Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

[Full name]
[Street and house number]
[Postal code and city], Germany
E-mail: nikulicheva.liza@gmail.com

2. General information

We take the protection of your personal data seriously and process it only in accordance with statutory data protection regulations (GDPR, BDSG) and this privacy policy. We process personal data only where there is a legal basis to do so — typically your consent (Art. 6 (1)(a) GDPR), the performance of or steps prior to a contract (Art. 6 (1)(b) GDPR), or our legitimate interests (Art. 6 (1)(f) GDPR).

3. Hosting and server log files

This website is hosted by [hosting provider, address]. When you visit the site, the hosting provider automatically collects and stores information in server log files that your browser transmits, in particular: IP address, date and time of the request, the page requested, the referrer URL, browser type and operating system. This data is technically necessary to display the website and to ensure its stability and security. The legal basis is our legitimate interest under Art. 6 (1)(f) GDPR.

4. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the lock icon in your browser bar.

5. Contact form and messaging

If you use the contact form, the details you enter (your name, a contact for our reply, your message and, where applicable, a summary of the artwork or merchandise you are interested in) are transmitted to us so that we can respond to your enquiry.

Please note: the form delivers your message via the Telegram messaging service (Telegram Messenger Inc.). Your data is therefore transferred to Telegram and may be processed on servers outside the European Union. By submitting the form you consent to this transfer (Art. 6 (1)(a) and Art. 49 (1)(a) GDPR); processing also serves to carry out pre-contractual measures at your request (Art. 6 (1)(b) GDPR). If you prefer not to use Telegram, you can contact us by e-mail or via the other channels listed on the contact page. We retain enquiry data only as long as necessary to handle your request or as required by law.

6. Google Fonts

This site uses fonts provided by Google ("Google Fonts"), loaded directly from Google servers (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When a page loads, your browser connects to Google's servers, which means your IP address is transmitted to Google. This is done in our legitimate interest in a consistent, attractive presentation of the site (Art. 6 (1)(f) GDPR) and, where consent is required for the connection, on the basis of Art. 6 (1)(a) GDPR. Further information is available in Google's privacy policy: https://policies.google.com/privacy.

7. Content delivery network (jsDelivr)

To deliver a script used for smooth scrolling, this site loads a resource from the jsDelivr content delivery network (operated by Prospect One, Poland, among others). When the resource is loaded, your IP address is transmitted to the CDN provider. This serves our legitimate interest in the reliable and fast delivery of the website (Art. 6 (1)(f) GDPR).

8. Local storage in your browser

This website does not use tracking or advertising cookies. It stores small amounts of data locally in your browser solely for functional purposes: your selected interface language is kept in localStorage so the site remembers it on your next visit, and a short summary of an item you chose to enquire about may be kept briefly in sessionStorage and is cleared automatically. This data stays on your device, is not transmitted to us, and is technically necessary for these functions (Art. 6 (1)(f) GDPR; § 25 (2) TDDDG).

9. Your rights

Under the GDPR you have the right, at any time, to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw any consent you have given, with effect for the future (Art. 7 (3)).

To exercise these rights, contact us using the details in section 1.

10. Right to lodge a complaint

If you believe the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular the data protection authority of your usual place of residence, place of work or the place of the alleged infringement — for us: [competent state data protection authority].