Privacy Policy

Effective from: 16 September 2026

This notice explains what personal data we process on randomcontemporary.com, for what purposes, on what legal basis and for how long, who has access to it, and what rights you have. It is based on the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.

Who is responsible for your data

The RCB (Random Contemporary) gallery is not operated as a company, so the data controller is the private individual who runs the gallery: Máté Kázsmér, founder and director of the gallery (“we”).

• Email: randomgalleryartshop@gmail.com
• Postal address: Fő utca 10., 1011 Budapest, Hungary
• Website: randomcontemporary.com

We are not required to appoint a data protection officer. Please send any questions or requests about your data to the email address above.

What data we process, why and for how long

1. Newsletter

• Data: email address, chosen language and the time of your consent.
• Purpose: sending news about our exhibitions, art fair participations and programmes.
• Legal basis: your consent (GDPR Article 6(1)(a)).
• Retention: until you withdraw your consent. After you unsubscribe, we delete your email address without undue delay and within 30 days at the latest.

Subscribing is voluntary and is not a condition of using the website. You can unsubscribe at any time by writing to randomgalleryartshop@gmail.com, or with the unsubscribe link in the newsletter where one is included. Withdrawal does not affect the lawfulness of processing before it.

2. Artwork inquiries

• Data: name, email address, phone number (optional), message, the artwork you ask about and the time of sending. We also record which website or campaign brought you to our site during that visit, and the page where your visit started.
• Purpose: answering your inquiry and discussing a possible purchase; for the source data, understanding through which channels interested people find us.
• Legal basis: for answering, steps taken at your request before entering into a contract (GDPR Article 6(1)(b)); for the source data, our legitimate interest in seeing which channels work (GDPR Article 6(1)(f)).
• Retention: 3 years from receipt, after which it is deleted automatically. If an inquiry leads to a purchase, documents related to the purchase are kept for the period required by law.

Your name and email address are required, because we cannot reply without them. If you have accepted the statistics cookie, we also attach the details of your first visit to the inquiry (see point 5).

3. Email correspondence

• Data: name, email address and any other data you include in your message.
• Purpose: answering your message.
• Legal basis: our legitimate interest in answering messages and, where you intend to buy, steps prior to entering into a contract (GDPR Article 6(1)(f) and (b)).
• Retention: 3 years from the conclusion of the correspondence.

4. Website operation and anonymous statistics without cookies

• Data: the page visited, the referring website, the campaign tag (for example utm_source), the approximate country and city, the device and browser type, the time actively spent on the page, and artwork openings and use of the inquiry form. We do not store IP addresses. Visits are distinguished only by a one-way code that changes daily, cannot identify anyone and does not link visits made on different days.
• Purpose: operating the website securely and understanding how visitors use it, so that we can improve it.
• Legal basis: our legitimate interest in operating and improving the website (GDPR Article 6(1)(f)). In our assessment this does not override your interests, because the data does not identify you or follow you across days.
• Retention: 13 months, after which it is deleted automatically.

Technical logs of the system that serves the website, including IP addresses, are available for up to 7 days for troubleshooting and security, based on our legitimate interest (GDPR Article 6(1)(f)). You can object to this (see Your rights).

5. Statistics cookies, only with your consent

• Data: a random identifier in the rcb_vid cookie, and the visit data linked to it within the scope listed in point 4.
• Purpose: recognising returning visitors, measuring visits and time spent on the website, and understanding where people first find us. If you send an inquiry, we attach to it where and when you first arrived and on how many days you visited.
• Legal basis: your consent (GDPR Article 6(1)(a) and Section 155(4) of Hungarian Act C of 2003 on Electronic Communications).
• Retention: the cookie expires after 13 months, and the linked visit data is kept for 13 months. The record of your cookie decision (a random decision ID, the time and your choice) is kept for 26 months.

Consent is voluntary, and declining it does not affect your use of the website. You can give, change or withdraw it at any time with the “Cookie settings” link at the bottom of every page; withdrawal deletes the statistics cookie from your browser. We do not use marketing or advertising cookies. The full list of cookies is at the end of this notice.

Who has access to the data

Only gallery staff have access to the data, to the extent their tasks require. We do not sell your data or pass it to third parties for their own purposes. We use the following processors:

• Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA): hosting, database and delivery of the website. This covers all data submitted or measured on the website.
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): the gallery’s Gmail email account. Inquiries received by email and the emails we send, including the newsletter, go through this account.

Cloudflare and Google may also process data outside the European Union, in the United States. Both companies participate in the EU–US Data Privacy Framework, which is covered by an adequacy decision of the European Commission, and they also apply standard contractual clauses.

Automated decision-making

We do not make automated decisions based on your data that produce legal effects concerning you or similarly significantly affect you.

Security

Data is transmitted over encrypted (HTTPS) connections. The content management interface can only be accessed with password-protected accounts, and access is limited to those whose tasks require it.

Your rights

• Access: you can ask what data we process about you and request a copy (GDPR Article 15).
• Rectification: you can ask us to correct inaccurate data (Article 16).
• Erasure: you can ask us to delete your data (Article 17).
• Restriction: you can ask us to store your data but not use it (Article 18).
• Portability: you can receive data processed on the basis of consent or contract in a structured, machine-readable format (Article 20).
• Objection: you can object at any time to processing based on legitimate interest (Article 21).
• Withdrawing consent: you can withdraw consent at any time without affecting the lawfulness of earlier processing (Article 7(3)).

Please send requests to randomgalleryartshop@gmail.com. We reply within one month; where necessary this may be extended by two further months, in which case we will let you know. Requests are free of charge. Data from the cookie-free statistics cannot be linked to you, so these rights cannot be applied to it (GDPR Article 11). To have statistics-cookie data deleted, include the rcb_vid identifier stored in your browser in your request, or simply withdraw your consent and delete the cookie.

Complaints and remedies

If you believe we have infringed your rights, please write to us first so that we can put it right. You can also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): Falk Miksa utca 9–11., 1055 Budapest; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; email: ugyfelszolgalat@naih.hu; website: naih.hu. You may also lodge a complaint with the supervisory authority of the EU country where you live.

You can also take the matter to court. In Hungary you may bring the case before the regional court (törvényszék) of your place of residence or stay.

Children

Our website is not intended for people under 16. A person under 16 may only subscribe to the newsletter with the consent of a parent or guardian.

Changes to this notice

We may update this notice if our processing or the law changes. The current version is always available on this page with its effective date. If the cookies or their purposes change, we will ask for your consent again.