Privacy Policy

1. Data Controller

The data controller responsible for data processing on this website is:

Iris Straßacker Schöne Künste
Sole proprietorship
Albert-Schweitzer-Str. 34
76139 Karlsruhe
Germany
Email: peter@strassacker.name

A data protection officer has not been appointed, as there is no legal obligation to do so.

2. General Information

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection laws.

Personal data are all data that can be used to personally identify you (e.g. name, address, email address, IP address).

3. Rights of Data Subjects

You have the right at any time to:

• Access your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to the processing of your data (Art. 21 GDPR)
• Withdraw consent at any time (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a competent data protection supervisory authority.

4. Data Collection When Visiting the Website (Server Logs)

The following data are automatically collected when you access our website:

• Date and time of access
• Browser type and operating system
• Referrer URL
• IP address in anonymized form (used solely to determine the location of access)

Purpose: technical operation, stability and security
Legal basis: Art. 6(1)(f) GDPR

5. Hosting by IONOS

Our website is hosted by IONOS SE.

Provider:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

IONOS processes personal data (e.g. IP addresses, server log files) exclusively within the framework of commissioned data processing pursuant to Art. 28 GDPR.

Legal basis: Art. 6(1)(f) GDPR
Purpose: secure and efficient operation of the website

6. No Use of Cookies

This website does not use cookies for analytics, tracking or marketing purposes.

7. Online Shop / Order Processing

Processed data:

• First and last name (and company name if applicable)
• Billing and shipping address
• Email address
• Order data
• Payment method

Purpose: conclusion and performance of contracts, delivery of goods, invoicing, compliance with legal obligations
Legal basis: Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligation)
Storage period: invoice and contract data are stored for 8 years in accordance with tax and commercial law requirements

8. Payment Service Provider PayPal

We offer payment via PayPal.

Provider:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

Processed data:

• Name
• Email address
• Billing and shipping address
• Payment information
• Order amount

The processing of this data is carried out independently by PayPal.
Purpose: payment processing and fraud prevention
Legal basis: Art. 6(1)(b) GDPR

Further information can be found in PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

9. Newsletter

Upon subscription, we store:

• Email address
• Date and time of registration
• IP address

Purpose: sending information about products and offers
Legal basis: Art. 6(1)(a) GDPR (consent)

Unsubscription: consent can be withdrawn at any time, e.g. via the unsubscribe link in the newsletter.
Storage period: until consent is withdrawn

10. Contact by Email

If you contact us by email, the transmitted data will be used exclusively to process your inquiry.

Legal basis: Art. 6(1)(f) GDPR
Storage period: until the inquiry has been fully processed

11. Data Disclosure

Personal data are disclosed only:

• for contract performance, e.g. transfer of name and shipping address to DHL, GLS or DPD;
• due to legal obligations;
• or on the basis of your consent.

Recipients may include shipping, payment or IT service providers. GDPR-compliant contracts are in place with all service providers.

12. SSL Encryption

This website uses SSL encryption to protect transmitted data from unauthorized access.

13. Changes to This Privacy Policy

We reserve the right to amend this privacy policy in the event of legal or technical changes.

Last updated: 11 December 2025