Privacy Policy

Effective Date: June 5, 2025

1. Who We Are

Otabushi S.R.L. (“Otabushi,” “we,” “us,” or “our”) is committed to protecting your privacy and handling your data transparently. This policy explains how we collect, use, store, and share your personal data, in full compliance with the EU General Data Protection Regulation (“GDPR”) and other applicable laws.

Contact for Privacy Inquiries:
Email: co*****@******hi.net

2. Types of Data Collected

• Website Users and Customers:
  IP address, device/browser type, referring pages, viewed pages, and timestamps. Name, email, address, and phone number if registering, ordering, or contacting support. Account username, password (hashed), order history, and payment details (e.g., last four digits of card or PayPal ID).
• Artists & Contributors:
  Name, pseudonym, date of birth, contact information, payment info (IBAN/PayPal), national ID, proof of address, and information for contracts and payments.
• Automatically Collected Data:
  Cookies and similar tracking technologies (see “Cookies” below).
• Third-Party Data:
  Information from payment processors, shipping partners, analytics platforms, and marketing tools for order fulfillment, analytics, or support.

3. Legal Bases for Processing

We process your data based on:

• Contractual Necessity: To fulfill orders, process payments, and execute contracts.
• Legitimate Interests: Site security, marketing, analytics, and business operations.
• Consent: For marketing, non-essential cookies, and newsletter subscriptions.
• Legal Obligations: Compliance with tax, legal, and regulatory requirements.
• Vital Interests: Only where required to protect someone’s safety.

4. How We Collect Data

• Directly from You: When you register, order, submit forms, sign a contract, or contact us.
• Automatically: Via cookies and analytics tools when browsing our site.
• Third Parties: Payment services, shipping providers, analytics or ad platforms.
• Public Sources: Social media or other public information.

5. Purposes of Processing

• Order processing and payment
• Artist collaboration and contract management
• Account creation and customer support
• Marketing (only with consent)
• Website analytics and performance improvement
• Legal compliance and tax reporting
• Security and fraud prevention

6. Data Sharing and International Transfers

We share your data only with trusted service providers, such as payment processors, shipping companies, IT/cloud hosting and security partners, analytics and advertising platforms, and professional advisors—only as needed to provide our services or fulfill legal obligations.
If data is transferred outside the EU, it is done under strict safeguards in line with GDPR requirements.
A full list of service providers is available upon request.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable core website functions (essential cookies)
• Analyze website traffic and usage (analytics cookies)
• Remember preferences (functional cookies)
• Deliver relevant ads (marketing cookies, only with your consent)

On your first visit, you will see a cookie banner to manage preferences. You can update cookie settings at any time via the “Cookie Settings” link in the footer.
For detailed information on cookies and plugins used, see the table at the end of this policy.

8. Captcha and Anti-Spam

To protect our website against spam and abuse, we use a built-in math captcha on forms. This system does not transfer personal data to external parties and is fully GDPR compliant.

9. Comments, Media, and Embedded Content

When leaving comments, we collect the information you enter, your IP address, and browser user-agent for spam detection. Comments may be checked via the Gravatar service (see Gravatar’s privacy policy).
If you upload images, do not include embedded location data (EXIF GPS).
Some pages may include embedded content (e.g., YouTube videos, social media). Such content may collect data as if you visited the other site directly.

10. Your Rights Under GDPR

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure (“Right to be Forgotten”): Request deletion of your data when no longer necessary.
• Restriction: Request limited processing.
• Portability: Receive your data in a portable format.
• Object: Object to processing for marketing or legitimate interest purposes.
• Withdraw Consent: Withdraw consent at any time.
• Complaint: File a complaint with your data protection authority (in Romania: ANSPDCP).

Contact us at co*****@******hi.net to exercise any of these rights.

11. Data Retention

• Comments: Indefinitely (for ongoing moderation).
• User accounts: As long as your account is active, or until you request deletion.
• Order/payment data: Kept for at least 5 years per Romanian tax law.
• Artist contracts: As required for legal and business compliance.

12. Data Security

We protect your data with encryption (HTTPS, data at rest), access controls, and regular security reviews. In case of a data breach, we will notify affected users and authorities as required by law.

13. Children’s Privacy

Our services are not intended for children under 16. If you believe we have collected data from a child under 16, please contact us for immediate deletion.

14. Updates

We may update this policy from time to time. Changes will be posted here and the effective date updated. Continued use of the site constitutes acceptance of any changes.

15. How to Contact Us

For questions or to exercise your data rights, email: co*****@******hi.net

16. Cookie and Plugin Table

Below is a list of cookies and services used on our site, generated and kept up to date by our privacy plugin.