1. Controller and Scope
The party responsible for the processing of personal data (referred to as the “controller” within the meaning of the EU General Data Protection Regulation) is:
Artur Kazun
Jaspersstr. 13
63741 Aschaffenburg, Germany
Phone: +49 (0)6021 5804733
Email: shop@artnira.com
2. General Information on Data Processing
We take the protection of your personal data very seriously and comply with applicable data protection regulations, including the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Personal data means any information relating to an identified or identifiable natural person.
3. Access Data / Server Log Files
Whenever you visit our website, certain data are automatically collected by our web server (server log files). These may include:
- IP address (possibly anonymized)
- Date and time of the request
- Name and URL of the retrieved file
- Referrer URL (website from which our site is accessed)
- Browser type/version and operating system
- Name of your access provider
We process these data for:
- Ensuring a smooth connection and system security
- Technical administration and optimization of the website
- Potential defense against attacks or misuse
The legal basis for processing such data is our legitimate interest under Art. 6(1)(f) GDPR. We do not merge these server log files with other data sources. Log files are usually retained for a limited period (e.g., 7 or 14 days) and then automatically deleted unless a longer storage period is required for evidence purposes.
4. Cookies and Consent Management
We use cookies on our website. Cookies are small text files that your browser stores on your device to enable certain features and functionalities.
4.1 Types of Cookies
- Essential (necessary) cookies: required for the operation of the site (e.g., session cookies).
- Analytics/Marketing cookies: used for statistical analysis and/or marketing purposes.
4.2 Legal Basis
- Essential cookies are processed under our legitimate interest (Art. 6(1)(f) GDPR) to ensure the technical operation and basic functions of the website.
- All other cookies (e.g., for analytics, marketing, or YouTube videos) are only set with your consent (Art. 6(1)(a) GDPR).
4.3 Cookie Banner / Consent Tool
When you first visit our website (and periodically thereafter), you will see a banner or pop-up allowing you to consent or refuse non-essential cookies. You can update your preferences at any time through our consent management tool or the cookie settings link provided on our site.
5. Google Tag Manager and Google Analytics
We use Google Tag Manager to manage and deploy scripts on our website. Through Tag Manager, we may also use Google Analytics.
5.1 Google Analytics
If you have given your consent via our cookie banner, we use Google Analytics (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies to analyze how you use our website.
- IP Anonymization: We activate IP anonymization within the EU/EEA. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there.
- Purpose: We analyze user behavior to improve our website and services.
- Legal Basis: Art. 6(1)(a) GDPR (consent).
- Data Transfer to the USA: Google may process data in the USA; standard contractual clauses are typically in place to ensure an appropriate level of protection.
- Storage Period: Data linked with cookies, user IDs, or advertising IDs in Google Analytics is retained for 14 months, after which they are automatically deleted.
- Opt-Out: You can withdraw your consent at any time in the cookie settings or via the Google Browser Add-on (https://tools.google.com/dlpage/gaoptout).
5.2 Google Tag Manager
Google Tag Manager simply organizes scripts and does not collect personal data by itself. However, it may load other scripts (like Google Analytics) that do collect data.
6. YouTube Embeds
We may embed YouTube videos (operated by Google Ireland Limited). If you interact with such an embedded video, cookies from YouTube/Google may be placed on your device.
- Consent: We only load YouTube content if you have provided your consent (Art. 6(1)(a) GDPR).
- Data Transfer: When you watch an embedded video, Google may receive information such as your IP address and which of our pages you visited.
- If you do not consent, YouTube videos cannot be played. Alternatively, we may use a two-click solution or show a placeholder until you explicitly agree to load the video.
7. Contact and Communication
If you send us inquiries via email or other communication channels, we process your information to handle and respond to your request (Art. 6(1)(b) GDPR if your inquiry is related to a contract, or Art. 6(1)(f) GDPR based on our legitimate interest in processing general inquiries).
8. Data Retention
We store your personal data only for as long as it is necessary to fulfill the purposes for which it was collected, or if we have a legitimate interest or are legally required to retain it for a longer period.
- Tax and commercial retention periods in Germany generally range from 6 to 10 years (for invoices, business correspondence, etc.).
- After these periods, data will be deleted unless there are further legal obligations or legitimate reasons to store it.
9. Rights of Data Subjects
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR): Obtain information about your personal data we process.
- Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete data.
- Right to Erasure (Art. 17 GDPR): Request the deletion of your data, provided no other legal basis or obligations require retention.
- Right to Restriction of Processing (Art. 18 GDPR).
- Right to Data Portability (Art. 20 GDPR): Receive your data in a common, machine-readable format.
- Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests, on grounds relating to your particular situation.
- Withdrawal of Consent (Art. 7(3) GDPR): If processing is based on consent, you can withdraw your consent at any time with effect for the future.
To exercise your rights, you may contact us at [Email Address]. Please note that we may request proof of identity.
10. Right to Lodge a Complaint
If you believe that the processing of your personal data is unlawful, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
In Germany, you can find the respective data protection authorities here:
11. Data Security
We employ technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures are continuously improved in line with technological developments.
12. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy in response to changes in legal requirements or if we introduce new features or services on our website. The current version of this Privacy Policy applies to your visit.
