MIHAELA BOZARIU / INFORMATION
Privacy Policy
Personal data used when you visit the gallery or contact the artist.
Updated 12 October 2026
1. Controller
BOZARIU MIHAELA ÎNTREPRINDERE INDIVIDUALĂ · CUI 55619773 · Registrul Comerțului F2026044449005. Sat Rediu, Comuna Rediu, Județul Iași, Șoseaua Valea Rediului nr. 54, Bl. C1, Etaj demisol 2, Ap. 5, România. Email: [email protected] · Telefon: +40 756 931 590.
2. Data and sources
You provide your name, email, any phone number, enquiry subject, message and the artwork you are interested in. A direct sale may require billing and delivery addresses and transaction details. Visits generate technical data including IP, time, URL, browser information and security events. Do not send sensitive information or full card numbers.
3. Purposes and legal bases
Purchase enquiries, preparations and contract performance rely on GDPR Article 6(1)(b). Other messages and service protection rely on the legitimate interests of communication and abuse prevention, Article 6(1)(f). Mandatory records rely on legal obligations, Article 6(1)(c). Optional tools requiring permission rely on consent, Article 6(1)(a). No analytics or marketing trackers are activated in the current public gallery code.
4. Required information
An email and the enquiry content are needed for an email response; form fields identify and manage the enquiry. Additional details are optional unless needed for a purchase. Required billing and delivery information is necessary to fulfil a sale. Browsing does not require a purchase or buyer account.
5. Recipients
ROMARG infrastructure hosts the site and Cloudflare provides delivery and security. Correspondence to the public address is handled through Gmail/Google. Necessary sales information may be shared with the carrier, accountant, bank and competent authorities. We do not sell personal data. Stripe online payment is not active in this release.
6. International transfers
Cloudflare and Google may process data outside the EEA. Relevant transfers use applicable adequacy decisions for eligible recipients or standard contractual clauses and appropriate supplementary safeguards. Ask the controller for details and copies of relevant safeguards. Provider policies explain their own activities.
7. Retention
Messages remain for as long as needed to handle the enquiry and any relationship or dispute; one fixed duration does not fit every exchange. Transaction and tax records follow applicable statutory periods. Technical logs depend on security needs and provider settings; incidents may require longer retention until resolved. Ask for the period or criteria applicable to your data. mb_consent lasts up to 12 months and administrator sessions up to 10 hours.
8. Rights
Subject to GDPR conditions you may request access, correction, erasure, restriction and portability. You may object to legitimate-interest processing; direct-marketing objections are respected without further justification. Consent may be withdrawn without affecting past lawful processing. Mandatory retention duties may limit erasure.
9. Requests and complaints
Email [email protected]. Identity checks are proportionate and used only when necessary. We normally respond within one month; a justified extension of up to two additional months is notified during the first month. Requests are generally free, with limited GDPR exceptions. You may complain to ANSPDCP at www.dataprotection.ro or your competent supervisory authority and seek judicial remedies.
10. Security and automation
HTTPS and controlled administration access protect the service, without an absolute security guarantee. We do not use the gallery for solely automated decisions with legal or similarly significant effects or commercial profiling.
11. Minors and updates
The gallery can be viewed without purchasing. We do not intentionally request sensitive information about children. A minor’s purchase enquiry requires involvement of a legal representative where required by law. Updates are dated on this page.