Privacy Policy

The data controller responsible for the processing of personal data through this website is:

• Name: Mirela Bichigeanu
• Location: Bucharest, Romania
• Email: contact@gmail.com
• Telephone: +40 722 579 818

No Data Protection Officer has been appointed, as the nature and scale of the processing carried out through this website do not currently require one.

Depending on how you use the website, the following categories of personal data may be collected:

• Contact information: your name, email address, telephone number and any other details you choose to provide.
• Message content: information included in an enquiry, request, proposal or other communication.
• Professional information: your organisation, professional role or project details, when relevant to your enquiry.
• Technical information: IP address, browser type, device type, operating system, referring page, pages visited and approximate date and time of access.
• Cookie and consent information: cookie preferences and records of any consent given or withdrawn.

Please do not submit sensitive personal data through the contact form unless it is strictly necessary for your request.

Personal data may be processed for the following purposes and on the following legal bases:

• Responding to enquiries and messages: processing is based on steps taken at your request before entering into an agreement or on legitimate interests in managing correspondence.
• Discussing commissions, artworks, collaborations, courses or projects: processing may be necessary to take steps before entering into a contract or to perform an existing agreement.
• Operating and securing the website: technical data may be processed on the basis of legitimate interests in maintaining a secure, reliable and functional website.
• Website analytics: where non-essential analytics technologies are used, processing is based on your consent.
• Compliance with legal obligations: certain data may be processed or retained where required by applicable law.
• Establishing or defending legal claims: relevant information may be processed on the basis of legitimate interests.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Cookies are small text files stored on your device when you visit a website. This website may use the following categories:

• Strictly necessary cookies: required for security, basic website functions, cookie preference management and correct page operation.
• Analytics cookies: used, where enabled and accepted, to understand how visitors interact with the website and to improve its structure and content.
• Third-party resources: services such as externally hosted fonts or embedded content may receive technical connection data, including your IP address, when these resources are loaded.

Non-essential cookies should only be activated after you have provided consent through the cookie banner. You may change or withdraw your preferences at any time through the cookie settings available on the website. You can also restrict cookies through your browser, although some website functions may be affected.

Personal data is not sold. It may be disclosed only where necessary to trusted service providers that support the operation of the website or communication with visitors.

These providers may include:

• website hosting and technical maintenance providers;
• website security, backup and spam-prevention providers;
• email and communication service providers;
• analytics providers, where such services are enabled and accepted;
• professional advisers or public authorities where legally required.

Service providers are permitted to process personal data only for the relevant service and subject to appropriate confidentiality and data-protection obligations.

Some technology or communication providers may process data outside the European Economic Area. Where this occurs, appropriate safeguards will be relied upon, such as an adequacy decision issued by the European Commission or approved Standard Contractual Clauses.

You may request further information about the safeguards applicable to a specific transfer by using the contact details in this policy.

Personal data is retained only for as long as necessary for the purpose for which it was collected and to comply with applicable legal obligations.

• General enquiries and correspondence are normally retained for up to three years after the last meaningful communication.
• Information relating to contracts, payments or legal obligations may be retained for the periods required by applicable law.
• Technical security logs may be retained for a limited period necessary to detect and investigate security incidents.
• Consent records may be retained for as long as necessary to demonstrate compliance with data-protection requirements.

Data may be retained for a longer period where necessary for the establishment, exercise or defence of legal claims.

Reasonable technical and organisational measures are used to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These may include encrypted website connections, access controls, software updates, backups and security monitoring.

No method of internet transmission or electronic storage is completely secure. While appropriate safeguards are used, absolute security cannot be guaranteed.

Subject to the conditions established by the GDPR, you may have the following rights:

• the right to be informed about the processing of your data;
• the right to request access to your personal data;
• the right to request correction of inaccurate or incomplete data;
• the right to request erasure of your personal data;
• the right to request restriction of processing;
• the right to object to processing based on legitimate interests;
• the right to data portability where legally applicable;
• the right to withdraw consent at any time;
• the right not to be subject to certain solely automated decisions.

This website does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise a right, send a request to contact@gmail.com . You may be asked to provide information necessary to verify your identity. Requests will normally be answered within one month, as required by the GDPR.

You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), through www.dataprotection.ro .

This website is intended as an artistic and professional portfolio and is not directed specifically at children. Personal data from children is not knowingly collected for marketing or profiling purposes.

If you believe that a child has submitted personal information through the website without appropriate authorisation, please make contact so that the situation can be reviewed and the data deleted where appropriate.

The website may contain links to external websites, social media profiles, publications or other third-party resources. Once you leave this website, the processing of your data is governed by the privacy policies of the relevant third parties.

This Privacy Policy does not cover the privacy practices or content of external websites.

This Privacy Policy may be updated when the website, the services used or applicable legal requirements change. The latest version will always be published on this page, together with the date of the most recent update.

Material changes affecting how personal data is processed will be communicated through the website or by another appropriate method where required.