1. Data Controller
Montecristo International OÜ, Sakala 7-2, EE-10141 Tallinn, Estonia (RC 14898654, VAT EE102232323) is the data controller for all personal data processed through hansemedia.art.
Contact: shop@montecristo.it
2. Data We Collect
When you place an order, we collect:
Name, billing and shipping address, email address, phone number, and payment information. Payment data is processed directly by Revolut and is never stored on our servers.
If you subscribe to marketing communications (optional checkbox at checkout), we store your email address for this purpose.
3. Purpose of Processing
We process your personal data for the following purposes:
Order fulfilment: to process, produce, and ship your order.
Legal obligations: to generate invoices and comply with tax and accounting regulations.
Communication: to send order confirmations, shipping updates, and respond to inquiries.
Marketing (only with your consent): to inform you about MARILYN100 exhibitions, new releases, and collector opportunities.
4. Legal Basis
Contract performance (Art. 6(1)(b) GDPR): processing necessary to fulfil your order.
Legal obligation (Art. 6(1)(c) GDPR): tax and accounting compliance.
Consent (Art. 6(1)(a) GDPR): marketing communications, which you may withdraw at any time.
Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention and website security.
5. Data Sharing
We share your data only with the following third parties, strictly for order fulfilment:
Printful (production and shipping of printed products): name, shipping address.
Revolut (payment processing): payment data.
Brevo (transactional emails): name, email address.
We do not sell, rent, or share your personal data with any other third party for marketing purposes.
6. Data Retention
Order data is retained for 7 years to comply with Estonian accounting regulations. Marketing consent data is retained until you withdraw your consent. You may request deletion of your data at any time, subject to legal retention obligations.
7. Cookies and Tracking
This website does not use cookies for tracking, profiling, or third-party analytics. Essential cookies required for the shopping cart and checkout functionality are used solely for technical purposes and do not collect personal data beyond what is necessary for the transaction.
8. Your Rights
Under the GDPR, you have the right to:
Access your personal data.
Rectify inaccurate data.
Request deletion of your data (right to be forgotten).
Restrict or object to processing.
Data portability.
Withdraw consent for marketing communications at any time.
To exercise any of these rights, contact us at shop@montecristo.it.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee.
9. Security
We implement appropriate technical and organisational measures to protect your personal data, including SSL encryption for all data transmission and secure payment processing via Revolut.
10. Changes
We may update this Privacy Policy from time to time. The current version is always available on this page.
Last updated: May 2026