We appreciate your interest in our website. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.
Information according to §34 Federal Data Protection Act / Art. 15 DSGVO:
Would you like to know what data an art galerie has about you?
You have a legal right to this according to §34 Federal Data Protection Act (BDSG) / Art. 15 DSGVO and we will be happy to comply with your request.
1. Name and contact details of the data controller
This data protection information applies to data processing by the
eine art galerie
represented by the owners:
2. Access Data and Hosting
You can visit our website without providing any personal information. Each time a website is called up, the web server automatically saves a so-called server log file, which e.g. B. the name of the requested file, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval.
This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves to protect our overriding legitimate interests in a correct presentation of our offer within the framework of a balancing of interests. All access data will be deleted no later than seven days after the end of your visit to the site.
The legal basis for processing the IP address is Article 6 (1) (f) GDPR.
Our legitimate interest results from the
• Ensuring a smooth connection setup,
• Ensuring comfortable use of our website
• Evaluation of system security and stability.
A direct conclusion about your identity is not possible based on the information and will not be drawn by us.
Third Party Hosting Services
As part of processing on our behalf, a third-party provider provides the services for hosting and displaying the website. This serves to safeguard our predominantly legitimate interests in a correct presentation of our offer within the framework of a weighing of interests. All data that is collected as part of the use of this website or in the forms provided for this purpose in the online shop as described below is processed on its servers. Processing on other servers only takes place within the framework explained here.
This service provider is located within a country of the European Union or the European Economic Area.
3. Data collection and use for contract processing and when opening a customer account
We collect personal data if you voluntarily provide it to us as part of your order or when contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such, since in these cases we need the data to process the contract or to process your contact and you cannot send the order or contact without providing them. Which data is collected can be seen from the respective input forms. We use the data you provide to process the contract and to process your inquiries in accordance with Article 6 Paragraph 1 Sentence 1 lit. b GDPR.
If you have given your consent to this in accordance with Article 6 Paragraph 1 Sentence 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account. Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this data protection declaration. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods in accordance with Article 6 Paragraph 1 Sentence 1 lit. c GDPR, unless you expressly consent to further use of your data in accordance with Article 6 Paragraph 1 Sentence 1 lit. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this data protection declaration or using a function in the customer account provided for this purpose.
4. Data Sharing
We only pass on your data to third parties if
• and insofar as this is necessary to carry out the contractual relationship with you or to enforce our claims and rights,
• the requests are from official bodies, in particular law enforcement and supervisory authorities, and disclosure is necessary to avert threats to public safety and order and to prosecute criminal offenses and/or
• we are otherwise required by law to do so.
Data transfer for the purpose of fulfilling the contract
In order to fulfill the contract, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the bank commissioned with the payment and, if applicable, the payment service provider commissioned by us or to the selected payment service provider. Some of the selected payment service providers also collect this data themselves if you create an account there. In this case, you must register with the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
Data transfer to shipping service providers
If you have given us your express consent to this during or after your order, we will pass on your e-mail address to the selected shipping service provider in accordance with Article 6 Paragraph 1 Sentence 1 lit can contact you for the purpose of delivery notification or coordination.
The consent can be revoked at any time by sending a message to the contact option described in this data protection declaration or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data that goes beyond this, which is permitted by law and about which we will inform you in this declaration.
Data transmission about outstanding claims to debt collection service providers
If you do not pay open invoices/instalments, despite repeated reminders, we can transmit the data required for collection to a collection service provider for the purpose of fiduciary collection. Alternatively, we can sell the outstanding receivables to a collection service provider. The latter then becomes the owner of the claim and asserts the claims in his own name.
The data is transmitted as part of the sale of receivables on the basis of Article 6 (1) (f) GDPR.
5. Email Newsletter
E-mail advertising with registration for the newsletter
If you register for our newsletter, we use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent.
For this we use the double opt-in procedure to prevent fraud or misuse of your e-mail address. Registration is voluntary. The only mandatory information for sending the newsletter is your e-mail address.
The legal basis is Art. 6 Para. 1 S. 1lit. a GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. When you unsubscribe, all associated newsletter registration data will be deleted immediately.
6. Use of data for payment processing
Data processing for transaction processing
Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers who work for us as part of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary to process the payment. This serves to fulfill the contract in accordance with Article 6 (1) sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. B. on your own website or via a technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies. If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact options described in this data protection declaration.
Data processing for the purpose of fraud prevention and optimizing our payment processes
If necessary, we give our service providers further data, which they use together with the data necessary for processing the payment as our processors for the purpose of fraud prevention and the optimization of our payment processes (e.g. invoicing, processing disputed payments, accounting support). In accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR, this serves to safeguard our legitimate interests in our protection against fraud and in efficient payment management, which are overriding in the context of a balancing of interests.
If we make an advance payment, e.g. when purchasing on account or by direct debit, it is necessary for the conclusion of the contract to obtain identity and creditworthiness information from service companies specialized in this (credit agencies). This serves to protect our overriding legitimate interests within the framework of a balancing of interests in minimizing payment defaults. For this purpose, we transmit your personal data required for a credit check.
This serves to safeguard our overriding legitimate interests in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR in assessing the creditworthiness and willingness to pay of our potential customers prior to the conclusion of the contract and thus avoiding purchase price losses, and is Conclusion of contract required in accordance with Article 22 (2) (a) GDPR. Appropriate measures to protect your rights, freedoms and legitimate interests are taken into account. You have the option of expressing your point of view and contesting the decision by contacting the contact option described in this data protection declaration. After the contract has been fully processed, your data processed for this purpose will be deleted, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
The consent given in the ordering process to the transfer of data can be revoked at any time, even without giving reasons, with effect for the future.
The legal basis is your consent in accordance with Art. 6 (1) lit. a GDPR in the case of a mere request, and in accordance with Art. 6 (1) lit.
7. Cookies and web analysis
In order to make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit (persistent cookies).
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping cart function). These technologies collect and process the IP address, time of visit, device and browser information and information about your use of our website (e.g. information about the contents of the shopping cart). Within the framework of a weighing of interests, this serves overriding legitimate interests in an optimized presentation of our offer in accordance with Article 6 (1) sentence 1 lit. f GDPR.
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Opera™ : http://help.opera.com/Windows/10.20/en/cookies.html
If cookies are not accepted, the functionality of our website may be restricted.
Use of Matomo for web analysis
For website analysis, data is automatically collected and stored on this website with the help of the web analysis software Matomo (https://matomo.org), a service provided by InnoCraft Ltd., when the page is visited, from which user profiles are created using pseudonyms. This serves to protect our overriding legitimate interests in an optimized presentation of our offer in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Cookies can be used. The pseudonymised user profiles are not merged with personal data about the bearer of the pseudonym without a separate, express consent. After the end of the use of Matomo by us, the data collected in this context will be deleted.
All data processed as part of the website analysis described above is processed on our servers.
You can object to data collection and storage at any time with effect for the future by following the instructions below.
After your objection, an opt-out cookie will be stored on your end device. If you delete your cookies, you must click the link again.
All data collected when using the chat tool is processed on our servers and not passed on to third parties.