Privacy policy
Status: 12.11.2025
The protection of your personal data is important to us. Below we inform you about which personal data we collect, how we process it and what rights you have as a data subject.
RESPONSIBLE
Artison Studio
At the transmitter 5
66346 Püttlingen, Germany
E-Mail: info@artison-atelier.com
Web: https://artison-atelier.com
I. General information
-
- Terms (Art. 4 GDPR - excerpt)
- Personal data: Any information relating to an identified or identifiable natural person (e.g. name, identification number, location data, online identifier). Data subject: The person whose personal data is being processed.
- Processing: Any operation involving personal data (collection, storage, retrieval, transmission, erasure, etc.).
- Restriction of processing: Marking of stored personal data with the aim of restricting its future processing.
- Profiling: Any type of automated processing of personal data to evaluate personal aspects.
- Pseudonymization: Processing in such a way that data can no longer be assigned to a person without additional information.
- Controller: Body that decides on the purposes and means of processing.
- Processor: Entity that processes personal data on behalf of the controller.
- Recipient: Body to which personal data is disclosed.
- Third party: Entity outside the data subject, controller and processor.
- Consent: Voluntary, informed and unambiguous expression of consent to processing.
- Payment service provider: Service provider for processing payments within the scope of contracts.
- Terms (Art. 4 GDPR - excerpt)
-
-
Type and scope of data collection
-
-
-
- When accessing our website, we only process data that is required for operation, provision and security. Any processing beyond this is only carried out with consent or if a legal permission standard exists.
- a) Legal basis (Art. 6 para. 1 GDPR)
- lit. a - Consent
- lit. b - Contract fulfillment or pre-contractual measures
- lit. c - legal obligation
- lit. d - vital interests
- lit. f - legitimate interestb) Storage period and deletion
We delete personal data as soon as the purpose no longer applies. Data may also be stored if this is required by law (e.g. retention periods under commercial or tax law). Once such periods have expired, the data is deleted or anonymized unless it is still required for the performance of the contract.
-
──────────────────────────────────
II Provision of the website
-
-
Logfiles
-
-
-
- Description: The following data is logged during access:
- Browser type and version
- Operating system used
- Referrer URL and pages visited on our website
- IP address
- Date and time of the server request
- Internet service provider
- Description: The following data is logged during access:
- Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the operation, security and optimization of the website).
- Purpose: Ensuring proper operation, security of the systems, evaluation of stability/performance (no evaluation for marketing purposes).
- Storage period: Maximum seven days; beyond that only in anonymized form (IP addresses are shortened or alienated).
- Objection: The collection is mandatory for the operation; there is therefore no possibility of objection.
-
-
-
Cookies
-
-
-
- Description: We use technically necessary cookies (e.g. login status, language settings) to make our website user-friendly, effective and secure. In addition, analysis cookies may be set - with your consent.
- Examples of stored data:
- Login data
- Language settings
- Page views, use of website functions (for analysis cookies) - Legal basis:
- Technically necessary cookies: Art. 6 para. 1 lit. f GDPR
- Analysis cookies: Art. 6 para. 1 lit. a GDPR (consent) - Purpose:
- Necessary cookies: Functionality and convenience (e.g. session recognition).
- Analysis cookies: Improvement of quality and content through usage analysis. - Storage period / objection:
You can delete, block or manage cookies in your browser settings. Deactivating cookies may restrict functions.
-
-
- 3. contact form and e-mail:
- Description: When using the contact form, we process the data entered as well as the IP address, date and time of transmission. In the case of e-mail contact, we process the data transmitted by e-mail. This data is not passed on to third parties.
- Legal basis:
- Consent: Art. 6 para. 1 lit. a GDPR
- Weighing of interests for e-mail inquiries: Art. 6 para. 1 lit. f GDPR
- Contract/initiation: Art. 6 para. 1 lit. b GDPR - Purpose: Processing your request; prevention of misuse and IT security during the sending process.
- Storage period: Deletion after the end of the conversation; technical metadata (e.g. IP) after seven days at the latest.
- Revocation/objection: Revocation of consent or objection to storage is possible at any time; the conversation may then not be able to be continued.
- Google Analytics
- Provider: Google Ireland Limited / Google LLC, USA.
We use Analytics with IP anonymization („gat._anonymizeIp();“). In exceptional cases, the full IP may be transferred to the USA and truncated there. Google creates usage reports on our behalf; they are not merged with other Google data. - Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in reach measurement and optimization) or Art. 6 para. 1 lit. a GDPR (with consent via the consent dialogue).
- Storage duration/details:
• https://www.google.com/analytics/terms/de.html
• https://policies.google.com/?hl=de - Contradiction:
- Browser add-on: https://tools.google.com/dlpage/gaoptout?hl=de
- You can also manage/deactivate cookies in your browser.
- Provider: Google Ireland Limited / Google LLC, USA.
- Google AdSense
- Provider: Google LLC, USA.
Cookies and web beacons are used to enable the display and analysis of advertisements. The data may be processed on US servers and transmitted to third parties if required by law or on behalf of Google. - Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in refinancing/optimization) or Art. 6 para. 1 lit. a GDPR (consent).
- Duration/Details: https://policies.google.com/technologies/ads?hl=de
- Contradiction:
- Deactivate personalized advertising: https://support.google.com/ads/answer/2662922?hl=de
- Additionally manage/deactivate cookies in the browser.
- Provider: Google LLC, USA.
- Google Remarketing
- Provider: Google LLC, USA.
Uses cookies to recognize returning users and display interest-based advertising on the Google network. - Legal basis: Art. 6 para. 1 lit. a GDPR (consent) or lit. f GDPR.
- Details: https://www.google.de/intl/de/policies/privacy/
- Contradiction:
- Settings: https://www.google.de/settings/ads
- Additionally manage/deactivate cookies in the browser.
- Provider: Google LLC, USA.
- 3. contact form and e-mail:
-
- Google Ads (AdWords) Conversion Tracking
- Provider: Google LLC, USA.
When you click on a Google ad, a conversion cookie is set that is not used for personal identification. We use it to evaluate the effectiveness of our ads (e.g. whether orders are placed). - Legal basis: Art. 6 para. 1 lit. a GDPR (consent) or lit. f GDPR.
- Contradiction:
• https://www.google.de/settings/ads
- Manage/deactivate cookies in the browser.
- Data protection Google: https://www.google.de/intl/de/policies/privacy/
- Provider: Google LLC, USA.
- Google Maps
- Provider: Google LLC, USA.
When maps are displayed, data (including IP address, click behavior) may be transmitted to Google servers - possibly in the USA. - Legal basis: Art. 6 para. 1 lit. f GDPR (better service/location display).
- Details: https://policies.google.com/privacy?hl=de
- Objection: Deactivate JavaScript in your browser (loss of functionality possible).
- Provider: Google LLC, USA.
- Google Ads (AdWords) Conversion Tracking
-
- Google Fonts
- Provider: Google LLC, USA.
When the page is called up, font files are loaded from the Google server; among other things, the pages called up and the IP address can be transmitted. - Legal basis: Art. 6 para. 1 lit. f GDPR (optimized presentation/performance).
- Details:
• https://developers.google.com/fonts/faq?hl=de-DE
• https://policies.google.com/?hl=de - Contradiction: Some browsers allow the blocking of external fonts (display deviations possible).
- Provider: Google LLC, USA.
- Google Fonts
-
- Google reCAPTCHA
- Provider: Google LLC, USA.
To protect against abusive, automated entries (bots), click behavior, existing Google cookies, language settings, date and IP address are processed when using the service; transmission to the USA if necessary. - Legal basis: Art. 6 para. 1 lit. f GDPR (protection of the website/IT security).
- Details:
• https://www.google.com/intl/de/policies/privacy/
• https://policies.google.com/?hl=de - Objection: There are currently no known special opt-out options for reCAPTCHA; you can deactivate JavaScript (loss of functionality possible).
- Provider: Google LLC, USA.
- Google reCAPTCHA
-
- Social plugins and video embeddings (YouTube)
- For data protection reasons, we do not directly integrate social plugins or videos. Data is only transferred to the respective provider when you actively click on a preview image/button.
- Data protection of the services:
- Facebook: https://www.facebook.com/about/privacy
- Twitter/X: https://twitter.com/privacy
- Instagram: http://instagram.com/about/legal/privacy
- YouTube/Google: https://www.google.de/intl/de/policies/privacy/ - Note: YouTube content is only transmitted after you click on the preview image.
- Social plugins and video embeddings (YouTube)
──────────────────────────────────
III Rights of the data subjects
-
- You have the following rights vis-à-vis the controller (Art. 15-21, 77 GDPR):
- Information about the processed personal data (purposes, categories, recipients, storage period, origin, transfer to third countries if applicable, including suitable guarantees, existence of automated decision-making including profiling).
- Correction of incorrect or completion of incomplete data.
- Restriction of processing, if
- the accuracy of the data is disputed (for the duration of the check),
- the processing is unlawful and a restriction is requested instead of erasure,
- the data is required for the assertion/defense of legal claims,
- an objection pursuant to Art. 21 (1) GDPR has been lodged and the consideration is still pending. - Erasure („right to be forgotten“), in particular if the purpose no longer applies, consent has been withdrawn and there is no other legal basis, there is an objection to direct marketing, processing was unlawful or there is a legal obligation to erase (exceptions include freedom of expression/information, legal obligations, public interest/health, archive/research/statistics, legal claims).
- Notification: Recipients to whom data has been disclosed will be informed about rectification/erasure/restriction (if possible and proportionate); you can request to be informed about this.
- Data portability: Receipt of the data provided in a commonly used, machine-readable format and transmission to another controller, where technically feasible (not for sovereign tasks).
- Objection to processing on the basis of Art. 6 para. 1 lit. e or f GDPR, including profiling. In the case of direct advertising, there is a right to object at any time; processing for this purpose will then no longer take place.
- Revocation of granted consent with effect for the future.
- No exclusively automated decision in individual cases (including profiling) that produces legal effects or similarly significantly affects you - except in cases permitted by law with appropriate safeguards.
- Right to lodge a complaint with a supervisory authority (in particular at the place of residence, place of work or place of the alleged infringement). The authority will provide information on the status and outcome of the complaint (Art. 77, 78 GDPR).
- You have the following rights vis-à-vis the controller (Art. 15-21, 77 GDPR):
──────────────────────────────────
Contact for data protection issues
Artison Studio
Am Sender 5, 66346 Püttlingen, Germany
E-Mail: info@artison-atelier.com
