Privacy policy
How this site handles your data
1. Privacy at a glance
This overview shows what happens to your personal data when you visit this website. Personal data is any data that can identify you. The site is operated by me (see “Controller”). I collect data that you give me, for example in the contact form, and the server records technical data automatically when you visit (browser, operating system, time of access). It is used to run the site, answer your enquiry or handle an order. There are no analytics tools, no tracking and no advertising.
You have the right at any time to free information about your stored data, its origin, recipients and purpose, and to correction, deletion and restriction of processing. You can withdraw consent at any time with effect for the future and complain to a supervisory authority. Contact me at any time with questions.
2. Hosting
The site is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, under a data processing agreement. When you visit, the server automatically stores log files: IP address, date and time, page requested, browser, operating system and referrer. This is technically necessary to deliver and secure the site (Art. 6(1)(f) GDPR). [Add log retention period according to STRATO.]
3. General information and mandatory disclosures
Controller
Emily Ibler, Am Steig 38, 91217 Hersbruck, Germany
Phone: +49 160 96417192
Email: emily.ibler@tinta-mondo.de. More details in the imprint.
Retention
Unless a more specific period is stated, your data stays with me until the purpose ends. If you make a justified request for deletion or withdraw consent, your data is deleted unless other legal grounds require storage (for example tax or commercial retention periods). I delete form enquiries once they are dealt with, after [12] months at the latest.
Legal bases
Consent: Art. 6(1)(a) GDPR. Contract or pre-contractual steps: Art. 6(1)(b). Legal obligations: Art. 6(1)(c). Legitimate interests: Art. 6(1)(f). Access to information on your device falls under § 25 TDDDG (Germany).
Withdrawing consent
You can withdraw any consent at any time, informally by email. Processing carried out before that remains lawful.
Right to object (Art. 21 GDPR)
If processing is based on Art. 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. I will then stop processing unless I can show compelling legitimate grounds that override your interests, or processing serves the establishment, exercise or defence of legal claims. I do not carry out direct marketing.
Right to complain
You may complain to a data protection supervisory authority. The authority responsible for me is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Data portability, access, correction, deletion, restriction
You may have data that I process automatically on the basis of consent or contract handed to you or a third party in a common machine-readable format. You also have the rights to access, correction, deletion and restriction of processing (for example while the accuracy of data is being checked, if processing is unlawful but you prefer restriction to deletion, if you need the data for legal claims, or while an objection is being assessed).
SSL/TLS encryption
This site uses SSL/TLS encryption. You can tell by “https://” and the padlock in the address bar. Third parties cannot read the data you send.
4. Data collection on this website
Cookies and local storage
This site sets no cookies and loads no content from Google, Meta or other third parties; fonts and images are served from the site’s own server. The only thing stored is a small marker in your browser (local storage, entry “tm-hinweis”) so the cookie notice does not reappear on every visit after you dismiss it. It contains no personal data and is technically necessary for the notice (§ 25(2) no. 2 TDDDG). You can delete it in your browser settings at any time.
Contact form
If you use the form, your details (name, email, topic, message) are sent to me by email and stored to handle your enquiry and follow-up questions. I do not pass them on without your consent. Legal basis: Art. 6(1)(b) GDPR for contract-related enquiries, otherwise my legitimate interest in handling enquiries effectively (f) or your consent (a). For spam protection a timestamp and a shortened, non-reversible hash of the IP address are used to limit messages per hour. The data stays with me until you ask for deletion, withdraw consent or the purpose ends. Statutory retention periods remain unaffected.
Enquiries by email or phone
If you contact me by email or phone, I store and process your enquiry including all personal data in it (name, request) to handle it, and do not pass it on without your consent. Legal basis: Art. 6(1)(b), otherwise (f) or (a) GDPR.
Orders and payment (atelier)
For enquiries and orders for posters and prints I process name, address, email and order data to perform the contract (Art. 6(1)(b) GDPR) and to meet statutory retention duties (point (c), currently up to ten years for invoices). For shipping I pass the address to the carrier. [Enter payment provider if a payment link is used, with a link to its privacy policy.]
5. External links and social networks
The site links to my Instagram profile (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). No plug-ins are embedded: data is only transferred to the provider when you follow the link. Their privacy policy applies there.
6. Analytics and advertising
I use no analytics, tracking or advertising services on this site, including the Google Tag Manager used on my earlier website.
7. Changes
If the site changes, for example through analytics or shop functions, I will update this policy and ask for consent where necessary.