1. Data controller

Paintollage, Kristin Gezorreck, Wörpedorfer Straße 3, 28879 Grasberg, telephone +49 (0)4208 2939 054, email office@paintollage-shop.com.

2. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, on servers in Germany. When you visit the website, technically necessary data (IP address, date and time, page accessed, browser) is processed in server log files to ensure secure operation (Article 6(1)(f) of the GDPR). A data processing agreement is in place with IONOS. The email account is also hosted by IONOS.

3. Orders

To process your order, we process your name, address, email address, optional telephone number, and order and payment details (Article 6(1)(b) of the GDPR). We retain invoices and order details in accordance with the statutory retention periods (Article 6(1)(c) of the GDPR). A customer account is not required.

4. Payment processing

For online payments, we use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. Mollie receives the data required for the payment. Depending on the payment method selected, data may also be passed on to the relevant provider (for example, PayPal, credit card companies, Apple or Google). The legal basis for this is Article 6(1)(b) of the GDPR.

If you pay via Klarna, your order and contact details will be transferred to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may carry out an identity and credit check in this process. The legal basis for this is Article 6(1)(b) and (f) of the GDPR. Further information can be found in Klarna’s privacy policy.

5. Delivery

For the purposes of delivery, we pass on your name and delivery address to the contracted courier company (Article 6(1)(b) of the GDPR). We will only pass on your email address for the purpose of sending a parcel notification if you have given your consent during the ordering process (Article 6(1)(a) of the GDPR); you may withdraw your consent at any time.

6. Contact form and email

If you contact us via the contact form or by email, we will process your details in order to respond to your enquiry (Article 6(1)(b) or (f) of the GDPR).

7. Newsletter

If you subscribe to the newsletter, we will use your email address to send you information about new works. Registration is carried out using the double opt-in procedure: you will receive an email containing a confirmation link. Emails are sent via Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin), with whom we have a data processing agreement. The legal basis is your consent (Article 6(1)(a) of the GDPR), which you may withdraw at any time via the unsubscribe link in every email.

8. Cookies

We only use technically necessary cookies, for example for the shopping basket and the ordering process (Section 25(2) of the TDDDG, Article 6(1)(f) of the GDPR). We do not use analytics or marketing cookies.

9. Fonts

All fonts are loaded locally from our server. No connection is made to Google Fonts or any other font providers.

10. Google Maps

On the contact page, you can load a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map will only be loaded once you have clicked on „Show map“; only then will data such as your IP address be transmitted to Google (Article 6(1)(a) of the GDPR). This may involve data being transferred to the USA.

11. Instagram

We provide a link to our Instagram profile. This is a simple link; data is only transferred once you click on it and access Instagram (Meta Platforms Ireland Limited).

12. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw any consent you have given at any time. You may also lodge a complaint with a data protection supervisory authority, for example the State Data Protection Commissioner for Lower Saxony.