Privacy Policy

The controller responsible for data processing on this website is:

Sergiu Catarau

Im Mainfeld 17

60528 Frankfurt am Main

Germany

Phone: +49 176 32229714

Email: Kontakt@sergiucatarau.com

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

This website is hosted by:

Lovable (Lovable AB) — frontend hosting of the website. Lovable uses a European infrastructure. A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the provider.

Supabase Inc. — database, authentication and image storage for the admin area and the gallery. Server location: EU (Frankfurt am Main, AWS eu-central-1). A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the provider.

When this website is accessed, technically necessary connection data (IP address, timestamp, page accessed, browser type) is stored by the hosting providers in server log files and automatically deleted after 7 days. Legal basis: Art. 6 (1) (f) GDPR.

When you access our website, general information is collected automatically by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar. It is evaluated for statistical purposes and serves the technical improvement of our website. We cannot assign this data to specific persons.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).

Storage period: 7 days, then automatic deletion.

If you send us enquiries via the contact form, your details from the form, including the contact data you provide there (name, email address, message), will be stored by us for the purpose of processing the enquiry and in case of follow-up questions.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in answering your enquiry).

Storage period: until the purpose no longer applies, at most 3 years after the last contact.

Our website contains a link to our WhatsApp contact. If you contact us via WhatsApp, you leave our website and are redirected to WhatsApp (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). WhatsApp’s privacy policy applies to data processing by WhatsApp (https://www.whatsapp.com/legal/privacy-policy).

When using WhatsApp, at least your phone number and the message content are transmitted to WhatsApp and may also be transferred to countries outside the EU. The legal basis for the redirection is Art. 6 (1) (a) GDPR (consent through active use of the link).

All paintings and photographs of artworks shown on this website are the property of Sergiu Catarau. No personal data of third parties is processed. Where persons are depicted in individual artworks, this is done within the framework of artistic freedom (Art. 5 (3) GG) or with the consent of the persons depicted.

The admin area of this website is protected by Supabase authentication. Only authorised persons (artist and webmaster) have access. No visitor data is processed in the admin area.

This website uses technically necessary cookies (e.g. for language selection RO/DE/EN, session management). NO tracking or marketing cookies are set. No data is transmitted to Google Analytics, Facebook Pixel or other third parties.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating the website).

This website uses so-called web fonts for the uniform display of fonts. The Google Fonts are installed LOCALLY on our server. NO connection to Google servers takes place. NO data is transmitted to Google.

You have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 (3) GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact: Kontakt@sergiucatarau.com

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)

Gustav-Stresemann-Ring 1

65189 Wiesbaden

Phone: +49 611 1408-0

Email: poststelle@datenschutz.hessen.de

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://”.

We reserve the right to amend this privacy policy so that it always complies with current legal requirements.

Last updated: October 2026.