Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Gregor Stehle
Knesingerstr 6
Email: studio@gregorstehle.net

2. Collection and Storage of Personal Data and the Nature and Purpose of Its Use

a) When Visiting the Website

When you access my website, the browser used on your device automatically sends information to my website server. This information is temporarily stored in log files. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Website from which access was made (referrer URL)
• Browser used and, where applicable, your computer’s operating system and the name of your access provider

This data is processed for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring convenient use of my website
• Evaluating system security and stability
• Other administrative purposes

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest follows from the purposes listed above.

b) When Placing Orders in the Online Store

When you place an order in my store, I collect the following data:

• First and last name
• Billing and shipping address
• Email address
• Payment information (depending on the selected payment method)

This information is collected in order to identify you as my contractual partner, process your order, correspond with you, and issue invoices.

The legal basis is Art. 6(1)(b) GDPR.

c) When Using the Contact Form or Email

If you send me an inquiry via the contact form or email, the information you provide is stored for the purpose of processing your inquiry and any follow-up questions.
The legal basis is Art. 6(1)(f) GDPR.

3. Disclosure of Data

Your personal data is disclosed to third parties only where necessary for performance of the contract:

• to payment service providers (for example, Shopify Payments, PayPal)
• to shipping providers (for example, DHL or freight carriers for larger formats)

No further disclosure to third parties takes place unless I am legally required to do so (Art. 6(1)(c) GDPR).

4. Shopify as the Platform

My store is operated using Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada.
Data is processed by Shopify in data centers worldwide, including in the United States and Canada. Shopify is certified under applicable data-protection standards and is committed to GDPR compliance. Further information can be found in Shopify’s privacy policy.

5. Payment Service Providers

To process payments, I use the payment service providers displayed in my store (for example, Shopify Payments, PayPal, and credit-card providers). Payment data entered is transmitted directly to the respective provider and is not stored by me.

6. Cookies & Analytics Tools

Cookies are used on my website to enable operation of the site and analyze its use.

• Necessary cookies are required for operation of the store.
• Statistics and marketing cookies are set only with your consent (Art. 6(1)(a) GDPR).

You can change your cookie settings in your browser at any time.

7. Your Rights as a Data Subject

You have the right:

• under Art. 15 GDPR, to request information about your personal data processed by me,
• under Art. 16 GDPR, to request the immediate correction of inaccurate data or completion of your stored data,
• under Art. 17 GDPR, to request deletion of your data stored by me, provided that no statutory retention obligations prevent deletion,
• under Art. 18 GDPR, to request restriction of the processing of your data,
• under Art. 20 GDPR, to receive your personal data in a structured, commonly used, and machine-readable format,
• under Art. 77 GDPR, to lodge a complaint with a supervisory authority.

8. Right to Object

If your personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object pursuant to Art. 21 GDPR.

9. Storage Period

Personal data is stored only for as long as necessary to fulfill the relevant purposes or for as long as statutory retention obligations apply.