Privacy Policy

Evoke Art Privacy Policy · Last updated September 1, 2026.

Data Controller and Contact Information

EvokeMedia is the data controller for Evoke Art: CVR No. 42579831, Lokesvej 15, 3400 Hillerød, Denmark. Please email info@evokemedia.dk or call +45 51 49 11 41 if you have questions about your information or wish to exercise your rights.

Registration and Customer Account

We process your email address, phone number (if applicable), account information, and the date, time, and text/version of your registration. We use this information to create and manage your free account and to respond to inquiries. The legal basis is Article 6(1)(b) of the GDPR (the registration or agreement you are requesting). A phone number is optional and does not constitute consent to marketing via phone or text message. An existing account is reused when the email address is already registered.

Opt-in emails about the opening

If you specifically select this option on the form, Evoke Art may send you emails regarding Evoke Art’s opening. Evoke Art is the name of the service and the brand; EvokeMedia is the legal entity behind Evoke Art and is the data controller for these communications. We record your selection, along with the date and version, for documentation purposes. The legal basis is your consent, GDPR Article 6(1)(a). You may withdraw your consent at any time by contacting us; this will not affect your free account or any lawful processing that has already taken place. We do not use this selection as consent for other EvokeMedia newsletters.

Artist Applications

When you submit an application, we process your name, email address, contact and address information, a description of your artistic practice, portfolio links, images, and any other information you provide during the application process. We also store drafts of your application and documentation confirming that the applicant and privacy policy texts were displayed and acknowledged. We use this information to process the application and prepare for a potential collaboration (Article 6(1)(b)). The application does not constitute an artist agreement. If the application is approved, all terms of collaboration will be sent in a separate step, at which point the applicant is free to choose whether to proceed. A public artist profile will not be available via the restricted pages during the application period.

Safety and Technical Information

We and our service providers process necessary technical information, including IP addresses and security logs, to operate and protect the site, prevent misuse, and address errors. This is done based on our legitimate interest in secure operation (Article 6(1)(f)). Passwords are stored as one-way hashes. When you sign in with Google, we process the identity and contact information you grant us access to; we do not receive your Google password.

Suppliers and Disclosure

Relevant information is processed by providers of hosting, security, and email delivery services. The site is hosted by Kinsta. Google is only involved in the login process when you choose to log in with Google. We do not sell your personal information. Government authorities and legal advisors may receive information when required by a specific legal obligation or a necessary legal claim.

If a supplier processes personal data outside the EU/EEA, the transfer must have a valid legal basis, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, along with the necessary supplementary measures. You may contact us for information about the specific recipients and the relevant legal basis for the transfer.

How long do we retain information?

Account information is stored for as long as the account is in use or is necessary for your relationship with us. You may request that the account be closed. The sign-up list is used for sign-ups and is not automatically used as a permanent marketing list. Withdrawn consent is marked so that no further marketing emails are sent on that basis; necessary documentation may be stored separately to document what you have previously agreed to.

Applications that do not result in a partnership are generally retained for up to 12 months after the conclusion of the process, unless a specific legal requirement necessitates longer retention. For an established collaboration, relevant information is retained for as long as the agreement and the need for documentation remain in effect. Security logs and backups follow the vendors’ operational and deletion cycles. Information is deleted or anonymized when the purpose and any legally required retention periods cease to apply.

Existing Orders

Even though the store is temporarily closed, we continue to process necessary information regarding existing purchases, delivery, payment, and returns in order to fulfill agreements and legal requirements (Article 6(1)(b) and (c)). Necessary information may be shared with the payment provider, the artist, and the delivery partner. Accounting records are retained for five years from the end of the fiscal year to which the records relate.

Your Rights

You may request access, rectification, erasure, restriction, and data portability when the conditions are met, and object to processing based on legitimate interests. You may always object to direct marketing and withdraw your consent. We may ask for necessary identification to ensure we do not disclose information to the wrong person. Contact us at info@evokemedia.dk. You may file a complaint with the Danish Data Protection Agency.

Cookies

Login, security, and forms may use technically necessary cookies. Consent to registration does not constitute consent to analytics or marketing cookies. Any non-necessary cookies must be selected separately before they are enabled. You can also manage and delete cookies in your browser; this may affect login and forms.