Privacy

The controller for data processing is Oleh Yusypenko, Einzelunternehmen, Karl-Marx-Straße 22, 02943 Weißwasser/O.L., Deutschland.

For questions about data protection you can reach us at [email protected]. We are not required to appoint a data protection officer under section 38 BDSG.

Order and contact data: name, email address, delivery and billing address, optionally phone number and company.

Configuration and product data: artwork, dimensions, material, crop, and the price snapshot of the order.

Payment data: payment method, payment status, and payment reference. We never see complete card or account details.

Technical data: IP address, time of access, browser and device information, consent, session, and language data.

Contract performance, order confirmation, production, delivery, and customer communication: Art. 6 (1) (b) GDPR.

Retention of invoice and order data to meet commercial and tax obligations: Art. 6 (1) (c) GDPR in conjunction with section 147 AO and section 257 HGB.

Secure operation of the website, abuse and spam prevention, and error analysis: Art. 6 (1) (f) GDPR.

Audience measurement and analytics with Google Analytics and the setting of non-essential cookies: Art. 6 (1) (a) GDPR together with section 25 (1) TDDDG, in each case only after your consent.

Hostinger as hosting and email provider: operation of the website, storage of order data, and delivery of order and service emails (processing on our behalf under Art. 28 GDPR).

Stripe Payments Europe, Ltd. for card and wallet payments. Stripe processes payment data as its own controller; we only receive the payment status and reference.

PayPal (Europe) S.à r.l. et Cie, S.C.A. for PayPal payments. PayPal is likewise an independent controller for payment processing.

Cloudflare for website delivery and protection of forms against automated access.

Google Analytics only after your consent in the cookie banner. Without consent, no analytics data is collected.

Shipping service providers for delivering your order.

Order, invoice, and payment data are retained for up to ten years to comply with statutory retention obligations.

Enquiries without an order are deleted once the matter is closed and no retention obligation applies.

Consents and consent settings are stored until withdrawal so that your choice can be demonstrated. Server log data is stored for a short period.

Essential cookies secure the cart, session, language, and consent status. They are required for the store to function.

Analytics cookies are set only after your consent. You can change or withdraw your choice at any time via the cookie settings in the footer; withdrawal takes effect for the future.

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interests (Art. 21 GDPR).

To exercise your rights, a message to [email protected] is sufficient.

Independently of this, under Art. 77 GDPR you may lodge a complaint with a supervisory authority, for example the Saxon Data Protection Commissioner, Devrientstrasse 5, 01067 Dresden, Germany.

Data is transmitted encrypted via TLS. Access to order data is limited to authorised persons.

Where service providers process data outside the EU, this is based on standard contractual clauses or an adequacy decision of the EU Commission.

Providing order data is necessary to conclude the contract; without it we cannot process the order. No automated decision-making takes place.