Privacy policy

1. Who processes your data

The data controller is ANA SAVU ART STUDIO S.R.L., registered at Str. Lt. Radu-Beller nr. 3–5, Sector 1, Bucharest, Romania, Romanian tax identification code (CUI) 55556330. For privacy questions, contact studio@anasavuart.ro.

2. The form and information you provide

The form contains your name, email, required phone number, enquiry type and message. A reference photograph is required for a custom portrait. Once activated, enquiries are submitted through Netlify Forms rather than the visitor's email app.

Submission is not active in this preview. Photo submissions remain disabled until protected storage is configured. The intended notification address is studio@anasavuart.ro; it must be configured in the Netlify account before launch.

3. Purpose of processing

Data is used to respond to painting enquiries, discuss potential commissions and manage confirmed orders.

The appropriate legal bases for each purpose must be confirmed by the controller before launch.

4. Recipients and retention

Reference photographs received for custom portraits are deleted within 90 days of delivery of the artwork. If an enquiry does not lead to an order, the photographs are deleted within 90 days of the last discussion about that enquiry.

This period applies to photographs in emails, upload storage and copies downloaded by the studio. If particular photographs are needed to resolve a complaint or establish, exercise or defend a legal claim, we retain only the necessary copies with restricted access for as long as needed for that purpose, then delete them.

The 90-day period applies to reference photographs, not all order documents. Invoices and accounting documents are retained for the period required by applicable law. Other order records are retained only as long as necessary to meet legal obligations or resolve complaints and defend legal claims.

Hosting, email and photo-storage providers, their roles and any international transfers must be documented before publication, based on the solution actually used.

5. Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and may object to processing. Where processing relies on consent, you may withdraw it for the future.

You can contact the controller at studio@anasavuart.ro and lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing.

European Commission — data protection information and individual rights.

6. Cookies and Google Ads measurement

We use Google Ads to measure advertising effectiveness only with your permission. The Google tag does not load before acceptance or when you reject. Rejecting does not prevent you from using the website or submitting an enquiry.

After acceptance, Google may process cookie and ad-click identifiers, your IP address, browser and device information, and pages visited. These cookies help us measure the effectiveness of our advertisements and the enquiries they generate. We do not enable personalised advertising or enhanced conversions, and do not send the contents of the form fields to Google: name, email, phone, message or photographs. Enquiry measurement, when configured in Google Ads, occurs only after a confirmed form submission and with your permission.

The legal basis is consent. Your Accept/Reject choice is stored in your browser's local storage for up to 180 days to respect your preference. You can withdraw or change your choice using Cookie settings in the footer of every page. Withdrawal stops future measurement; it does not invalidate lawful processing that occurred before withdrawal. You can also delete cookies in your browser settings.

Google services may involve processing outside the European Economic Area. Information about Google, recipients, cookie lifetimes and transfer mechanisms is available in Google's Privacy Policy and Google's cookie information.