Privacy Policy

1. Controller

The controller responsible for the processing of personal data is:

Olga Takeda
Email: info@studio-lumen.art

2. What Data Is Processed

When placing an order, the following data may in particular be processed:

• Name
• Email address
• Billing and delivery address
• Order data
• Communication data
• Payment and transaction information
• Information about returns or complaints

When contacting us via the contact form or by email, the data provided by the customer is processed.

3. Purposes of Processing

The data is processed in particular in order to:

• Process orders
• Allocate payments
• Ship artworks
• Respond to customer enquiries
• Process returns and complaints
• Fulfil statutory retention obligations
• Prevent fraud and misuse
• Assert or defend legal claims

4. Legal Bases

Processing takes place, depending on the purpose, on the basis of:

• Art. 6(1)(b) GDPR, for the performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR, for compliance with legal obligations
• Art. 6(1)(f) GDPR, on the basis of legitimate interests, in particular for the secure handling of business operations and the processing of enquiries
• Art. 6(1)(a) GDPR, where explicit consent has been given

Consent can be withdrawn at any time with effect for the future.

5. Disclosure to Shipping and Payment Service Providers

Personal data is only disclosed insofar as this is necessary for the performance of the contract.

This may in particular include:

• Shipping service providers
• Freight forwarders
• Payment service providers
• Banks
• Tax advisors
• IT and hosting service providers
• Authorities, where there is a legal obligation to do so

Payment data may be processed by the respective payment service provider. The provider does not have access to complete credit card data, which is processed exclusively by the payment service provider.

6. Cookies and Analytics

The website may use cookies to enable the technical functionality of the website and — where corresponding consent has been given — to analyse the use of the website.

Non-essential analytics or marketing cookies are only used if the user has previously given consent. Consent can be changed or withdrawn at any time via the cookie settings.

If a specific analytics or tracking service is actually used, its name, provider, purpose, legal basis and retention period must additionally be specifically stated here.

7. Retention Period

Personal data is only stored for as long as necessary for the respective purposes.

In addition, statutory retention obligations may apply, in particular for tax and business records. Once the respective periods have expired, the data will be deleted, unless there is a further legal basis for its storage.

8. Rights of Data Subjects

Data subjects have, in accordance with the GDPR, in particular the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent

To exercise these rights, the data subject can contact the following address: info@studio-lumen.art

9. Right to Lodge a Complaint

Data subjects have the right to lodge a complaint with a data protection supervisory authority, in particular the authority responsible for their habitual residence, their place of work, or the place of the alleged infringement.

10. No Disclosure for Advertising Purposes

Personal data is not sold or disclosed to third parties for advertising purposes.

Inclusion in a newsletter or mailing list only takes place following prior explicit consent.

11. Changes

This Privacy Policy may be adjusted if the website, the services used, or the legal requirements change.