Privacy policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information

The protection of your personal data is an important concern for us. We process your data exclusively on the basis of the statutory provisions (GDPR; German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG]; Telecommunications Digital Services Data Protection Act [Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG]). In this privacy policy, we inform you about the most important aspects of data processing in connection with our website.

Personal data are all data by which you can be personally identified. Processing only takes place to the extent that it is necessary for the purposes stated.

3. Hosting and server log files

This website is hosted by an external service provider (host). The personal data collected on this website are stored on the host’s servers.

When the website is accessed, the host automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are, in particular:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

These data are not merged with other data sources. They are collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and the security of their website. Where required, a data processing agreement (Art. 28 GDPR) is in place with the host.

4. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock symbol in your browser bar.

5. Contacting us via the contact form (Formspree)

On our website, we offer you the option of getting in touch with us via a contact form. In doing so, the data you enter – name, email address and your message – are transmitted to us in order to process your enquiry.

For the technical handling and delivery of the form messages, we use the Formspree service of the provider Formspree, Inc., 1735 Market Street, Philadelphia, PA 19103, USA. For this purpose, the data you enter are transmitted to Formspree and processed there.

The data are processed on the basis of Art. 6(1)(b) GDPR where your enquiry is related to the initiation or performance of a contract (e.g. a custom-made piece). In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), which you give by submitting the form.

A transfer to the USA is protected by appropriate safeguards. Formspree, Inc. bases the data transfer on the standard contractual clauses of the European Commission (Art. 46 GDPR). For details, please refer to Formspree’s privacy policy: https://formspree.io/legal/privacy-policy/ (opens in a new tab).

The data you enter in the contact form will remain with us until you ask us to delete them, withdraw your consent to their storage or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

6. Contacting us by email

If you contact us by email, your details, including the contact details you provide, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The legal basis is Art. 6(1)(b) GDPR (contract-related enquiries) or Art. 6(1)(f) GDPR (legitimate interest in handling the enquiry). We do not pass on these data without your consent.

7. Fonts (hosted locally)

To ensure that fonts are displayed consistently, this website uses so-called web fonts (Commissioner). These fonts are embedded locally on our own server and are delivered from there.

When the website is accessed, no connection is established to third-party servers – in particular not to Google. No personal data are transmitted to external providers in this process and, in particular, your IP address is not passed on to Google or other third parties.

8. External links to social media and online shop

Our website contains links to our Etsy shop and to our profiles on Instagram and TikTok. These are exclusively simple hyperlinks – no content from these providers is embedded and, when our site is merely loaded, no data are transmitted to these providers.

Only when you actively click on one of these links and are redirected to the respective platform do the respective providers process your data under their own responsibility. In this regard, please note the privacy information of the respective providers:

• Etsy: https://www.etsy.com/legal/privacy/ (opens in a new tab)
• Instagram (Meta Platforms Ireland Ltd.): https://privacycenter.instagram.com/policy (opens in a new tab)
• TikTok (TikTok Technology Limited, Ireland): https://www.tiktok.com/legal/page/eea/privacy-policy/en (opens in a new tab)

9. Cookies and tracking

This website sets no cookies of its own and uses no analytics, tracking or marketing tools (e.g. no Google Analytics, no advertising pixels). Nor are any data stored in your browser’s local storage (Local Storage). A consent request (cookie banner) is therefore not required.

10. Your rights as a data subject

Under the GDPR, you have the following rights:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to the contact details given above under “Controller” is sufficient.

11. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The authority competent for us is:

12. Validity and amendment of this privacy policy

This privacy policy is currently valid. As a result of the further development of our website or due to amended statutory or regulatory requirements, it may become necessary to amend this privacy policy.