Hand-painted artwork: In every size & style

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide your data. Failure to provide it has no consequences. This applies only if no different indication is made in the following processing operations.

“Personal data” refers to all information relating to an identified or identifiable natural person.

Server-Logfiles

You can visit our website without providing any personal information.

Each time our website is accessed, usage data is transmitted to us or our web host/IT service provider via your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the accessed page, the date and time of retrieval, IP address, transmitted data volume, and the requesting provider.

Processing is carried out based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.

Your data may be transferred to third countries outside the European Union, for which an adequacy decision by the EU Commission exists. If no adequacy decision exists (e.g., for transfers to the USA), data transfers are based on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.

Kontakt

Data controller

You can contact us if needed. The data controller is:

Pascal Tait
Tonhallenstraße 11
40211 Düsseldorf
Germany
+49 173 2573063
info@auftragskunst.de

Customer-Initiated Contact via Email

If you proactively contact us via email for business purposes, we collect your personal data (name, email address, message content) only to the extent that you provide it. The purpose of data processing is to handle and respond to your inquiry.

If your contact relates to pre-contractual measures, such as consultation regarding a purchase or offer preparation, or an existing contract between you and us, data processing is based on Art. 6 (1) lit. b GDPR. If the contact is made for other reasons, data processing is based on Art. 6 (1) lit. f GDPR, due to our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right to object at any time for reasons arising from your particular situation.

Your email address is used solely to process your request. Your data will be deleted after legal retention periods expire unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When you use the contact form, we collect your personal data (name, email address, message content) only to the extent that you provide it. The purpose of data processing is to establish contact.

If your inquiry is related to pre-contractual measures, such as consultation regarding a purchase or offer preparation, or an existing contract between you and us, the data processing is based on Art. 6 (1) lit. b GDPR. If the contact is made for other reasons, the data processing is based on Art. 6 (1) lit. f GDPR, due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time for reasons arising from your particular situation.

Your email address is used solely for processing your inquiry. Your data will be deleted after legal retention periods expire unless you have consented to further processing and use.

WhatsApp Business

If you contact us via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).

We collect and process your mobile phone number and, if provided, your name and additional data to the extent you provide it. We use a mobile device in which only data of users who have contacted us via WhatsApp is stored. No personal data is shared with WhatsApp unless you have already consented to it directly with WhatsApp.

Your data is transmitted to WhatsApp servers of Meta Platforms Inc. in the USA. No adequacy decision exists for the USA. Data transfers are based on standard contractual clauses as safeguards, available at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.

Data processing is based on Art. 6 (1) lit. b GDPR if your contact is related to pre-contractual measures or an existing contract. Otherwise, processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in providing quick and easy contact options and responding to inquiries. You have the right to object at any time.

Your data will be deleted in compliance with legal retention periods unless you consent to further processing.

Further information on WhatsApp’s terms of use and privacy policy:
https://www.whatsapp.com/legal/#terms-of-service
https://www.whatsapp.com/legal/#privacy-policy

Customer Account / Orders

Customer Account

When you create a customer account, we collect your personal data as specified there. The purpose of data processing is to enhance your shopping experience and simplify order processing. Processing is carried out based on Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out based on the consent before revocation. Your customer account will then be deleted.

Collection, Processing, and Disclosure of Personal Data in Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and handle your inquiries. Providing the data is required for contract conclusion. Failure to provide it means that no contract can be concluded. Processing is based on Art. 6 (1) lit. b GDPR as it is necessary for the performance of a contract with you.

Your data may be shared with shipping companies, dropshipping providers, payment service providers, order processing service providers, and IT service providers, strictly in accordance with legal requirements. The scope of data transmission is limited to the minimum necessary.

Your data may be transferred to third countries outside the European Union for which an adequacy decision by the EU Commission exists. If no such decision exists (e.g., for transfers to the USA), data transfers are based on standard contractual clauses as appropriate safeguards, available at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.

Data Collection When Submitting a Comment

When commenting on an article or post, we collect your personal data (name, email address, comment text) only to the extent that you provide it. The purpose of processing is to enable comments and display them. By submitting your comment, you consent to the processing of the transmitted data. Processing is carried out based on Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out before revocation. Your personal data will then be deleted.

When your comment is published, the name and email address you provided will also be displayed.

Additionally, when submitting a comment, your IP address will be stored to prevent misuse of the comment function and to ensure the security of our IT systems. By submitting the comment, you consent to the processing of the transmitted data. Processing is carried out based on Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of prior processing. Your IP address will then be deleted.

Website Logo for Google Customer Reviews

Our website integrates the website logo for Google Customer Reviews, provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

The integration serves the purpose of displaying the number and results of reviews we have received via Google and promoting participation in this program.

To display the logo on our website and show you personalized advertisements on Google, Google uses cookies. This may involve processing and transmitting your IP address to Google.

Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based on standard contractual clauses as suitable safeguards for the protection of personal data, available at:
https://privacy.google.com/businesses/controllerterms/.

The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 (1) lit. a GDPR. You may revoke your consent at any time without affecting the legality of the processing carried out before the revocation.

For more information on terms of use and data protection when using Google Customer Reviews, visit:
https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html
https://policies.google.com/privacy?hl=de

Cookies

Our website uses cookies. Cookies are small text files stored by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is visited again.

Cookies are stored on your computer. Therefore, you have full control over their use. By adjusting your internet browser settings, you can be notified before cookies are set and decide whether to accept them individually. You can also prevent cookies from being stored and transmitted. Previously stored cookies can be deleted at any time. However, we point out that this may result in some website functions not working fully.

You can find instructions on managing cookies in major browsers here:
https://support.google.com/accounts/answer/61416?hl=de
https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen 
https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated in this privacy policy, we only use these technically necessary cookies to make our service more user-friendly, effective, and secure. Cookies also allow our systems to recognize your browser after a page change and offer services. Some features of our website cannot function without cookies, as they require the browser to be recognized again after navigating between pages.

The use of cookies or similar technologies is based on § 25 (2) TTDSG. The processing of your personal data is based on Art. 6 (1) lit. f GDPR, due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly, effective service.

You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.

Use of Cookiebot

We use the consent management tool Cookiebot by Cybot A/S (Havnegade 39, 1058 Copenhagen, Denmark; “Cookiebot”) on our website.

This tool allows you to provide consent for data processing on our website, particularly the setting of cookies, and to exercise your right to withdraw consent for previously granted permissions. The data processing serves the purpose of obtaining and documenting legally required consents for data processing.

Cookies may be used for this purpose, collecting and transmitting information such as an anonymized IP address, date and time of consent, URL from which the consent was given, an anonymous, randomly generated, encrypted key, and the consent status. No data is shared with third parties.

The data processing is carried out to fulfill a legal obligation under Art. 6 (1) lit. c GDPR.

For more information about Cookiebot’s privacy policy, visit:
https://www.cookiebot.com/de/privacy-policy/

Analytics / Advertising Tracking

Use of Google Analytics

We use the web analytics service Google Analytics, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

Data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. Google will use the collected information on behalf of the website operator to evaluate website usage, compile reports on website activity, and provide further services related to website and internet usage. The collected data may include your IP address, date and time of page access, click paths, browser information, device details, pages visited, referrer URL, location data, and purchase activities. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Google Analytics uses cookies, browser storage, and tracking pixels to analyze website usage. The generated information is usually transferred to and stored on a Google server in the USA. There is no adequacy decision for the USA. Data transfers are based on standard contractual clauses as suitable safeguards, available at:
https://policies.google.com/privacy/frameworks
https://business.safety.google/adsprocessorterms/

Both Google and U.S. authorities may access your data. Your data may be linked by Google with other information, such as your search history, personal accounts, usage data from other devices, and any other data Google has about you.

IP anonymization is enabled on this website. This means that your IP address is shortened by Google within EU member states or other signatories to the EEA agreement before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the legality of prior processing.

For more information on Google Analytics terms of use and privacy policy, visit:
https://www.google.com/analytics/terms/de.html
https://www.google.de/intl/de/policies/
https://policies.google.com/technologies/cookies?hl=de

Use of Mouseflow

We use the Mouseflow analytics tool provided by Mouseflow ApS (Flaesketorvet 68, 1711 Copenhagen, Denmark; “Mouseflow”) on our website.

The data processing serves the purpose of personalization and analysis of this website and its visitors. Mouseflow uses technologies such as cookies, tracking pixels, and scripts. Cookies allow the browser to be recognized again. The following information may be collected: IP address, click path, information about your browser and operating system, visited pages, time spent on our website, viewed content, and location data. From this data, usage profiles can be created under a pseudonym.

Mouseflow’s web tracking tool records randomly selected individual visits (only with an anonymized IP address). A log of mouse movements and clicks is created to replay individual website visits and identify potential improvements. The data collected through Mouseflow technologies is not used to personally identify visitors without their explicit consent, nor is it merged with personal data of the pseudonym holder.

Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA.

The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of prior processing.

For more information on data collection and usage by Mouseflow, visit:
https://mouseflow.com/de/privacy-policy/

Use of Google Ads Conversion Tracking

We use the Google Ads online advertising program, including conversion tracking (visitor action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

When you click on a Google ad, a conversion tracking cookie is placed on your device. These cookies have a limited validity, do not contain personal data, and are not used for personal identification. If you visit specific pages of our website and the cookie has not expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie, making it impossible to track cookies across different websites.

The information collected via the conversion cookie is used to create conversion statistics. We learn the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive information that personally identifies users.

Your data may be transmitted to Google LLC servers in the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based on standard contractual clauses as suitable safeguards, available at:
https://policies.google.com/privacy/frameworks
https://business.safety.google/adscontrollerterms/

The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of prior processing.

For more information and Google’s privacy policy, visit:
https://www.google.de/policies/privacy/

Use of Google Remarketing or “Similar Audiences” Function

We use the Google Remarketing or “Similar Audiences” function, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

This function serves the purpose of analyzing visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for displaying interest-based ads. These cookies collect anonymized data about website usage, including visits and interactions. No personal data of website visitors is stored.

When you visit another website within the Google Display Network, you may see ads based on previously visited products and pages.

Your data may be transferred to Google LLC servers in the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based on standard contractual clauses as suitable safeguards, available at:
https://policies.google.com/privacy/frameworks

The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of prior processing.

For more information on Google Remarketing and its privacy policy, visit:
https://www.google.com/privacy/ads/

Plugins and Other Technologies

Use of Google Tag Manager

We use Google Tag Manager, a tool provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

This application manages JavaScript and HTML tags that implement various tracking and analytics tools. The data processing aims to optimize our website and improve user experience.

The Google Tag Manager itself does not store cookies or process personal data. However, it enables the activation of other tags that may collect and process personal data.

For more information on terms of use and privacy, visit:
https://www.google.com/intl/de/tagmanager/use-policy.html

Plugins and Other Technologies

Use of Google Tag Manager

We use Google Tag Manager, a tool provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”), on our website.

This application manages JavaScript and HTML tags, which are used to implement tracking and analytics tools. The data processing serves the purpose of customizing and optimizing our website.

Google Tag Manager itself does not store cookies or process personal data. However, it enables the activation of other tags that may collect and process personal data.

For more information on terms of use and privacy, visit:
https://www.google.com/intl/de/tagmanager/use-policy.html

Use of Social Plugins

We use social media plugins on our website. The integration of social plugins and the related data processing serve the purpose of optimizing the advertising of our products.

When social plugins are integrated, a connection between your computer and the servers of the social network providers is established, and the plugin is displayed on the page through a message sent to your browser—provided that you have given your explicit consent. In this process, your IP address and the information about which of our pages you have visited are transmitted to the provider’s servers.

This applies regardless of whether you are registered or logged into the social network. Data transmission also occurs for non-registered or non-logged-in users. If you are logged into one or more of your social media accounts simultaneously, the collected information may also be assigned to your profile. When you use plugin functions (e.g., by clicking a button), this information is also linked to your user account. You can prevent this by logging out of your social media accounts before visiting our website and before activating the buttons.

The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of prior processing.

The following social networks are integrated as social plugins on our website. For more information about the scope and purpose of data collection and use, as well as your rights and options for protecting your privacy, refer to the linked privacy policies of the respective providers:

Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
https://help.instagram.com/155833707900388

Your data may be transferred to servers in the USA. There is no adequacy decision by the EU Commission for the USA. Data transfers are based on standard contractual clauses as suitable safeguards, available at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Use of YouTube

We use the YouTube video embedding function, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

This function displays YouTube-hosted videos in an iFrame on our website. The “Enhanced Privacy Mode” is enabled, which ensures that YouTube does not store information about visitors to our website unless they actively watch a video. Once you watch a video, information is transmitted to YouTube and stored there.

Your data may be transferred to servers in the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based on standard contractual clauses as suitable safeguards, available at:
https://policies.google.com/privacy/frameworks

The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of prior processing.

For more information about YouTube and Google’s data collection and usage, as well as your rights and options for protecting your privacy, visit:

https://www.youtube.com/t/privacy

Use of Google Fonts

We use Google Fonts, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”), on our website.

The purpose of data processing is to ensure a uniform display of fonts on our website. To load the fonts, a connection to Google’s servers is established when the page is accessed. Cookies may be used in this process. Your IP address and information about your browser may be processed and transmitted to Google. This data is not linked to your Google account.

Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. Data transfers are based on standard contractual clauses as suitable safeguards, available at:
https://policies.google.com/privacy/frameworks

The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of prior processing.

For more information about data processing and privacy, visit:
https://www.google.de/intl/de/policies/
https://developers.google.com/fonts/faq

Use of FontAwesome

We use Font Awesome, a service provided by Fonticons Inc. (307 S Main St., Suite 202, Bentonville, AR, 72712-9214 USA; “Font Awesome”), on our website.

The purpose of data processing is to ensure a uniform display of fonts and icons on our website. To load the fonts, a connection to FontAwesome’s servers is established when the page is accessed.

Cookies may be used in this process. Your IP address and information about your browser may be processed and transmitted to Font Awesome. Your data may be transferred to third countries, such as the USA. There is no adequacy decision by the EU Commission for the USA.

The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of prior processing.

For more information about data processing and privacy, visit:
https://fontawesome.com/privacy

https://fontawesome.com/support

Rights of Data Subjects and Data Retention

Data Retention Duration

After the complete execution of a contract, the data is initially stored for the duration of the warranty period and then, in compliance with legal retention periods, especially tax and commercial law requirements, stored accordingly. Once the retention period expires, the data will be deleted unless you have consented to further processing and use.

Rights of Data Subjects

If the legal requirements are met, you have the right to access your personal data under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, and the right to data portability under Article 20 GDPR. Furthermore, under Article 21(1) GDPR, you have the right to object to processing based on Article 6(1) lit. f GDPR, as well as to processing for direct marketing purposes.

Right to Lodge a Complaint with a Supervisory Authority

According to Article 77 of the GDPR, you have the right to file a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.

You may submit a complaint to the supervisory authority responsible for us, which can be contacted at the following details:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de

Right to Object

If the processing of your personal data, as described in this policy, is based on our legitimate interests pursuant to Article 6(1) lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.

Once an objection has been made, we will cease processing the affected data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

Last updated: 10.01.2022