This English version is provided for convenience only. The Romanian version (“Termeni și Condiții & Politica de Confidențialitate”) governs. In case of discrepancy, the Romanian version prevails.
Last updated: 2 October 2026. This Policy describes how SYNTIA TECH SRL (CUI 37978493, registered office in Bucharest, Sector 1, Str. Ion Câmpineanu, no. 23), as data controller, processes the personal data of users of the artmosphere.ro Platform (customers and artists), in accordance with Regulation (EU) 2016/679 (“GDPR”) and Law No. 190/2018.
1. Categories of data processed
- Identification and contact data: surname, first name, email address, telephone, delivery/billing address.
- Account data: username, password (stored encrypted), order history.
- Artist-specific data: CNP/CUI, address, bank account details, tax status (natural person/sole trader (PFA)), Artworks uploaded, sales reports.
- Payment data: processed directly by the payment processor (Shopify Payments/Stripe); the Operator does not store the full bank card number.
- Technical data: IP address, device/browser type, website usage data, collected through cookies and similar technologies.
- Marketing data: communication preferences, history of interactions with email/social media campaigns, if you have subscribed to the newsletter.
2. Purposes and legal bases of processing
- Performing orders and contracts (including the Artist Collaboration Agreement), basis: performance of a contract (Article 6(1)(b) GDPR).
- Issuing invoices and meeting accounting/tax obligations (including reports on copyright income paid to artists), basis: legal obligation (Article 6(1)(c) GDPR).
- Delivering products, by sending the necessary data to the courier, basis: performance of the contract.
- Marketing communications (newsletter, offers), basis: consent (Article 6(1)(a) GDPR), which may be withdrawn at any time.
- Targeted advertising on social networks (Meta/TikTok/Pinterest pixels), basis: consent, given through the cookie banner.
- Fraud prevention and Platform security, basis: legitimate interest (Article 6(1)(f) GDPR).
- Displaying the artist's name/pseudonym on products and in marketing materials, basis: performance of the Artist Collaboration Agreement, in line with the artist's express agreement given at registration.
3. Recipients of the data
The data may be disclosed to: the e-commerce platform provider (Shopify Inc.), the payment processor (Shopify Payments/Stripe), the courier company (e.g. Sameday), hosting and IT infrastructure providers, the transactional email service provider, the Operator's accountant/chartered accountant, public authorities, where the law so requires, and providers of marketing/analytics tools (Google, Meta, TikTok, Pinterest), to the extent of the consent given.
Some of these providers may process data outside the European Economic Area; in these cases, the transfer is made with appropriate safeguards (standard contractual clauses approved by the European Commission or adequacy decisions).
4. Storage period
- Customer account data: for as long as the account exists, plus 3 years from the last activity, to handle any requests/disputes.
- Order and invoice data: 10 years, in accordance with accounting and tax legislation (Accounting Law No. 82/1991).
- Artist Collaboration Agreement data and royalty reports: for the term of the contract, plus the applicable limitation/tax archiving period (currently up to 10 years).
- Consent-based marketing data: until consent is withdrawn.
5. Rights of data subjects
Under the conditions and within the limits of the GDPR, you have the right of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection to processing (including to direct marketing) and the right not to be subject to a decision based solely on automated processing. Requests may be sent to privacy@artmosphere.ro and will receive a reply within no more than one month. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
6. Cookies
The Platform uses strictly necessary cookies (operation of the shopping cart, authentication), analytics cookies (usage statistics) and marketing cookies (targeted advertising); the latter are set only with your consent, given through the banner displayed on your first visit and manageable at any time from the website's cookie settings.
7. Minors
The Platform is not specifically aimed at minors under 16. If we learn that we have collected data from a minor under this age without parental consent, we will delete that data.
8. Data security
The Operator implements appropriate technical and organisational measures (encryption in transit, restricted role-based access, regular backups) to protect data against unauthorised access, loss or destruction.
9. Changes to the Policy
This Policy may be updated from time to time; the version in force is always the one published on the Platform, in the user account and in the artist account, alongside the signed Collaboration Agreement.
10. Contact
For any question about the processing of personal data, you can contact us at privacy@artmosphere.ro or at the registered office address stated at the beginning of this document.
