PRIVACY

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are any data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy below.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information about the responsible party” in this privacy policy.

How do we collect your data?

Your data is collected partly through the information you provide (e.g., filling out a contact form). Other data is automatically or upon your consent collected when visiting the website by our IT systems, mainly technical data (e.g., browser type, operating system, time of page access). Collection occurs automatically as soon as you access the website.

What do we use your data for?

Some data is collected to ensure the website functions correctly. Other data may be used to analyze user behavior.

Your Rights Regarding Data

You have the right to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke it at any time. Additionally, you may request restrictions on processing and have the right to lodge a complaint with the competent supervisory authority.

Analytics and Third-Party Tools

Visiting this website may result in statistical evaluation of your browsing behavior, mainly via analytics programs. Detailed information is provided in the following privacy policy.

2. Hosting

We host our website content with the following provider:
IONOS

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit our website, IONOS collects various log files, including your IP addresses. More information in IONOS’ privacy policy: https://www.ionos.de/terms-gtc/terms-privacy

Order Processing

We have a data processing agreement with IONOS ensuring that your personal data is processed only according to our instructions and in compliance with GDPR.

3. General Information and Mandatory Details

Privacy

The operators of this site take the protection of your personal data seriously. We handle your data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Using this website may involve collecting various personal data. This policy explains what data we collect, how we use it, and the purposes. Internet data transmission may have security gaps; complete protection from third-party access is not possible.

Information About the Responsible Party

The responsible party for data processing on this website is:
Foundation ROSAN-ART
ul. 1 Maja 27/17
58-500 Jelenia Gora
Registration Number: KRS 0000541686
Phone: +48 662741349
Email: rosanart.eu@gmail.com

Data Retention

Unless specified otherwise, your personal data is retained until the purpose for data processing no longer applies, unless you request deletion or withdraw consent.

Legal Basis

If you have consented, we process your personal data based on Art. 6(1)(a) GDPR. Contract-related processing occurs under Art. 6(1)(b) GDPR. Legal obligations are processed under Art. 6(1)(c) GDPR. Processing can also be based on legitimate interest under Art. 6(1)(f) GDPR.

Recipients of Personal Data

We collaborate with external parties where necessary. Personal data is shared only when required for contract fulfillment, legal obligations, or based on a valid processing contract.

Revoking Consent

You can revoke consent at any time. This does not affect the legality of processing until revocation.

Right to Object and Direct Marketing

You have the right to object to data processing in specific situations and to direct marketing.

Right to Complain

You have the right to lodge a complaint with a supervisory authority in case of GDPR violations.

Right to Data Portability

You can request your data in a machine-readable format and transfer it to another controller if technically feasible.

Access, Correction, and Deletion

You have the right to free information about your stored personal data, its origin, recipients, and purpose, as well as the right to correct or delete it.

Right to Restrict Processing

You can request restriction of processing under certain conditions.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security, visible via “https://” and a padlock in the browser.

4. Data Collection on this Website

Cookies

Our website uses cookies, small data files stored on your device. Session cookies are deleted after your visit; persistent cookies remain until you delete them. Cookies can be first-party or third-party. Necessary cookies are processed under Art. 6(1)(f) GDPR; consented cookies under Art. 6(1)(a) GDPR and §25 TTDSG. You can configure your browser to manage cookies.

Server Log Files

The provider collects server log files, including browser type, OS, referrer URL, hostname, time, and IP address, for legitimate interest under Art. 6(1)(f) GDPR.

Contact Form

Data from contact forms is stored for processing requests. Processing is based on Art. 6(1)(b) GDPR (contract) or Art. 6(1)(f) GDPR (legitimate interest), or consent (Art. 6(1)(a) GDPR).

Email, Phone, Fax Inquiries

Data from inquiries via email, phone, or fax is stored for processing purposes, similar legal basis as above.

5. Plugins and Tools

YouTube

This website embeds YouTube videos. Provider: Google Ireland Limited. Connection is established to YouTube servers when visiting pages with embedded videos. YouTube may store cookies or use device fingerprinting. More info: https://policies.google.com/privacy?hl=en

Google Fonts (Local Hosting)

Google Fonts are locally hosted. No connection to Google servers occurs. More info: https://developers.google.com/fonts/faq

Google Maps

Google Maps is used. IP address is stored and transmitted to Google servers in the USA. Processing based on legitimate interest (Art. 6(1)(f) GDPR). Data transfer to the USA uses EU Standard Contractual Clauses. More info: https://policies.google.com/privacy?hl=en