Privacy Policy

Who we are

Fondacija Prostor operates Zvjezdane Staze artist residency. We are committed to protecting your privacy and handling your data transparently.

What data we collect

We collect only the data necessary to provide our services:

• Contact information: Name, email address — when you contact us, apply for a residency, or subscribe to our newsletter
• Payment information: Processed securely by Stripe — we never see or store your full card details
• Stellar Garden data: Name, message, and email for plant sponsorships — displayed publicly unless you choose to remain anonymous
• Application data: Information you provide in residency applications

How we use your data

• To process donations and plant sponsorships
• To communicate about your residency application
• To send newsletters (only if you subscribe)
• To respond to your inquiries
• To improve our services

Third-party services

We use the following services to operate:

• Global.ba — Website and email hosting (Bosnia and Herzegovina). Global.ba Privacy Policy
• Stripe — Payment processing. Stripe Privacy Policy
• Supabase — Database hosting (EU servers). Supabase Privacy Policy
• Buttondown — Newsletter service. Buttondown Privacy Policy

Cookies

We use minimal cookies:

• Essential cookies: Required for the website to function (e.g., payment session)
• No tracking cookies: We do not use Google Analytics or similar tracking services

Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restriction — Limit how we use your data
• Portability — Receive your data in a portable format
• Objection — Object to certain uses of your data

To exercise any of these rights, contact us at privacy@zvjezdanestaze.ba.

Data retention

• Donations: Records kept for 7 years (legal requirement)
• Newsletter: Until you unsubscribe
• Applications: 2 years after the application cycle
• Stellar Garden: Indefinitely (it's a permanent archive), unless you request removal

Data security

We protect your data through:

• Encrypted connections (HTTPS)
• Secure, EU-based database hosting
• Limited access to personal data
• Regular security reviews

Children's privacy

Our services are not directed at children under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy occasionally. Significant changes will be announced on our website. The "last updated" date at the top indicates when this policy was last revised.

Contact

Questions about this privacy policy or your data?