Privacy Policy

This Privacy Policy explains how Graffitifunworld B.V., trading as Graffitifun, processes personal data on graffitifunworld.com and in the related enquiry, booking and community services. It is written under the EU General Data Protection Regulation (GDPR) and describes only the processing that this website actually performs.

1. Who is responsible

Graffitifunworld B.V.
Von Kleistlaan 11 to 3, 3533 BB Utrecht, Netherlands
Represented by Michel Steers, Managing Director
Telephone: +31 6 15828701
Email: info@graffitifunworld.com
Registration: Netherlands Chamber of Commerce (Kamer van Koophandel), Utrecht, number 92239234

We are not legally required to appoint a data protection officer. All privacy requests are handled through the email address above.

2. What we collect and why

2.1 Visiting the website (server logs)

When you open a page, our hosting infrastructure processes technical data such as your IP address, date and time, the requested URL, referrer, and browser and device information. Purpose: delivering the site, security and abuse prevention. Legal basis: legitimate interest (Article 6(1)(f) GDPR). Retention: normally no longer than 30 days unless a record is needed for a security investigation.

2.2 Contact and workshop enquiries

Our contact and quotation forms process the name, email address, optional telephone number, organisation, and any workshop details you describe. Purpose: answering your enquiry and preparing a proposal. Legal basis: steps prior to a contract (Article 6(1)(b) GDPR). Retention: for the duration of the enquiry and up to six months afterwards, unless a booking follows.

2.3 Bookings and invoicing

For confirmed workshops and events we process contact, booking and invoicing data such as organisation name, contact person, address, date, location, group size and agreed prices. Legal basis: performance of a contract (Article 6(1)(b) GDPR) and legal obligation (Article 6(1)(c) GDPR). Retention: up to ten years for accounting records, in line with Dutch tax law.

2.4 Community accounts and submitted content

Creating a community account is optional. We process your email address, username, a hashed password, and any profile details, posts, artwork images, event or group entries and legal wall submissions you choose to publish. Content you publish is visible to other visitors. Legal basis: performance of a contract (Article 6(1)(b) GDPR). Retention: until you delete the account or the content.

2.5 Newsletter

If you sign up for the newsletter we process your email address on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time using the unsubscribe link or by emailing us, after which the address is removed from the mailing list.

2.6 Website assistant

The site includes a chat assistant. The messages you type are sent to an AI model provider to generate an answer. Please do not enter sensitive personal data in the chat. Legal basis: legitimate interest in providing website support (Article 6(1)(f) GDPR).

3. Analytics and advertising

We do not run advertising networks, remarketing pixels or cross-site tracking on this website, and no analytics tags are active on this domain at the time of writing. If we introduce analytics in future it will be loaded only after consent and added to this policy and to the Cookie Policy.

4. Cookies and local storage

We use strictly necessary cookies and browser storage to keep the site working, remember your language choice and keep community members signed in. Full details are in our Cookie Policy.

5. Service providers and recipients

We share personal data only with providers that support the operation of the website, under data processing agreements where required:

  • Cloud hosting, database, authentication and file storage. Our managed cloud backend stores site content, accounts and uploads.
  • Content delivery network. Delivers pages, images and static files.
  • Mapbox. Loads the interactive map on the legal walls pages in your browser, which means your IP address reaches the map provider when the map is displayed.
  • Google Street View Static API. Used by our server to retrieve location imagery for legal wall pages. These requests are made by our server, not by your browser.
  • flagcdn.com. Serves the small country flag images shown in location listings.
  • AI model provider. Processes chat assistant messages and supports content translation.

We do not sell personal data. We disclose data to authorities only where we are legally obliged to do so.

6. International transfers

Our hosting and database are operated within the European Union. Some providers listed above may process limited technical data outside the European Economic Area. Where that happens, transfers rely on the European Commission Standard Contractual Clauses or an adequacy decision.

7. Security

The site is served over HTTPS, passwords are stored as hashes, database access is restricted by row level security rules, and administrative functions require authentication. No system can be guaranteed to be completely secure, so we review our measures regularly.

8. Your rights

Under the GDPR you can ask us to:

  • confirm what personal data we hold and receive a copy (access),
  • correct data that is inaccurate or incomplete (rectification),
  • delete data where there is no further legal ground to keep it (erasure),
  • restrict processing while a request is being assessed,
  • object to processing based on legitimate interest,
  • receive data you provided in a portable, machine readable format,
  • withdraw consent at any time, without affecting processing already carried out.

Send your request to info@graffitifunworld.com. We answer within one month and may ask for information that allows us to verify your identity.

9. Complaints

If you believe we process your data incorrectly, please contact us first so we can resolve it. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), The Hague, Netherlands, or with the supervisory authority in your own country of residence.

10. Changes and contact

We update this policy when our services or processing change. For any privacy question, write to info@graffitifunworld.com or call +31 6 15828701.

Last updated: 22/08/2026