Privacy Policy

Controller of Data Processing:

Katja Burkhardt
Birkenweg 9
Hofbieber
Germany
Email: studio.katjaburkhardt[at]gmail.com

0174-9704308

We appreciate your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains data such as the name of the requested file, your IP address, date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. These access data are evaluated solely for the purpose of ensuring the trouble-free operation of the website and improving our services. This serves our legitimate interest in the correct presentation of our offer in accordance with Art. 6(1)(f) GDPR.

The hosting services and website presentation are partly provided by our service providers as part of data processing on our behalf. Unless otherwise stated in this privacy policy, all access data and data collected through forms on this website are processed on their servers.

Some of our service providers are located in countries for which the European Commission has determined an adequate level of data protection: Israel, United Kingdom, USA (if certified under the EU-U.S. Data Privacy Framework).
For service providers in Brazil, Mexico, India, and Ukraine, no adequacy decision exists; instead, data processing is based on EU Standard Contractual Clauses.

2. Data Processing for Contract Fulfillment and Customer Contact

2.1 Contract Processing

We collect personal data when you voluntarily provide them as part of your order, as necessary to fulfill the contract (Art. 6(1)(b) GDPR). Mandatory fields are marked accordingly. Further details can be found in the relevant input forms. After contract completion, data are restricted for further processing and deleted after tax and commercial retention periods unless you consent to further use (Art. 6(1)(a) GDPR) or we are legally permitted to use them further.

2.2 Customer Account

If you consent (Art. 6(1)(a) GDPR), we use your data to create a customer account. You may delete your account at any time via the contact options mentioned or through the account settings.

2.3 Contact

When contacting us (via contact form, live chat, or email), we collect your data to process your inquiry in accordance with Art. 6(1)(b) GDPR. Once your inquiry has been fully processed, your data will be deleted unless further use is permitted or consented to.

Live Chat Tool – Ascend by Wix
We use the live chat tool Ascend by Wix (Wix.com Ltd., Tel Aviv, Israel), for better customer communication (Art. 6(1)(f) GDPR). Wix acts on our behalf and may use servers in countries mentioned above.

3. Shipping

To fulfill your order (Art. 6(1)(b) GDPR), we share your data with shipping providers. This also includes manufacturers or wholesalers who handle drop shipping on our behalf.

4. Payment

We work with technical providers, banks, and payment services to process payments. Depending on the method, data may be transmitted to them for transaction purposes (Art. 6(1)(b) GDPR).
In some cases, data may also be used for fraud prevention and accounting optimization (Art. 6(1)(f) GDPR).

5. Email Marketing

Newsletter Registration & Tracking
With your consent (Art. 6(1)(a) GDPR), we send you our email newsletter. You can unsubscribe at any time.
We use newsletter tracking technologies (e.g. tracking pixels, web beacons) to analyze interactions for future optimization. These include information like IP address, email, clicks, and open rates.
If you do not want tracking, you can unsubscribe at any time.

6. Cookies and Related Technologies

We use cookies to make the site functional and user-friendly.
Some cookies are necessary (e.g., cart functions), others are used with your consent (Art. 6(1)(a) GDPR), such as for analytics or marketing.
You can manage your consent preferences in your browser settings.

7. Use of Third-Party Technologies

7.1 Google Services

We use services from Google Ireland Ltd. (Dublin, Ireland), which may transfer data to the U.S. (Google LLC). Processing may be based on joint controller agreements (Art. 26 GDPR) and Standard Contractual Clauses.

7.2 Amazon Advertising

We collaborate with Amazon Europe Core S.à.r.l. (Luxembourg) to display ads. Amazon may collect interaction data, store it in the U.S., and use cookies. We have no control over this processing.

8. Social Media

8.1 Social Media Buttons

Social buttons (Facebook, Instagram, Pinterest) are embedded as links. Only when clicked is a connection established to the provider's servers.

8.2 Social Media Profiles

If you visit our social media profiles (Facebook, Instagram, YouTube, Pinterest) and have given consent (Art. 6(1)(a) GDPR), user profiles may be created using cookies and used for advertising purposes.
Data may be transferred to countries outside the EU under Standard Contractual Clauses if no adequacy decision exists.

9. Your Rights

You have the right to:

Access your data (Art. 15 GDPR)
Rectify or complete your data (Art. 16 GDPR)
Erasure (Art. 17 GDPR), unless exceptions apply
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to Object
You may object to processing based on legitimate interests at any time, especially in the case of direct marketing.

10. Contact

If you have any questions about how your data is collected, used, or stored, or if you wish to exercise your rights, please contact us using the contact details provided in the legal notice.