Privacy Policy

Last updated: August 2026

1. Controller

The controller responsible for data processing on this website is:

St’Art Atelier, Sarah Bracke. Greifswalder Strasse 196. 10405 Berlin, Germany

Email: datenschutz@startatelier.de

2. Provision of the Website and Online Shop

Odoo is used for the technical provision of this website and the integrated online shop.

The provider is:

Odoo S.A.

Chaussée de Namur 40

1367 Grand-Rosière

Belgium

When you access the website, technically necessary data is processed. This may include, in particular, your IP address, the date and time of access, information about the browser and operating system used, and the pages accessed.

This processing is carried out in order to provide the website and online shop technically, to ensure their functionality and security, and to detect errors or unauthorised access.

The legal basis for this processing is Article 6(1)(f) GDPR. The legitimate interest lies in the secure and functional operation of the website and online shop.

As part of the technical provision of the services, Odoo processes personal data as a processor. Where personal data is processed outside the European Economic Area in this context, such processing is carried out in accordance with the legal requirements of Articles 44 et seq. GDPR.

3. Cookies and Technically Necessary Functions

The website and online shop may use technically necessary cookies or comparable technologies. These are used, in particular, to provide essential functions such as website navigation, session management and the shopping basket function.

Where the storage of information on your device, or access to information already stored on your device, is strictly necessary in order to provide a website or shop function expressly requested by you, this is carried out in accordance with Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Where personal data is processed in this context, the processing is carried out, depending on the relevant function, on the basis of Article 6(1)(b) GDPR for the performance of pre-contractual measures or a contract, or on the basis of Article 6(1)(f) GDPR for the secure and functional operation of the website.

4. Orders Placed Through the Online Shop

If you order an artwork through the online shop, the personal data required to process the order and perform the contract will be processed.

This includes, in particular:

·        your name,

·        billing and delivery address,

·        email address,

·        telephone number, where applicable,

·        details of the artwork ordered,

·        order and shipping information, and

·        payment information, insofar as this is required to identify and allocate a payment.

The data is processed solely insofar as this is necessary to process your order, communicate with you, process payment and deliver the artwork ordered.

The legal basis for this processing is Article 6(1)(b) GDPR.

The information marked as required during the ordering process is necessary for the conclusion and performance of the purchase contract. Without this information, it may not be possible to process the order.

Payment by Bank Transfer

If payment is made by bank transfer, the payment data required to process and identify the payment will be processed.

In connection with the bank transfer, personal data will also be processed by the financial institutions involved.

The legal basis for processing by St’Art Atelier is Article 6(1)(b) GDPR.

Shipping

For the delivery of an artwork that has been ordered, the data required for delivery will be passed on to the shipping service provider commissioned to carry out the delivery.

This includes, in particular, the recipient’s name and delivery address, as well as any additional contact details only where these are necessary for the specific delivery.

The legal basis for this processing is Article 6(1)(b) GDPR.

5. Contacting St’Art Atelier

If you contact St’Art Atelier by email or through a contact option provided on the website, the data you provide will be processed in order to deal with your enquiry.

This includes, in particular, your email address, your name where provided, and the content of your message.

If your enquiry relates to the possible purchase of an artwork or an existing contract, the processing is carried out on the basis of Article 6(1)(b) GDPR.

For other enquiries, the processing is carried out on the basis of Article 6(1)(f) GDPR. The legitimate interest lies in responding to enquiries addressed to St’Art Atelier.

6. Retention Period

Personal data is retained only for as long as is necessary for the relevant purpose.

Data relating to orders and payments will continue to be retained after completion of the contract insofar as statutory retention obligations apply, particularly those arising under tax or commercial law.

Once the applicable retention periods have expired, the data will be deleted unless there is another legal basis for its continued processing.

Data relating to general enquiries will be deleted once the enquiry has been fully dealt with, provided that there are no statutory requirements or legitimate grounds for further retention.

7. Your Data Protection Rights

Subject to the applicable legal requirements, you have, in particular, the right to:

·        obtain information about your personal data in accordance with Article 15 GDPR,

·        have inaccurate data rectified in accordance with Article 16 GDPR,

·        have data erased in accordance with Article 17 GDPR,

·        restrict processing in accordance with Article 18 GDPR,

·        data portability in accordance with Article 20 GDPR, and

·        object to processing in accordance with Article 21 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, you may contact St’Art Atelier using the contact details provided in Section 1 above.

8. Beschwerderecht

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

The supervisory authority particularly relevant to St’Art Atelier is:

Berlin Commissioner for Data Protection and Freedom of Information

Alt-Moabit 59–61, 10555 Berlin, Germany

Email:  mailbox@datenschutz-berlin.de

​