Here's a quick overview of what happens with your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For more detailed info on data protection, please check out our Privacy Policy listed below this text.
Who's responsible for collecting data on this website?
The website operator handles all data processing on this site. You can find their contact details in the 'Note on the Responsible Party' section of this Privacy Policy.
How do we collect your data?
Some of your data is collected when you share it with us, for example, information you type into a contact form. Other data is automatically recorded by our IT systems when you visit the website, either automatically or with your consent. This mainly includes technical data like your internet browser, operating system, or the time you viewed a page. This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to make sure the website runs smoothly without any errors. Other data might be used to analyze how you use the site.
What rights do you have regarding your data?
You have the right to get information about the origin, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to ask for this data to be corrected or deleted. If you've given consent for data processing, you can withdraw that consent at any time for the future. Plus, you have the right to request that the processing of your personal data be restricted under certain circumstances. You also have the right to file a complaint with the relevant supervisory authority. For these and any other questions about data protection, feel free to contact us anytime.
The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (we'll just call them Webflow). When you visit our website, Webflow collects things like log files and your IP addresses.
Webflow is a tool that helps us build and host our website. It uses cookies and other tech to recognize you, which Webflow stores. These necessary cookies are super important for making sure certain website features work and to keep things secure.
You can find all the nitty-gritty details in Webflow's privacy policy here: https://webflow.com/legal/eu-privacy-policy.
We use Webflow because it's in our best interest (Art. 6 para. 1 lit. f GDPR) to have a super reliable website for you. If we've asked for your permission, we process your data based on your consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG), especially if it involves storing cookies or accessing info on your device (like device fingerprinting) as per TDDDG. You can always change your mind and withdraw your consent. Any data sent to the USA relies on the EU Commission's standard contractual clauses. More info on that is available here: https://webflow.com/legal/eu-privacy-policy.
Webflow is also certified under the "EU-US Data Privacy Framework" (DPF). This is an agreement between the EU and the USA to make sure that when data is processed in the US, it still meets European data protection standards. As a certified company, Webflow promises to stick to these standards. You can find more details from them at this link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt0000000TT9jAAG&status=Active.
To use the service we just talked about, we've signed a Data Processing Agreement (DPA), sometimes called an addendum. This contract is super important for data protection and makes sure that any personal data from our website visitors is handled exactly as we instruct and always follows GDPR rules.
We, the folks running this website, take protecting your personal data super seriously. We keep your personal info confidential and always follow the legal data protection rules and this privacy policy.
When you use this website, we collect different kinds of personal data. This is basically any info that can identify you personally. This privacy policy explains what data we gather, why we use it, and how we do it.
Just a heads-up: sending data over the internet (like in emails) isn't always 100% secure. It's just not possible to completely protect data from being accessed by others.
The entity responsible for data processing on this website is:
Imke Stüker
Düsseldorfer Straße 141
51063 Cologne
Phone: +49 (0)521-1454587
Email: imke@stueker-art.de
The controlleris the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
Unless we've mentioned a specific time frame elsewhere in this privacy policy, we'll keep your personal data until we no longer need it for the reason we collected it. If you ask us to delete your data (and you have a good reason!) or if you take back your consent for us to process it, we'll delete your data. The only exceptions are if we have other legal reasons to keep it (like for tax or commercial laws); in that case, we'll delete it once those reasons are no longer valid.
Lots of data processing only happens if you give us your clear permission. You can always change your mind and withdraw any consent you've given us. Just so you know, withdrawing your consent won't affect any data processing that happened before you withdrew it.
IF WE PROCESS YOUR DATA BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU CAN ALWAYS OBJECT TO US PROCESSING YOUR PERSONAL DATA FOR REASONS RELATED TO YOUR SPECIFIC SITUATION. THIS ALSO APPLIES TO ANY PROFILING WE DO BASED ON THESE RULES. YOU'LL FIND THE EXACT LEGAL REASON FOR EACH PROCESSING ACTIVITY IN THIS PRIVACY POLICY. IF YOU OBJECT, WE'LL STOP PROCESSING YOUR PERSONAL DATA UNLESS WE CAN SHOW REALLY STRONG, LEGITIMATE REASONS FOR CONTINUING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF WE NEED TO PROCESS IT TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS (THIS IS YOUR RIGHT TO OBJECT UNDER ART. 21 PARA. 1 GDPR).
IF YOUR PERSONAL DATA IS USED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO US PROCESSING YOUR PERSONAL DATA FOR SUCH MARKETING. THIS INCLUDES PROFILING THAT'S CONNECTED TO DIRECT MARKETING. IF YOU OBJECT, WE'LL STOP USING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES (THIS IS YOUR RIGHT TO OBJECT UNDER ART. 21 PARA. 2 GDPR).
If you feel your GDPR rights have been violated, you have the right to complain to a supervisory authority. This would typically be in the country where you live, work, or where the alleged violation happened. This right to complain doesn't stop you from seeking other administrative or legal action.
You have the right to get your data that we process automatically (either with your consent or as part of a contract) in a common, machine-readable format. You can get it for yourself or have us send it to someone else. If you ask us to directly transfer your data to another data controller, we'll do it, but only if it's technically possible.
For your security and to keep sensitive stuff like your orders or inquiries safe when you send them to us, this site uses SSL or TLS encryption. You'll know your connection is secure because your browser's address bar will change from "http://" to "https://", and you'll see a little lock symbol there.
When SSL or TLS encryption is active, it means that no one else can snoop on the data you send to us.
Under current laws, you always have the right to ask us for free info about your personal data we've stored – like where it came from, who it's shared with, and why we're processing it. You might also have the right to get this data corrected or deleted. If you have any questions about your personal data, feel free to reach out to us anytime!
You have the right to ask us to limit how your personal data is processed. Feel free to get in touch with us anytime if you want to do this. You can ask for your data processing to be limited in these situations:
If you question whether the personal data we have about you is correct, we usually need a bit of time to check it. While we're looking into it, you have the right to ask us to limit how your personal data is processed.
If your personal data has been or is being processed unlawfully, you can ask us to limit the data processing instead of deleting it.
Even if we don't need your personal data anymore, but you still need it to make, defend, or enforce legal claims, you have the right to ask us to limit how it's processed instead of deleting it.
If you've objected to the processing of your data under Article 21 (1) GDPR, we need to weigh your interests against ours. Until we figure out whose interests are more important, you have the right to ask us to limit how your personal data is processed.
If you've limited how your personal data is processed, we can only process it (apart from storing it) with your permission. The only other times we can process it are to make, defend, or enforce legal claims, protect someone else's rights, or if there's a really important public interest for the European Union or a member state.
We don't want our contact details, which are published as required by law, to be used for sending unsolicited advertising or information. The website owners will take legal action if they receive unwanted marketing messages, like spam emails.
Our website uses what we call 'cookies'. These are tiny text files that won't harm your device. They're stored on your device either temporarily for your visit (session cookies) or for a longer time (persistent cookies). Session cookies disappear automatically once you leave our site. Persistent cookies stay on your device until you delete them yourself or your web browser does it automatically.
Sometimes, when you visit our site, third-party companies might also store cookies on your device (these are called third-party cookies). These help us or you use certain services from those companies (like cookies for handling payments).
Cookies do different things. Lots of them are essential for the website to work properly (for example, for your shopping cart or to show videos). Other cookies help us understand how people use our site or show you ads.
Cookies that are needed for the website's basic communication (necessary cookies), or to give you features you want (functional cookies, like for your shopping cart), or to make the website better (like cookies that measure how many people visit), are stored based on Article 6 (1) (f) of the GDPR, unless there's another legal reason. The website owner has a good reason to store cookies to make sure their services run smoothly and are optimized. If we've asked for your permission to store cookies, then those cookies are stored only because you said yes (Article 6 (1) (a) GDPR); you can always change your mind and withdraw your consent.
You can set up your browser to let you know when cookies are being placed. You can choose to allow cookies only in specific situations, block them in certain cases or generally, and even have them deleted automatically when you close your browser. Just keep in mind that if you turn off cookies, some parts of this website might not work as well.
If we use cookies from other companies or for analysis, we'll tell you all about it separately in this privacy policy and ask for your permission if needed.
Our website provider automatically collects and saves information in what are called server log files. Your browser sends this info to us automatically. Here's what they collect:
Your browser type and version
The operating system you're using
Referrer URL
Hostname of the computer accessing the site
Time of the server request
IP address
We don't combine this data with information from other sources. We collect this data based on Article 6 (1) (f) of the GDPR. The website owner has a good reason to collect server log files: it helps us make sure the website works perfectly and looks great.
If you get in touch with us by email, phone, or fax, we'll store and process your request, including any personal details you provide (like your name and what you're asking about), so we can handle your query. We won't share this data without your permission.
We process this data based on Article 6 (1) (b) of the GDPR if your request is linked to a contract or needed for pre-contractual steps. For all other cases, we process it because we have a good reason to handle your requests efficiently (Article 6 (1) (f) GDPR), or if we asked for and received your consent (Article 6 (1) (a) GDPR).
The data you send us through contact requests will stay with us until you ask us to delete it, you withdraw your permission for us to store it, or the reason for keeping the data is no longer valid (for example, after we've fully dealt with your request). Don't worry, any mandatory legal rules – especially those about how long we have to keep data – will still apply.
We use a web analytics service called Piwik PRO on our website. This service is provided by the German company
Piwik PRO GmbH
Kurfürstendamm 21
10719 Berlin, Germany.
You can find out more about what data Piwik PRO processes by checking out their privacy policy here: https://piwikpro.de/datenschutz/.
