Privacy Policy
Privacy Policy
Protecting your personal data is important to me. This Privacy Policy explains which personal data is processed when you visit my website and use my online shop, for what purposes this data is processed, and what rights you have under the General Data Protection Regulation (GDPR).
I process personal data only in accordance with applicable data protection laws and only to the extent necessary to provide my website, process enquiries, handle orders and payments, and ship my artworks.
1. Data Controller
The controller responsible for the processing of personal data on this website is:
Carina Krämer
Schützenstraße 23
70190 Stuttgart
Germany
Email: info@carinakraemer.com
Website: www.carinakraemer.com
2. Visiting My Website and Server Log Files
When you access my website, the web server automatically processes certain technical information. This may include, in particular, your IP address, the date and time of access, browser type and version, operating system, the website previously visited, and the pages accessed.
This data is processed to technically provide my website, ensure its security and stability, and detect possible attacks or misuse.
The legal basis for processing is Art. 6(1)(f) GDPR. My legitimate interest lies in providing my website securely and reliably.
The data is deleted as soon as it is no longer required for the purposes stated above and provided that there are no statutory retention obligations.
3. Hosting by Hostinger
My website and online shop are operated and hosted using the Hostinger Website Builder.
As part of providing its hosting and website services, Hostinger may process personal data. This may include technical data, IP addresses, and data submitted by visitors when using my website or online shop.
Hostinger processes data in connection with the services I use, among other things, to provide, secure and maintain the technical infrastructure. In doing so, Hostinger may process personal data on my behalf.
Where required, the legal basis for processing visitors' personal data is Art. 6(1)(f) GDPR. My legitimate interest lies in providing my website and online shop securely and reliably.
Further information about the processing of personal data by Hostinger can be found in Hostinger's Privacy Policy: Link
4. Cookies
My website does not use cookies for analytics, marketing or tracking purposes.
According to Hostinger, the Hostinger Website Builder does not use cookies by default. Cookies may be added through additional integrations, such as analytics or tracking services. I currently do not use any such additional tracking integrations.
5. Google Fonts
My website uses fonts provided by Google Fonts.
Hostinger states that the Website Builder uses Google Fonts by default to provide various fonts and retrieves the font files via Cloudflare.
When the fonts are provided, technical data required to deliver the website may be processed.
The processing serves the consistent and visually appealing presentation of my website and the technical provision of the fonts used.
Further information can be found in Google's Privacy Policy:
6. Contact by Email or Contact Form
If you contact me by email or via a contact form, I process the personal data you provide, in particular your name, email address and the content of your message.
The processing takes place to the extent necessary to handle your enquiry or respond to your message.
The legal basis is Art. 6(1)(b) GDPR if your enquiry is related to entering into or performing a contract. In other cases, processing is based on my legitimate interest in responding to enquiries pursuant to Art. 6(1)(f) GDPR.
The data is deleted once your enquiry has been conclusively dealt with and there are no statutory retention obligations or other reasons requiring further storage.
7. Orders Through My Online Shop
When you order an artwork through my online shop, I process the personal data required to process the order.
This may include, in particular:
First and last name
Billing address
Delivery address
Email address
Order details
Payment information or information regarding payment status
The data is processed to perform the purchase contract, process and manage your order, handle payment, and deliver the purchased artwork.
The legal basis is Art. 6(1)(b) GDPR.
In addition, processing may be necessary to comply with statutory obligations, in particular tax and commercial record-keeping requirements, pursuant to Art. 6(1)(c) GDPR.
Providing the personal data required for an order is necessary to conclude and perform the purchase contract. Without this data, the order may not be able to be processed or delivered.
8. Payment Processing via Stripe
I use Stripe to process payments in my online shop.
As part of payment processing, Stripe processes the personal data required for the respective payment. This may include, in particular, name, email address, billing and delivery information, payment information, transaction data and technical data.
Depending on availability, various payment methods may be offered through Stripe. These may include card payments as well as Apple Pay, Google Pay and Klarna. Hostinger confirms that these payment methods can be offered through the Stripe integration of the Website Builder.
The processing is carried out to process the payment and therefore to perform the purchase contract pursuant to Art. 6(1)(b) GDPR. Processing may also be necessary for fraud prevention and compliance with legal obligations.
Further information about data processing by Stripe can be found here:
9. Apple Pay
Payment via Apple Pay may be available in my online shop.
If you select Apple Pay as your payment method, the data required to process the payment will be transmitted to the payment service providers involved.
Apple Pay is offered in my shop through the Stripe payment integration.
The processing is carried out to process the payment method you have selected and therefore to perform the purchase contract pursuant to Art. 6(1)(b) GDPR.
Further information about data processing by Apple can be found here:
10. Google Pay / Google Wallet
Payment via Google Pay or Google Wallet may be available in my online shop.
If you select this payment method, the data required to process the payment will be transmitted to the payment service providers involved.
Google Pay is offered in my shop through the Stripe payment integration.
The processing is carried out to process the payment method you have selected and therefore to perform the purchase contract pursuant to Art. 6(1)(b) GDPR.
Further information about data processing by Google can be found here:
11. Klarna
Payment via Klarna may be available in my online shop.
If you choose a payment method offered by Klarna, the personal data required to process the payment will be transmitted to Klarna. This may include, in particular, name, address, email address, order and transaction data, as well as any other information required for the respective payment method.
Klarna processes this data in particular to process the payment, verify identity and, where applicable, creditworthiness, and prevent fraud.
Where necessary to perform the purchase contract, processing is based on Art. 6(1)(b) GDPR. Further processing may be based on statutory obligations or Klarna's legitimate interests.
Further information about data processing by Klarna can be found here:
12. Shipping with DHL
I use DHL to ship purchased artworks.
To carry out the delivery, I transmit the personal data required for shipping to DHL. This includes, in particular, your name and delivery address and, where applicable, additional contact details required for delivery or shipping notifications.
The processing of data is carried out to perform the purchase contract pursuant to Art. 6(1)(b) GDPR.
DHL processes the transmitted data to carry out and manage the shipment and deliver the package.
Further information about the processing of personal data by DHL can be found in DHL's Privacy Policy.
13. Storage and Deletion of Personal Data
Personal data is stored only for as long as necessary for the respective processing purpose.
In addition, statutory retention obligations, particularly under commercial and tax law, may require data to be stored for a longer period.
Once the applicable retention period has expired, the data will be deleted unless another legal basis permits or requires further storage.
14. Legal Bases for Processing
Personal data is processed in particular on the basis of the following provisions:
Art. 6(1)(a) GDPR, where consent has been given for a specific processing purpose;
Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or for pre-contractual measures, in particular for orders and payments;
Art. 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation;
Art. 6(1)(f) GDPR, where processing is necessary for the purposes of legitimate interests and those interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
15. Rights of Data Subjects
Under the GDPR, you have the following rights in particular:
Right of Access
You have the right to request information about whether and which personal data concerning you is being processed.
Right to Rectification
You have the right to request the correction of inaccurate personal data and the completion of incomplete data.
Right to Erasure
Under the conditions set out by law, you have the right to request the deletion of your personal data.
Right to Restriction of Processing
Under the conditions set out by law, you have the right to request the restriction of the processing of your personal data.
Right to Data Portability
Under the conditions set out by law, you have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format.
Right to Object
You have the right, on grounds relating to your particular situation, to object to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before consent was withdrawn remains unaffected.
To exercise your rights, you may contact me at any time using the contact details provided above.
16. Automated Decision-Making
I do not carry out automated decision-making, including profiling, myself.
Where certain payment service providers, particularly Klarna, carry out automated checks or decisions when their services are used, the respective provider is responsible for this processing. Further information can be found in the respective provider's Privacy Policy.
17. Recipients of Personal Data
Personal data is only transferred to those service providers and other recipients who are required to operate my website, process orders, handle payments or deliver purchased goods.
These include, in particular:
Hostinger as hosting and website builder provider,
Stripe as payment service provider,
Apple or Google, where applicable, depending on the payment method selected,
Klarna when an applicable payment method is selected,
DHL for delivery of purchased goods.
Personal data will not otherwise be disclosed unless there is a legal obligation to do so, you have given your consent, or another legal basis under data protection law permits such disclosure.
18. Transfers of Personal Data to Third Countries
When using certain service providers, personal data may be transferred to countries outside the European Union or European Economic Area.
Such transfers will only take place where permitted under the applicable requirements of the GDPR.
The respective providers are responsible for their own data processing and provide information in their Privacy Policies about the data protection mechanisms used and, where applicable, appropriate safeguards for international data transfers.
19. Right to Lodge a Complaint with a Data Protection Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The supervisory authority responsible for my place of business is, in particular:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI BW)
You may alternatively contact another data protection supervisory authority, in particular the supervisory authority at your habitual place of residence or place of work.
20. Data Processing When Using the Withdrawal Button
If you exercise your right of withdrawal using the withdrawal function provided on our website, we process the data you enter for this purpose (e.g. order details, contact details, and the content of your withdrawal declaration) in order to process and confirm your withdrawal. The legal basis for this processing is the fulfilment of our legal obligations arising from the right of withdrawal (Art. 6(1)(c) GDPR) and the performance of the contract (Art. 6(1)(b) GDPR). The data will be stored in accordance with the statutory retention periods.
21. Shipping and Printing of Art Prints (Gelato SA)
For the production and shipping of our art prints, we work with the print-on-demand service provider Gelato (Gelato ASA, Dronning Eufemias gate 8, 0191 Oslo, Norway). To fulfil your order, we transmit the data required for shipping (name, delivery address, and if applicable, email address) to Gelato. Gelato processes this data solely for the purpose of printing and shipping the ordered art prints.
This processing is based on Art. 6(1)(b) GDPR (performance of a contract). A data processing agreement pursuant to Art. 28 GDPR is in place with Gelato, ensuring that your data is processed there in compliance with the GDPR as well.
22. Updates to This Privacy Policy
I reserve the right to amend this Privacy Policy if my website, the services I use, or legal requirements change.
The current version published on this website shall apply.