Privacy

hallo@artistikath.de

No Data Protection Officer is appointed (sole trader below the threshold).

Plausible counts which page someone opens and on which one someone signs up for the newsletter. Not who. The script lives on analytics.artistikath.de — Kathi's server, not the Plausible cloud. No cookie, no banner, no ads, no profiles. Stored: page, referrer, browser, device, coarse country.

Recipients: Hetzner (hosting the Plausible instance). Retention: aggregated on my server until I delete the instance. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reach and stability). Objection: content blocker or do not visit.

The shop and Plausible run on my Hetzner server. Short access logs (IP, path, user-agent) for security and stability — journald, 14 days. Art. 6(1)(f) GDPR.

A cookie named cart, 30 days, HttpOnly, SameSite=Lax, Secure on HTTPS. It holds an id, nothing else. That keeps the cart yours and the original held. No cookie, no checkout. Open carts are deleted after 40 days, unpaid checkout sessions after 7 days. Art. 6(1)(b) GDPR, TDDDG § 25(2).

Name, mail, text, optional the work. Lands with hallo@artistikath.de. I keep the inquiry until it is done, then delete it. The IP sits briefly in memory against form spam — not on disk. Art. 6(1)(b) and (f) GDPR. Contact form

Name, mail, order number or the work. Lands with hallo@artistikath.de. You get an immediate receipt to your mail — name, order, mail and time. I keep the withdrawal with the order (bookkeeping). The IP sits briefly in memory against form spam — not on disk. Art. 6(1)(b) and (c) GDPR. Withdraw from contract

Your mail address, the language, the sentence you agreed to, and when you signed up and confirmed. The IP sits briefly in memory against form spam — not on disk. Before you confirm, only the one mail with the link is sent. After that I write when there is a new work, prints or news from the studio. I do not measure whether you open the mail or click anything. Unsubscribe with the link in every mail; I delete the address 30 days later, an unconfirmed one after 7 days. Sent through my mailbox at Proton. Art. 6(1)(a) GDPR, § 7 UWG.

You pay on Stripe's page by card or PayPal. Card data never sits on my machine. If you choose PayPal, Stripe sends you on to PayPal. PayPal then receives what the payment needs: name, mail, amount and delivery address. Stripe and PayPal have their own privacy rules: stripe.com/privacy · paypal.com/privacy. After payment I keep the order, name, mail, phone, address and the invoice — otherwise there is no bookkeeping. Eight years from year-end (German Fiscal Code § 147). No erasure of those records during that time (GDPR Art. 17(3)(b)). After that I delete the order and the PDF. The thank-you mail goes via Proton (Switzerland). Art. 6(1)(b) and (c) GDPR.

For a print I send name, mail, phone and delivery address to Prodigi (United Kingdom) so they can print and ship. Prodigi fetches the print file and the sheet with the QR code for feedback from my server. Your contract is with me, not the print partner. Prodigi has its own rules: prodigi.com/privacy-and-cookie-policy. Art. 6(1)(b) GDPR.

A parcel with a print holds a sheet with a QR code. The link in it belongs to your order; your name is not in it. If you like, you leave stars and a note there — voluntarily. Both reach me by mail and are kept with your order. I publish none of it. It stays with the order and is deleted with it. The IP sits briefly in memory against form spam — not on disk. Art. 6(1)(f) GDPR: I want to know how my prints arrive.

Stripe and PayPal process in the US — under the EU-US Data Privacy Framework and/or standard contractual clauses. Proton Mail in Switzerland (adequacy decision). Prodigi in the UK (adequacy decision); depending on destination the print may be made in the EU or the US.

Links on About and Contact go to Instagram. You only leave the shop when you click. No embedded feed, no tracking from me.

• Plausible: until the instance is deleted
• Server logs: 14 days
• Cart cookie: 30 days; open carts 40 days; checkout sessions 7 days
• Contact inquiries: until done
• Newsletter: until you unsubscribe, then 30 days; unconfirmed 7 days
• Feedback on delivery: with the order
• Withdrawal: with the order, 8 years from year-end (German Fiscal Code § 147)
• Orders and invoices: 8 years from year-end (German Fiscal Code § 147)

Access, correction, erasure, restriction, portability, objection — including against the legitimate interest for page views: hallo@artistikath.de.

Complaint to the Lower Saxony Data Protection Authority, Prinzenstraße 5, 30159 Hanover — without going through me first. lfd.niedersachsen.de

No automated decisions including profiling (Art. 22 GDPR).