Privacy Policy

Last updated on November 2, 2026.

This policy explains what personal data ianculescu.com collects, why, and what your rights are. The site is kept deliberately simple: it collects only what is needed to answer your messages and, if you ask for it, to send studio news.

Who is responsible for your data

The data controller is Cristian Ianculescu, Via Pescarella, 22 int, 55045 Pietrasanta LU, Italy Email: studio@ianculescu.com

For any question about this policy or your data, write to studio@ianculescu.com.

What we collect and why

Contact and commission forms

  • What: your name, email, message, and anything you choose to include (for example project details, location or budget).

  • Why: to reply to inquiries about acquisitions, commissions, press or exhibitions, and to prepare a quote or sale.

  • Legal basis: steps taken at your request before a contract, and our legitimate interest in answering messages (GDPR Art. 6(1)(b) and (f)).

Newsletter

  • What: your email address.

  • Why: to send occasional studio news about new work, exhibitions and process, about four times a year.

  • Legal basis: your consent (Art. 6(1)(a)). You can withdraw it anytime with the unsubscribe link in every email.

Site analytics

  • What: pages visited, approximate location, device and browser, and the site that referred you.

  • Why: to understand, in aggregate, how the site is used.

  • Legal basis: your consent through the cookie banner (Art. 6(1)(a)).

Spam protection (Google reCAPTCHA)

  • What: technical data about your device and how you interact with the page.

  • Why: to keep spam and automated abuse out of the forms.

  • Legal basis: our legitimate interest in keeping the site secure (Art. 6(1)(f)).

Purchases and commissions

  • What: name, address, payment and shipping details.

  • Why: to complete a sale, ship and install work, and meet tax and accounting obligations.

  • Legal basis: contract and legal obligation (Art. 6(1)(b) and (c)).

Purchases are arranged directly with the artist or through a representing gallery; the site itself has no online checkout. We don't sell your data, use it for advertising, or make automated decisions about you.

Who processes your data for us

We use a small number of service providers, each bound by data-processing terms:

  • Squarespace (Squarespace Ireland Limited, with its parent Squarespace, Inc. in the United States) - hosts the website, receives form submissions, and runs site analytics and the cookie banner.

  • Newsletter provider: Squarespace Email Campaigns - stores newsletter subscribers and sends the newsletter.

  • Google (Google Ireland Limited / Google LLC) - provides reCAPTCHA spam protection and the studio's email (Gmail), where form messages are received.

  • Representing galleries and shippers- only when needed to complete a sale, delivery or installation you've asked for.

Transfers outside the EU. Some of these providers process data in the United States. These transfers rely on safeguards recognised under the GDPR: the EU–US Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses.

How long we keep it

  • Messages and inquiries: up to 2 years after our last exchange, unless they lead to a sale or commission.

  • Sale and commission records: 10 years, as required by Italian tax and accounting law.

  • Newsletter: until you unsubscribe.

  • Analytics cookies: see the table below.

Cookies

Cookies are small files stored by your browser. Strictly necessary cookies are always on. Analytics cookies are set only if you accept them in the cookie banner, and you can change your choice at any time by clearing cookies for this site.

Strictly necessary (always on)

  • crumb (Squarespace, session): protects forms against cross-site request forgery.

  • ss_cookieAllowed (Squarespace, 30 days): remembers your cookie choice.

  • _GRECAPTCHA (Google, session): tells people apart from bots on forms.

Analytics (only with your consent)

  • ss_cvr (Squarespace, 2 years): identifies unique visitors across visits.

  • ss_cvt (Squarespace, 30 minutes): tracks the current visit.

  • ss_cid, ss_cpvisit, ss_cvisit (Squarespace, 30 minutes to 2 years): count unique visitors and sessions.

The site links to Instagram and to gallery websites; those sites have their own privacy and cookie policies.

Your rights

Under the GDPR you can ask to:

  • access the personal data we hold about you and get a copy;

  • correct data that is wrong or incomplete;

  • delete your data, where we no longer need to keep it;

  • restrict or object to how we use it, including any use based on legitimate interest;

  • receive your data in a portable format;

  • withdraw consent at any time (for the newsletter or analytics), without affecting earlier processing.

To exercise any of these, email studio@ianculescu.com. We will reply within one month.

If you believe your data has been handled unlawfully, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Roma; www.garanteprivacy.it), or to the authority in the EU country where you live.

Changes to this policy

If the site's features or providers change, this page will be updated and the date at the top revised.