Privacy Policy
Last updated: 5 October 2026
This policy explains what personal data Owl Agency collects through owlillustration.com and in our work as an illustration and animation agency, why we collect it, who we share it with and what rights you have. It applies to visitors, clients, artists who apply to us or whom we represent, and anyone who contacts us.
1. Who is responsible for your data
The controller of your personal data is:
Owl Agency s. r. o.
Radlinského 7643/45, 811 07 Bratislava, Slovakia
Company ID (IČO): 46 915 826
Registered in the Commercial Register of the Slovak Republic, section Sro, insert no. 85652/B
Email: cleo@owlillustration.com
Owl Agency also runs Minty (tasteminty.com), which has its own privacy policy. We process personal data under the EU General Data Protection Regulation (GDPR) and the Slovak Act No. 18/2018 Coll. on the protection of personal data. We have not appointed a data protection officer; please send any privacy question to the email address above.
2. What we collect and why
2.1 Visiting the website
Data: IP address, browser and device type, the pages you open, the page that sent you to us, and the date and time of each request.
Why: to deliver the website, keep it secure and fix errors. With your consent, we also use Google Analytics to understand how the website is used.
Legal basis: our legitimate interest in running a secure and working website (Art. 6(1)(f) GDPR); for Google Analytics, your consent (Art. 6(1)(a) GDPR and the Slovak Act No. 452/2021 Coll. on electronic communications). You can change your choice at any time under cookie settings at the bottom of every page.
2.2 Clients and project enquiries
Data: your name, company, job title, email address, phone number, the content of your messages and briefs, calls you book with us, quotes, contracts and invoices. Commission requests sent through an artist’s page on Minty are also handled by our team.
Why: to answer your enquiry, find the right artist, prepare quotes, run projects and invoice them. The artists working on your project see the brief and the contact details they need.
Legal basis: steps taken at your request before entering into a contract, and performance of the contract (Art. 6(1)(b) GDPR); our legal obligations under accounting and tax law (Art. 6(1)(c) GDPR); our legitimate interest in communicating with the companies we work with (Art. 6(1)(f) GDPR).
2.3 Newsletter
Data: email address, name, company, and whether you open our emails or click their links.
Legal basis: your consent (Art. 6(1)(a) GDPR), or, if you are already our client, our legitimate interest in telling you about similar services (Art. 6(1)(f) GDPR and the Slovak Act No. 452/2021 Coll. on electronic communications). Every newsletter contains an unsubscribe link.
2.4 Business contacts from public sources
To find companies that may need illustration or animation, we may collect business contact details of people working at those companies: name, job title, company, business email address and professional profile links. We get them from company websites, professional networks and business data providers. We use them only to contact you about our services.
Legal basis: our legitimate interest in promoting our services to businesses (Art. 6(1)(f) GDPR). You can object at any time, and we will stop contacting you and delete your details, keeping only what we need to make sure we do not contact you again.
2.5 Artist applications
Data: your name, email address, country, website and social media links, portfolio images and files, and anything else you include in the application form.
Why: to review your application and decide whether we can represent you. As part of the review, we may analyse your public portfolio website with automated tools, for example to see which clients it lists, and scan it to prepare a draft of your artist page. People at Owl Agency make every decision about applications.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in assessing applications efficiently (Art. 6(1)(f) GDPR).
2.6 Artists we represent
Data: name, legal form, address and correspondence address, date of birth, company ID, tax and VAT numbers, bank details, the signed agreement and its signature record (your typed name, the time, your IP address and browser, and the email confirmation code), your portfolio, bio, portrait, client list and languages, and records of projects and payments.
Why: to conclude and perform the representation agreement, publish your artist page on owlillustration.com, present your work to clients in pitches, newsletters and on social media, manage projects and pay you. Bank details and signed agreements are stored encrypted.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) and our legal obligations under accounting and tax law (Art. 6(1)(c) GDPR).
2.7 Emails
We keep the emails we exchange with you for as long as we need them for the purpose above. Some routine messages are sorted with the help of AI tools, which act on our instructions.
3. Do you have to give us your data?
To apply as an artist, sign a representation agreement or work with us on a project, we need the data marked as required. Without it we cannot work together. Accounting data is required by law. Analytics and the newsletter are optional.
4. Who we share your data with
We use the service providers below. They process personal data on our behalf and under our instructions.
| Provider | What for | Where |
|---|---|---|
| WebSupport s.r.o. | Website hosting and email | Slovakia |
| Hetzner Online GmbH | Hosting of our internal tools and the portfolio website scanner | Germany |
| Cloudflare, Inc. | Protection of our internal tools | EU, USA and global network |
| Tally BV | Artist application form | Belgium |
| Sendinblue SAS (Brevo) | Newsletter | France |
| Google Ireland Limited | Analytics and web fonts | Ireland, USA |
| Calendly LLC | Booking calls | USA |
| Automattic Inc. (Akismet) | Spam filtering of form submissions | USA |
| AI service providers (such as TypeSafe, OpenAI, Google and models accessed through OpenRouter) | Automated review of public portfolio websites and help with sorting emails | USA and other countries |
| Business data providers | Finding business contacts (section 2.4) | EU, USA |
We also share personal data:
- between clients and artists, to the extent a project needs it;
- publicly, for artists we represent, through their artist page and our promotion of their work;
- with our accountants, auditors and legal advisers, who are bound by confidentiality;
- with public authorities and courts, where the law requires it.
We do not sell your personal data.
5. Transfers outside the European Economic Area
Some of the providers above are based in the USA or process data there. Where a provider is certified under the EU-US Data Privacy Framework, we rely on that certification. Otherwise, we rely on the Standard Contractual Clauses approved by the European Commission. You can ask us for more information about these safeguards.
6. How long we keep your data
| Data | How long |
|---|---|
| Representation agreements and artist records | For the term of the agreement, then until the statutory limitation period for legal claims ends |
| Invoices and accounting records | 10 years, as required by Slovak Act No. 431/2002 Coll. on accounting |
| Client projects and emails | For as long as needed for the project and our business relationship, then until the limitation period for legal claims ends |
| Artist applications we do not take on | For as long as we may consider you for future cooperation. You can ask us to delete your application at any time. |
| Business contacts from public sources | Until you object, or until we no longer plan to contact you |
| Newsletter subscription | Until you unsubscribe |
| Analytics data | At most 14 months |
7. Your rights
Under the GDPR you have the right to:
- access your personal data and get a copy of it;
- have inaccurate data corrected;
- have your data deleted, when we no longer need it or have no legal ground to keep it;
- restrict how we use your data in certain situations;
- receive the data you gave us in a machine-readable format and have it transferred to someone else (portability);
- object to processing based on our legitimate interest. If you object to direct marketing, we will stop it in every case;
- withdraw your consent at any time, without affecting what we did before you withdrew it.
To use any of these rights, write to cleo@owlillustration.com. We reply within one month. We may ask you to confirm your identity before we act on a request.
You also have the right to lodge a complaint with a supervisory authority. In Slovakia this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk. You can also contact the authority in the EU country where you live or work.
8. Automated decisions
We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
9. Cookies
This website uses necessary cookies to work and to remember your cookie choice (owl_consent, 6 months). Google Analytics only runs after you allow it in our cookie banner; it then sets the cookies _ga and _ga_*, which last up to 2 years. You can change or withdraw your choice at any time under cookie settings at the bottom of every page, or delete cookies in your browser.
10. Security
We protect your data with encrypted connections (HTTPS), encryption of bank details and signed agreements, restricted access to our systems and regular backups. Only people who need personal data for their work can access it.
11. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last updated. If a change is significant for the artists we represent, we will tell them by email.
12. Contact
For any question about this policy or your personal data, write to cleo@owlillustration.com or to Owl Agency s. r. o., Radlinského 7643/45, 811 07 Bratislava, Slovakia.