifier, your browser and device type, the date and technical data about the model's use.
  • If you ask Art AI to have the team contact you and you confirm your details in the conversation, we also record your name, email or WhatsApp and what you share about your interest (for example, your institution or your artistic practice).
  • Purpose: to answer your questions about the museum, keep the conversation going, review the quality of the replies and, if you ask, have the team write to you.
  • Legal basis: your consent, which you give by writing after seeing the chat notice and, for your contact details, by confirming them in the conversation.
  • Please don't share health data, beliefs or other sensitive data in the chat.

When you visit the site

  • Visit measurement: we use Vercel Web Analytics and Vercel Speed Insights to know which pages are visited and how fast they load. They record the page, the referring page, the approximate country or city, the browser, the operating system, the device type and performance metrics. They don't use cookies; each visit is grouped with a temporary identifier that is discarded after 24 hours and we only see aggregate figures. You can turn off this measurement in your browser from the cookie policy.
  • Security: our hosting provider records, for a limited time, the IP address, the date, the page requested and the browser. To prevent abuse, the forms and Art AI count attempts per IP address; we store that count as an encrypted code (hash), never the plain IP, and delete it after two days. Legal basis: the security of our networks and systems (art. 7 LOPDP).
  • Preferences in your browser: we store in your own browser whether you chose dark mode and the identifier of your conversation with Art AI. We explain this in the cookie policy.

WhatsApp and email

If you write to us on WhatsApp or by email, we use your message to reply to you. WhatsApp (Meta) and Gmail (Google) handle those messages under their own policies.

Automated decisions

Art AI replies automatically and can make mistakes. It does not make decisions about you with legal effects or build profiles. Every cultural sponsorship proposal, artist application or agreement is reviewed and decided by a person on the team, and confirmed in writing.

Who we share your data with

We do not hand over or trade your data. It is only handled by the providers we need for the site to work, on our behalf and following our instructions:

  • Vercel: hosts and runs the site, technical logs and cookie-free visit measurement. United States.
  • Supabase: database of contacts, subscriptions and conversations. United States.
  • Resend: sends confirmation emails, notices to the team and the curatorial letter. United States.
  • OpenRouter and Anthropic: connect Art AI to the artificial intelligence model that replies. United States.
  • Google: the team's email where we receive form notices, and team sign-in to the internal panel. United States and other countries.
  • fal.ai: generates concept images for the blog and the letter; it receives no visitor data. United States.

We could also hand over data to an authority when a law or court order requires it.

Data outside Ecuador

The providers on the list are outside Ecuador, mainly in the United States, so your data is processed outside the country. We choose providers with recognized security measures and work with them under terms that require them to use your data only for what we ask of them.

How long we keep your data

We keep your data only as long as we need it for what we explained above; after that we delete or anonymize it.

  • Form inquiries and details left in Art AI: while we follow up on your inquiry and up to two years from the last contact. If your institution signs an agreement, we keep what is needed for as long as it lasts and for the time required by accounting and tax laws.
  • Curatorial letter: while you remain subscribed. If you unsubscribe, we keep only your email and the unsubscribe date so we don't write to you again. If you ask us to delete it, we erase it completely.
  • Conversations with Art AI: up to one year.
  • Abuse-prevention counts: two days.
  • Data stored in your browser: until you delete it.

Your rights

You can ask us, free of charge and at any time, for:

  • Access: to know what data of yours we have and how we use it.
  • Rectification and updating: to correct inaccurate or incomplete data.
  • Deletion: to erase your data when we no longer need it or you withdraw your consent.
  • Objection: to stop using your data for something, including the curatorial letter.
  • Portability: to receive your data in a structured, commonly used format.
  • Suspension of processing while a complaint is reviewed.
  • Not to be subject to decisions based solely on automated processes.
  • To withdraw your consent, without affecting what was done before.

Write to us at dalekiart@gmail.com with the subject "Personal data". Include your name, which right you want to exercise and an email where we can reply. If we need to confirm it's you, we'll ask for the minimum necessary. We reply within ten working days at most.

If we don't reply in time or you disagree with the reply, you can file a complaint with the Superintendency of Personal Data Protection (SPDP) at spdp.gob.ec.

How we protect your data

  • The entire site runs over an encrypted connection (HTTPS).
  • Database access is restricted by security rules; public forms cannot read other people's data.
  • Only the authorized team enters the internal panel, with their Google account and a closed list of emails.
  • Provider access keys live only on the server, never in the browser.
  • The forms and Art AI have usage limits and abuse filters.

If an incident puts your data at risk, we will notify the authority within the legal deadlines and, if there is a risk to your rights, we will let you know by email or on this site.

Minors

The site is intended for adults, artists and institutions. If you are under 15, don't send us personal data without the authorization of your mother, father or legal guardian. If we detect data from a person under 15 without that authorization, we delete it.

Changes to this policy

If we change this policy, we will publish the new version here with its date. If the change affects something you gave us your consent for, we will ask for it again before applying it.

Contact

dalekiart@gmail.com · WhatsApp +593 99 785 4652 · Quito, Ecuador