Privacy Policy

1. Who I Am

This is the personal artist portfolio website of Regina Fröhlich, accessible at www.reginafroehlich.com. The purpose of this website is to showcase original artwork and commissions, and to allow visitors to get in touch. If you have any questions about this Privacy Policy, please contact me at info@reginafroehlich.com.

Regina Fröhlich is the controller responsible for the processing of personal data in connection with this website.

2. What Personal Data I Collect and Why

2.1 Server Log Data

When you visit this website, GitHub Pages may process your IP address and technical data associated with your visit for the operation, security, stability and functionality of the website.

2.2 Contact via Email

If you contact me using the email address listed on this website, any personal information you include in your message (such as your name, email address, or project details) is used to respond to your inquiry and, where applicable, to communicate with you about an artwork, commission, or other related matter.

2.3 Contact via WhatsApp

This website lists a WhatsApp number as an additional contact option. WhatsApp is a messaging service operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta").

If you choose to contact me via WhatsApp, any information you provide, including your name, phone number, and message content, is processed in order to respond to your inquiry and, where applicable, to communicate with you about an artwork, commission, or other related matter.

Your communication is transmitted through and stored on WhatsApp's infrastructure. Meta processes personal data in accordance with its own privacy policy, which you can review at whatsapp.com/legal/privacy-policy.

3. Legal Basis for Processing (GDPR)

The legal bases for processing personal data are as follows:

• Server log data: Processing is based on my legitimate interest in maintaining a secure, stable, and functional website (Art. 6(1)(f) GDPR).
• Email contact: Processing is based on my legitimate interest in responding to your inquiry and managing correspondence (Art. 6(1)(f) GDPR). Where your inquiry concerns steps taken at your request before entering into a contract, processing may additionally be based on Art. 6(1)(b) GDPR.
• WhatsApp contact: Processing is based on my legitimate interest in responding to your inquiry and managing correspondence (Art. 6(1)(f) GDPR). Where your inquiry concerns steps taken at your request before entering into a contract, processing may additionally be based on Art. 6(1)(b) GDPR.

The processing carried out independently by Meta through WhatsApp is subject to Meta's own privacy policy and legal bases.

4. Data Sharing and Third Parties

I do not sell or disclose your personal data to third parties for advertising or marketing purposes.

The third-party services involved in the processing of personal data in connection with this website are:

• GitHub Pages: Hosts this website and processes visitor IP addresses for security purposes.
• Apple / iCloud Mail: Provides the email service through which messages sent to my business email address are received and stored.
• Meta (WhatsApp): Processes message and contact data when you contact me via WhatsApp, in accordance with its own privacy policy.

These providers process personal data in accordance with their respective privacy policies and terms.

International Data Transfers

Some of the service providers used in connection with this website may process personal data in the United States or other countries outside the European Economic Area. Where required, such transfers are based on an applicable adequacy decision or on appropriate safeguards under applicable data protection law, such as the EU Standard Contractual Clauses.

GitHub may process personal data in the United States and other countries in connection with GitHub Pages. Apple may process personal data in the United States and other countries in connection with iCloud Mail. Meta may process personal data in the United States and other countries in connection with WhatsApp. The respective providers use the transfer mechanisms and safeguards described in their applicable privacy policies and contractual terms.

5. Cookies and Tracking

This website does not directly use cookies, analytics, advertising, or other tracking technologies.

The website does not contain embedded third-party content.

6. Data Retention

I retain personal data only for as long as necessary for the purpose for which it was collected:

• Server log data is retained according to GitHub's applicable retention practices.
• Emails are kept only as long as necessary to handle your inquiry and any related communication, unless longer retention is required by law.
• WhatsApp messages are retained within the WhatsApp application for as long as reasonably necessary to manage our communication. You may request deletion of our conversation at any time.

Where you have specifically expressed an interest in receiving information about new artwork or future pieces, your email address may be retained for that purpose for as long as such communication remains relevant. You may request deletion of your contact details at any time, subject to any legal obligations requiring their retention.

7. Your Rights

Under applicable data protection law, including the GDPR, you have the following rights regarding personal data I directly hold about you, where the respective legal requirements are met:

• Right of access — request information about the personal data I hold about you.
• Right to rectification — ask me to correct inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data.
• Right to restriction — ask me to restrict processing of your data in certain circumstances.
• Right to data portability — where applicable, request your data in a structured, commonly used, and machine-readable format.
• Right to object — object to processing based on legitimate interests on grounds relating to your particular situation.
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, please contact me at info@reginafroehlich.com.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

8. Data Security

I take reasonable technical and organisational measures to protect personal data I handle directly against loss, misuse, unauthorised access, or disclosure.

The services used to host the website and manage email and WhatsApp communications are subject to the respective security measures of the providers involved.

9. Contact

For any privacy-related questions or to exercise your rights, please contact:

Regina Fröhlich
info@reginafroehlich.com
Karl-Marx-Straße 19, 67227 Frankenthal, Germany