Privacy Policy
Information on the processing of personal data by Atelier Rachel.
1. Controller
The controller responsible for processing personal data on this website is: Atelier Rachel, Stefanie Rachel, Neuer Weg 34 B, 23867 Sülfeld, Germany. Phone: +49 4537 2638018. Mobile: +49 170 3476678. Email: atelier-rachel@email.de.
2. General information on data processing
We process personal data only where necessary to provide this website, respond to enquiries, take pre-contractual steps, perform contracts, comply with legal obligations, or where processing is based on consent. The legal bases include in particular Article 6(1)(a), (b), (c) and (f) GDPR.
3. Contact enquiries and communication
If you contact us by email or via a contact form, we process the information you provide, in particular your name, contact details and message content, in order to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry relates to pre-contractual steps or contract performance, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in appropriate communication.
4. Purchase enquiries and contract performance
For purchase enquiries and subsequent contract performance, we process in particular your name, address, email address, telephone number, information about the requested artwork, delivery address, payment status and communications required for delivery and contract administration. Processing is based on Article 6(1)(b) GDPR. Where statutory retention obligations apply, further storage is based on Article 6(1)(c) GDPR.
5. Withdrawal form
If you use the electronic withdrawal function or withdrawal form, we process the information you provide in order to handle and document the withdrawal and send an acknowledgement of receipt. The legal basis is Article 6(1)(c) GDPR in conjunction with applicable consumer-law obligations and, where relevant, Article 6(1)(b) GDPR.
6. Recipients of personal data
Personal data is disclosed only where necessary for contract performance, compliance with legal obligations or operation of the website. Recipients may include hosting providers, email providers, payment service providers, tax advisers and shipping or logistics companies. Data is not disclosed for advertising purposes without an appropriate legal basis.
7. Retention periods
We retain personal data only for as long as necessary for the relevant purpose. Enquiry data is deleted once further storage is no longer required and no statutory retention obligations apply. Contract and invoice data is retained in accordance with applicable commercial and tax-law retention requirements.
8. Cookies and external services
Where technically necessary cookies or comparable technologies are used on the website, they are used only to the extent required. Non-essential analytics, marketing or tracking services are used only where valid consent has been obtained. The services actually used will be reviewed before publication of the website and this Privacy Policy will be updated accordingly.
9. Social media links
The website may contain links to our Instagram and TikTok profiles. A simple link does not generally cause data to be transmitted automatically from this website to those platforms. Once you follow the link, the privacy terms of the respective provider apply.
10. Your rights
Under the GDPR, you have in particular the right of access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability and objection to certain processing. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data. In particular, you may contact the supervisory authority of your habitual residence, place of work or the place of the alleged infringement.
12. Data security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unauthorised alteration. The website is intended to be transmitted using HTTPS encryption.
13. Updates to this Privacy Policy
This Privacy Policy will be updated if the website, the services used or legal requirements change. The version published on the website at the relevant time applies.