Updated at
September 22, 2025

Privacy Policy

This Privacy Policy explains how Artwill ("we," "us," or "our") collects, uses, and protects your personal information in compliance with the General Data Protection Regulation (GDPR) and Romanian data protection laws.

1. Data Controller

Artwill Contemporary Art Platform
Operated by: Retros Design Space
Address: Str. Duetului 52-54, Bucureștii Noi, Bucharest, Romania
Contact information for data protection inquiries to be provided

2. Information We Collect

2.1 Exhibition Registration Data

Personal Information: First Name, Last Name
Contact Information: Email Address, Phone Number
Preferences: How you heard about the exhibition
Interest Profile: Your involvement in the arts (enthusiast, curator, artist, collector, student, teacher, gallerist, press, other)
Visit Details: Selected date and time for exhibition visit

2.2 Technical Data

IP address and browser information
Website usage data and analytics
Cookies and similar technologies
Access logs and security monitoring data

2.3 Marketing & Communication Data

Newsletter subscription preferences
Event attendance history
Communication preferences
Feedback and survey responses

3. How We Use Your Information

3.1 Primary Purposes

Exhibition Access: Processing registration and providing QR access codes
Communication: Sending confirmation emails and SMS messages
Security: Maintaining visitor records for security purposes
Event Management: Managing capacity and visitor flow

3.2 Marketing & Engagement

Sending information about upcoming exhibitions and events
Sharing news about artists and cultural programs
Inviting participation in surveys and feedback collection
Providing updates about Artwill's activities and partnerships

3.3 Analytics & Improvement

Understanding visitor demographics and interests
Improving our exhibitions and services
Analyzing website performance and user experience
Planning future cultural programming

4. Legal Basis for Processing

4.1 GDPR Legal Bases

Contract Performance: Processing registration for exhibition access
Consent: Marketing communications and newsletter subscriptions
Legitimate Interest: Security, analytics, and service improvement
Legal Obligation: Compliance with safety and security regulations

5. Data Sharing & Disclosure

5.1 Third-Party Services

We may share data with trusted service providers:

Technology Providers: Website hosting, email services, SMS delivery
Analytics: Website analytics and visitor insights
Security: Access control and monitoring systems
Partners: With explicit consent, information may be shared with cultural partners

5.2 Legal Requirements

We may disclose information when required by law or to protect our rights, safety, and security.

6. International Transfers

Your data is primarily processed within the European Union. Any transfers outside the EU will be protected by appropriate safeguards in accordance with GDPR requirements.

7. Data Retention

7.1 Retention Periods

Exhibition Registration: 2 years after event completion
Marketing Data: Until consent is withdrawn or 3 years of inactivity
Security Logs: 1 year for security monitoring
Website Analytics: 2 years for trend analysis

8. Your Rights Under GDPR

8.1 Individual Rights

Access: Request copies of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your personal data
Restriction: Limit how we process your data
Portability: Receive your data in a portable format
Objection: Object to processing based on legitimate interest
Withdraw Consent: Revoke consent for marketing communications

8.2 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in Section 1. We will respond to your request within 30 days.

9. Cookies & Tracking

9.1 Cookie Types

Essential Cookies: Required for website functionality
Analytics Cookies: Help us understand how visitors use our site
Marketing Cookies: Used to provide relevant advertisements
Preference Cookies: Remember your settings and preferences

9.2 Cookie Management

You can manage cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect website functionality.

10. Security Measures

Encryption of data in transit and at rest
Access controls and authentication systems
Regular security assessments and updates
Staff training on data protection practices
Incident response procedures

11. Changes to Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or prominent website notice. The effective date at the top indicates the most recent revision.

12. Contact & Complaints

12.1 Contact Information

For privacy-related questions or to exercise your rights, contact us at:

Data Protection Contact:
Email and phone number to be provided
Address: Str. Duetului 52-54, Bucureștii Noi, Bucharest, Romania

12.2 Supervisory Authority

You have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP) if you believe we have violated your data protection rights.

By using our services and providing your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your data as described herein.