Privacy Notice

Effective date: 23 October 2026
Last updated: 23 October 2026

This Privacy Notice explains how Daniel Prindii(“we”, “us” or “our”) handles personal data when you visit https://danielprindii.com, or https://miscellanea.danielprindii.com, contact us, enquire about or purchase goods or services, request a service, subscribe to updates, or otherwise interact with the website.

1. Who is responsible for your data?

Controller: Daniel Prindii, Romanian content strategist based in Transylvania, Romania.

  • Email: privacy@danielprindii.com

  • Data Protection Officer: Daniel Prindii

The Controller decides why and how personal data described in this Notice is processed. If a gallery, platform or other partner independently determines its own processing, that organisation is responsible for its own privacy information.

2. Personal data we collect

The data collected depends on your interaction with the website and may include:

  • Contact and identity details, such as name, email address, telephone number and postal or delivery address.

  • Enquiry and correspondence details, including the contents of messages about our goods, services, availability or business enquiries.

  • Order and service information, such as the goods or services requested, order history, delivery instructions and communications needed to fulfil a purchase or service.

  • Billing and transaction information, such as invoice details and payment status. Card payments are processed through Stripe; see section 6.

  • Newsletter preferences, email address and consent or subscription records managed using EmailOctopus; see section 6.

  • Technical and website-use information, such as IP address, browser/device information, pages viewed, referral information and event data collected through PostHog, as described in section 8.

  • Information you choose to provide in a form or message. Please do not send sensitive personal data unless it is necessary and specifically requested.

  • We do not intentionally collect special-category personal data or children’s data through the website.

3. How we obtain data

We collect information directly from you when you browse the website, use a contact or enquiry form, email or call us, subscribe to a newsletter, place an order, request a service request or otherwise communicate with us. Technical data may be generated when you use the website and its analytics tools.

4. Why we use data and our legal bases

We process personal data only where a legal basis applies under the EU General Data Protection Regulation (GDPR). Depending on the activity, that basis may be taking steps at your request before a contract or performing a contract; complying with a legal obligation; our legitimate interests, where your rights do not override those interests; or your consent. The applicable basis must be confirmed for each actual processing activity.

  • Reply to messages and goods or services enquiries

    • Examples of data: Contact details; message contents.

    • Potential legal basis (confirm before use): Pre-contractual steps or legitimate interests in responding.

  • Discuss, arrange and fulfil orders, bookings or related services

    • Examples of data: Contact, order, service request and delivery information.

    • Potential legal basis (confirm before use): Pre-contractual steps/contract; legal obligations where applicable.

  • Process payments, issue invoices and keep required business records

    • Examples of data: Billing and transaction information.

    • Potential legal basis (confirm before use): Contract; legal obligation; legitimate interests in accounting.

  • Send newsletters or promotional updates using Beehiiv

    • Examples of data: Email address; subscription and marketing preferences.

    • Potential legal basis (confirm before use): Consent where required; provide an unsubscribe method.

  • Operate, protect and understand use of the website, including PostHog analytics

    • Examples of data: Technical and website-use data.

    • Potential legal basis (confirm before use): Legitimate interests if applicable requirements are met; consent where required by applicable ePrivacy rules or national law.

  • Handle legal claims, comply with lawful requests and protect rights

    • Examples of data: Relevant correspondence and records.

    • Potential legal basis (confirm before use): Legal obligation or legitimate interests.

5. Is providing data required?

Providing information is generally optional. However, if you do not provide information needed to respond to an enquiry, arrange a service request, fulfil an order or meet a legal requirement, we may be unable to provide the requested response or service. Forms should identify any fields that are required.

6. Who may receive your data?

Data may be accessible to the organisation and authorised people assisting with the website or business, and may be shared only as necessary with:

  • Infomaniak, for website hosting and related infrastructure. The hosting is in Switzerland, subject to the actual service configuration and any support/access arrangements.

  • PostHog, for website analytics in cookieless mode, using EU servers as configured for this website. See section 8.

  • Stripe, to process payments, prevent payment fraud and support payment-related transactions. Stripe may process data under its own privacy terms and may act as an independent controller for some processing.

  • EmailOctopus, to manage newsletter subscriptions and send newsletter communications. Beehiiv may process subscriber data under its own privacy terms.

  • Professional advisers and public authorities, where necessary or legally required.

Provider privacy policies:

7. Transfers outside the European Economic Area

Personal data may be processed in Switzerland through Infomaniak hosting. The European Commission has adopted an adequacy decision for Switzerland, allowing transfers covered by that decision subject to its scope and conditions. Other providers may process or allow access to data in locations outside the EEA. Where required, we use a GDPR transfer mechanism, such as an applicable adequacy decision or European Commission Standard Contractual Clauses, and any necessary supplementary safeguards.

8. Website analytics: PostHog in cookieless mode

We use PostHog to understand how visitors use the website, such as which pages are viewed and how the website performs, so that we can maintain and improve the website. PostHog is configured in cookieless mode and uses EU servers for this website. PostHog describes its cookieless mode as not setting cookies or using session or local storage, and as using a privacy-preserving identifier approach.

Cookieless does not necessarily mean that no personal data is processed or that consent is never required. We will provide any consent or opt-out mechanism required by applicable EU and national rules for the actual analytics configuration.

9. Cookies and similar technologies

The website may use strictly necessary cookies or similar technologies to provide functions requested by you or required for the website to operate. PostHog is configured in cookieless mode as described above. Any other non-essential cookies or similar technologies, including analytics or advertising technologies if used, will be handled according to applicable EU and national ePrivacy requirements, including obtaining consent where required.

10. Seller and issuer of invoices and financial documents

The seller of the goods or services and the entity responsible for issuing invoices, receipts, credit notes and other financial documents is: E&K Interactive Studio SRL, registration number 39969700, VIES VAT number RO50390325. Contact for billing questions: privacy@danielprindii.com. This entity is responsible for processing the personal data required for sales, invoicing, tax and accounting records. Stripe processes payment transactions as described below.

11. Payments and orders

When you make a purchase, payment is processed by Stripe. We receive information needed to manage the order, such as payment status and transaction references, and may receive billing details needed for invoices or legal records. Stripe’s handling of payment data is also governed by its own privacy information.

We retain invoices and other accounting documents for 5 years, starting on 1 July of the year following the financial year in which they were prepared, or for any longer period required by law or necessary in connection with a legal claim.

12. Newsletters

If you subscribe, we use EmailOctopus to manage your subscription and send newsletters or updates. You can unsubscribe at any time using the link in a newsletter or by contacting privacy@danielprindii.com. We retain the minimum information necessary to record and respect your unsubscribe choice.

13. How long we keep data

We keep personal data only for as long as needed for the purposes described above and for applicable legal, accounting or claims periods.

At the end of the applicable period, data is deleted or anonymised unless it must be retained for a legal obligation or a legal claim.

14. Your rights under the GDPR

Subject to the conditions and exceptions in the GDPR, you may request access to your personal data, rectification, erasure, restriction of processing, or data portability. You may object to processing based on legitimate interests and may object at any time to direct marketing. Where processing is based on consent, you may withdraw consent at any time. These rights are not absolute and may be limited in specific circumstances under law.

To exercise your rights, contact privacy@danielprindii.com. We may ask for information needed to verify your identity. You may also lodge a complaint with a competent supervisory authority, in particular in the EU country where you live, work or believe an infringement occurred.

15. Security

We use appropriate technical and organisational measures designed to protect personal data, taking into account the nature of the data and the risks of processing. Access is limited to those who need it. No method of transmission or storage can be guaranteed to be completely secure.

16. Links to other websites

The website may contain links to galleries, marketplaces, social networks or other third-party sites. Those sites are operated independently and have their own privacy notices. Review their notices before providing personal data.

17. Changes to this Notice

We may update this Notice when our website, services or data practices change or when required by law. The current version will be available at https://danielprindii.com/privacy, with the latest update date shown at the beginning. Where required, we will provide further notice or ask for consent.

18. Contact

For questions or requests about this Privacy Notice or your personal data, contact:

  • Daniel Prindii

  • Cluj-Napoca, Romania

  • privacy@danielprindii.com