Privacy Policy

1. Controller

PR Arts – Patrick Rupp
Meisenbergstrasse 1
74182 Obersulm
Germany
Phone: +49 7062 662820-0
Email: info@pr-arts.de
VAT ID: DE300173780

We have not appointed a data protection officer; the statutory conditions for doing so do not apply to us.

2. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7 (3)).

Simply contact info@pr-arts.de.

Right to object: Where we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object to that processing on grounds relating to your particular situation.

You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstrasse 20, 70173 Stuttgart, Germany
poststelle@lfdi.bwl.de

3. Visiting our website

When you visit the site, data is automatically transmitted to the server and stored in log files: IP address, date and time, page requested, volume of data transferred, referrer, browser type and operating system.

The purpose is technical operation, stability and security of the website. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in a functioning shop protected against attacks.

4. Hosting and shop system

Our shop runs on software provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify processes the data named in this policy on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Processing in countries outside the EU, in particular Canada and the USA, is possible. Shopify bases these transfers on the standard contractual clauses of the EU Commission and, where applicable, on the adequacy decision for Canada or the EU-US Data Privacy Framework.

Further information: https://www.shopify.com/legal/privacy

5. Cookies

We use cookies that are technically necessary for the operation of the shop, for instance to keep your basket, chosen language and currency across page changes. Without them the ordering process does not work. The legal basis is section 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.

Cookies that are not technically necessary, in particular for reach measurement, are only set if you have consented. The legal basis is then section 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future.

6. Orders and contract processing

When you order from us we process your name, delivery and billing address, email address, the items ordered and the details required for payment. The purpose is performance of the contract of sale. The legal basis is Art. 6 (1) (b) GDPR. Where we retain data to comply with tax and commercial law obligations, the legal basis is Art. 6 (1) (c) GDPR.

Retention: We keep invoices and accounting records for eight years (section 147 of the German Fiscal Code) and commercial letters for six years (section 257 of the German Commercial Code). The period begins at the end of the calendar year in which the record was created.

7. Production and shipping

All items are produced individually after your order. For this we pass your order and delivery data to our production partner: Gelato ASA, Karenslyst allé 8B, 0278 Oslo, Norway.

Gelato produces through affiliated print facilities and commissions the carrier that delivers your parcel. Only the data required for manufacture and delivery is transmitted: name, delivery address and the items ordered. Norway belongs to the European Economic Area; an adequacy decision of the EU Commission exists. The legal basis is Art. 6 (1) (b) GDPR.

8. Payment processing

We use payment service providers. You enter the payment details directly with the provider concerned; we do not receive complete card details.

Shopify Payments (credit card, Shop Pay) — operated by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Card processing is carried out by Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland.

PayPal — PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg.

The legal basis is Art. 6 (1) (b) GDPR. The providers additionally process your data under their own responsibility according to their own privacy policies, among other things to prevent fraud and to meet legal obligations.

If you choose Shop Pay, Shopify stores your payment and delivery details for future orders. This is voluntary; you can also pay without Shop Pay.

9. Contacting us

If you write to us by email or through the contact form, we process your details in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns a contract, otherwise Art. 6 (1) (f) GDPR. We delete enquiries once they have been dealt with and no retention obligations apply.

10. Newsletter

You can subscribe to our email list on our website. For this we need your email address. After signing up you will receive an email asking you to confirm the subscription (double opt-in). Only then do we add you to the list. We store the time and IP address of the sign-up and the confirmation in order to be able to demonstrate consent.

The legal basis is your consent under Art. 6 (1) (a) GDPR. You may withdraw it at any time, via the unsubscribe link in every email or informally to info@pr-arts.de. The lawfulness of processing carried out until then remains unaffected.

11. Reach measurement

Our shop system collects statistical data about the use of the shop, such as which pages were viewed and which items were looked at. This evaluation takes place only where you have consented. The legal basis is Art. 6 (1) (a) GDPR and section 25 (1) TDDDG.

We do not embed advertising networks. We do not use a Facebook pixel, Google Analytics or comparable tracking.

12. Recipients

Beyond the bodies named above, we pass your data only to our tax adviser and to authorities where we are legally obliged to do so. We do not sell or rent your data to third parties.