Privacy Policy

1. Who is responsible for your data?

Data controller: Razvan Anghelache

Contact: Razvan.Anghelache.Art@gmail.com

2. What information is processed and why?

Email enquiries

If you contact me by email, I process the email address, name and any other information you include in your message so I can respond and manage the conversation. The legal basis is taking steps at your request before a possible agreement where relevant (GDPR Article 6(1)(b)), or my legitimate interest in responding to enquiries and maintaining professional correspondence (Article 6(1)(f)).

Studio updates newsletter

If you subscribe through the form on the CONTACT page, the form collects your first name and email address. The first name is used to address you personally. The form also records your choice to receive email updates. The purpose is to send occasional information about new artwork, studio activity and upcoming exhibitions.

The legal basis for newsletter messages is your consent (GDPR Article 6(1)(a)). You can withdraw that consent at any time by using the unsubscribe link included in each email. Withdrawing consent does not affect processing carried out before withdrawal.

Basic technical information

The website does not run Google Analytics or install a separate website-owner analytics script, advertising analytics, behavioural profiling or cross-site tracking. Separately, the hosting provider may process technical request and security-log information as part of delivering and protecting the website. Namecheap's published information for its Shared Hosting service describes server logs that can include the visitor's IP address, request date and time, requested resource, response status, response size, referrer and browser user-agent. It also describes aggregated server-log counters such as request hours, approximate IP location, bot IDs, file types, errors, visited URLs and IP addresses. These statistics may be displayed through cPanel tools such as AWStats where available. Namecheap states that log collection cannot be disabled per user on a Shared Hosting account. The exact logs and retention settings depend on the hosting plan and service configuration. See Namecheap's explanation of visitor information on hosted websites, its Privacy Policy and its Data Processing Addendum.

3. Newsletter provider: Mailchimp

The newsletter form is provided by Mailchimp (The Rocket Science Group LLC, an Intuit company). When you submit the form, your first name, email address and marketing-permission choice are sent to Mailchimp so it can manage the subscription and deliver emails on my behalf. Mailchimp also processes technical information needed to receive and validate the form submission.

Mailchimp's European data-transfer information states that European customer data may be transferred to and processed in the United States. Mailchimp refers to its participation in the EU–US Data Privacy Framework and to Standard Contractual Clauses as a safeguard. Further information is available in Mailchimp's European data-transfer information , its Privacy Statement and its Cookie Statement .

The Contact page also loads the jQuery library from Google Hosted Libraries and Mailchimp's form-validation script from an Amazon-hosted content delivery network. The Mailchimp branding image is served from an Intuit content domain. These resource requests may disclose standard connection information, such as your IP address and browser details, to the relevant delivery providers. They are used to display and validate the newsletter form, not to measure visits or build advertising profiles. See Google's Privacy Policy , AWS Privacy Notice and Intuit's Global Privacy Statement .

Newsletter information is kept while you remain subscribed. After you unsubscribe, Mailchimp may retain a minimal suppression or consent record where needed to respect your opt-out and document the subscription history. The subscription form uses an affirmative, initially unticked marketing-permission checkbox.

4. Embedded video and audio players

Some project pages contain video or audio players embedded directly from Vimeo, YouTube or SoundCloud. The players are visible and available on the page. Their iframes use lazy loading where supported, so the browser can defer requesting a player until it approaches the visible part of the page. When a player is requested, your browser connects to the relevant provider.

The provider may receive your IP address, browser and device information, the referring page and information about player use. The provider may also use cookies or similar technologies. Vimeo embeds use its dnt=1 setting, which Vimeo says prevents new non-essential cookies and player analytics during that viewing session; essential security cookies may still be used. YouTube embeds use the privacy-enhanced youtube-nocookie.com domain, which limits how embedded views are used for personalisation. SoundCloud states that its embedded players may collect usage data for analytics purposes and asks website operators to disclose this use. These settings reduce some forms of tracking, but they do not mean that the providers receive no connection data or that every player is cookie-free.

Because these third-party players load as part of the page, the website may make requests to these providers when you open a page containing a player. The providers' own privacy and cookie practices apply to those requests. For details, see the providers' information below.

For details, see the providers' own information: Vimeo Privacy Policy and Vimeo Player Cookies ; Google Privacy Policy and Google cookies information ; SoundCloud Privacy Policy and SoundCloud Cookie Policy .

You can choose whether to play or pause a video or audio item using the controls supplied by the relevant provider. You can also manage or block third-party cookies in your browser settings; doing so may affect some embedded-player features.

5. Social media and external links

Links to Instagram, Facebook and other external websites are ordinary links. No social-media feed or tracking widget is loaded by this website. If you follow an external link, the destination website will process your information under its own privacy policy.

6. How long is information kept?

Email correspondence is kept for as long as needed to respond and manage the enquiry, and for any additional period needed to establish, exercise or defend legal claims. Newsletter information is kept while the subscription is active. A minimal record may be retained after unsubscribe to ensure that the opt-out is respected and to demonstrate the history of consent. Technical hosting logs are retained according to the hosting provider's security and retention settings.

7. Your rights

Depending on the circumstances, you may request access to your personal data, correction, deletion, restriction of processing, objection to processing and data portability. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, email Razvan.Anghelache.Art@gmail.com and describe your request.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es .

8. Security and changes to this policy

Reasonable technical and organisational measures are used to protect information handled through this website and the newsletter. No method of online transmission or storage can be guaranteed to be completely secure.

This policy may be updated when the website's functions or service providers change. The latest version will always be published on this page, with the revision date shown above.