Privacy notice

Privacy notice

Last updated: [[MONTH_YEAR]] Version: [[LEGAL_VERSION]]

This English version must mirror every factual provider, purpose, legal basis, retention period and transfer safeguard in the German version. Codex must not maintain it as a separate unmanaged copy.

1. Controller

The controller under the General Data Protection Regulation is:

[[LEGAL_FULL_NAME]] trading under the artist name I. Innocent [[STREET_AND_HOUSE_NUMBER]] [[POSTCODE]] [[CITY]] Germany

Email: [[PRIVACY_EMAIL]] Telephone: [[PHONE_OR_DELETE_LINE_AFTER_REVIEW]]

2. Core processing summary

We process personal data only where necessary to provide and secure this website, respond to enquiries, enter into and perform contracts, meet legal obligations or act on valid consent.

Personal data means any information relating to an identified or identifiable natural person. The applicable legal basis is stated with each processing operation below.

3. Hosting and server logs

This website is hosted by:

[[HOSTING_PROVIDER_LEGAL_NAME]] [[HOSTING_PROVIDER_ADDRESS]] Privacy information: [[HOSTING_PROVIDER_PRIVACY_URL]]

When the website is accessed, the provider may process the IP address, date and time, requested URL, referrer, browser and device information, transferred data volume and technical error or security information.

Processing is necessary to deliver the website, maintain security and stability, detect attacks and correct technical errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

Server logs are retained for [[SERVER_LOG_RETENTION]] and then deleted or anonymised unless longer retention is necessary to investigate a security incident.

IF HOSTING OR CDN PROCESSING OCCURS OUTSIDE THE EEA: [[THIRD_COUNTRY_TRANSFER_AND_SAFEGUARDS]]

4. Content-management system

IF USED. Confirm the provider and account region.

We use the following service to manage and deliver website content:

[[CMS_PROVIDER_LEGAL_NAME]] [[CMS_PROVIDER_ADDRESS]] Privacy information: [[CMS_PROVIDER_PRIVACY_URL]]

Technical request data and data required for content or form delivery may be processed. Technical delivery is based on Article 6(1)(f) GDPR. Other purposes and legal bases depend on the feature involved.

Retention and international transfers: [[CMS_RETENTION_AND_TRANSFER_DETAILS]]

5. Contact and private-viewing requests

If you contact us by email, contact form or an artwork-enquiry function, we process your contact details, message, referenced artwork and information supplied voluntarily.

Article 6(1)(b) GDPR applies where processing is necessary to take steps before entering into a contract or perform a contract. Article 6(1)(f) GDPR applies to other communications; our legitimate interest is the proper handling of enquiries from collectors and business contacts.

We delete enquiry data when it is no longer needed unless statutory retention, an ongoing contract or legitimate documentation interests require continued storage. General non-contractual enquiries are normally deleted after [[CONTACT_RETENTION_PERIOD]].

6. Orders and contract performance

For orders, we may process:

• name;
• billing and delivery address;
• email address and, where required, telephone number;
• artwork, artwork ID and order number;
• price, payment status and transaction reference;
• delivery, customs and shipment information;
• order correspondence;
• withdrawal, return, defect and refund records.

Processing necessary to enter into and perform the contract is based on Article 6(1)(b) GDPR. Processing necessary for accounting, tax or other legal obligations is based on Article 6(1)(c) GDPR.

Contract and accounting records are retained for the applicable statutory periods. Operational data without a retention obligation is deleted when no longer needed for contract handling or legal claims.

7. Commerce and checkout provider

IF DIRECT CHECKOUT IS USED. Delete for an enquiry-only launch.

We use the following provider for cart, checkout and order administration:

[[COMMERCE_PROVIDER_LEGAL_NAME]] [[COMMERCE_PROVIDER_ADDRESS]] Privacy information: [[COMMERCE_PROVIDER_PRIVACY_URL]]

Order, contact, device, transaction and usage data may be processed. Legal bases are Article 6(1)(b) GDPR for contract steps and Article 6(1)(c) GDPR where a legal obligation applies.

Retention, allocation of controller/processor roles and international transfers: [[COMMERCE_PROVIDER_DETAILS]]

8. Payment providers

Payment information required for the selected method is sent to the relevant payment provider. We normally do not receive complete card details or online-banking credentials; we receive information such as payment status, transaction reference and data required to match payment to the order.

Providers:

[[PAYMENT_PROVIDER_LIST_WITH_LEGAL_NAME_ADDRESS_PRIVACY_URL_TRANSFER_AND_RETENTION]]

Contract-related processing is based on Article 6(1)(b) GDPR. Payment providers may process data under their own legal obligations and fraud-prevention rules and may act as independent controllers. The final provider contracts and role allocation must be reflected accurately here.

9. Shipping and logistics providers

We disclose the information required for collection, transport, customs handling, scheduling and delivery to the parcel carrier, freight forwarder or art-logistics provider selected for the order.

Providers used or selectable depending on the order:

[[SHIPPING_PROVIDER_LIST_WITH_LEGAL_NAME_AND_PRIVACY_URL]]

The legal basis is Article 6(1)(b) GDPR. Where an email address or telephone number is sent for an optional delivery alert, the actual legal basis and consent logic must be stated here: [[DELIVERY_NOTIFICATION_LEGAL_BASIS]].

10. Newsletter

IF USED — otherwise delete this section and the signup form.

When you subscribe, we process your email address, consent time and protocol data required to prove consent. [[OPTIONAL_NAME_FIELDS_AND_PURPOSE_OR_DELETE]]

The newsletter is sent only after a double-opt-in confirmation. Sending is based on consent under Article 6(1)(a) GDPR. Recording consent and preventing unauthorised subscriptions is based on Article 6(1)(f) GDPR; our legitimate interest is proof of lawful distribution.

Provider:

[[EMAIL_PROVIDER_LEGAL_NAME]] [[EMAIL_PROVIDER_ADDRESS]] Privacy information: [[EMAIL_PROVIDER_PRIVACY_URL]] International transfer/safeguards: [[EMAIL_PROVIDER_TRANSFER_DETAILS]]

Consent may be withdrawn for the future using the unsubscribe link or by contacting [[PRIVACY_EMAIL]]. We may retain a suppression record where necessary to prevent further mail and prove compliance.

DELETE unless true: We do not use invisible tracking pixels and do not create individual open or click profiles.

11. Cookies, local storage and similar technologies

We use technically necessary technologies where required to provide a digital service expressly requested by you. Access to the device is based on section 25(2) TDDDG; any subsequent processing of personal data is based, depending on purpose, on Article 6(1)(b) or (f) GDPR.

Technologies that are not strictly necessary, including analytics or marketing technologies, are used only after prior consent. Device access is based on section 25(1) TDDDG and subsequent personal-data processing on Article 6(1)(a) GDPR.

You may withdraw or change consent for the future through Cookie settings in the footer. Rejecting must be as easy as accepting.

Codex must generate the live technology table from the deployed inventory:

| Name | Provider | Purpose | Type | Lifetime | Necessary? | Legal basis | |---|---|---|---|---|---|---| | [[COOKIE_OR_STORAGE_KEY]] | [[PROVIDER]] | [[PURPOSE]] | cookie/local storage/session storage | [[LIFETIME]] | yes/no | [[BASIS]] |

12. Consent-management platform

IF USED.

We use the following provider to store and demonstrate consent choices:

[[CONSENT_PROVIDER_LEGAL_NAME]] [[CONSENT_PROVIDER_ADDRESS]] Privacy information: [[CONSENT_PROVIDER_PRIVACY_URL]]

The choice, time, technical identifier and version of the consent text may be stored. Legal bases are Article 6(1)(c) and (f) GDPR; necessary device storage is based on section 25(2) TDDDG.

Retention: [[CONSENT_RECORD_RETENTION]]

13. Analytics

SELECT ONE.

Alternative A — no analytics:

We currently use no consent-requiring analytics or marketing service.

Alternative B — analytics used:

After prior consent, we use the following analytics services:

[[FOR_EACH_ANALYTICS_PROVIDER_INSERT_LEGAL_NAME_ADDRESS_PURPOSE_DATA_LEGAL_BASIS_RETENTION_TRANSFER_SAFEGUARDS_AND_WITHDRAWAL_METHOD]]

The services do not load before consent.

14. Social media

The website may contain ordinary links to external social-media profiles. Loading our website does not establish a connection to the platform through such a link. If you activate the link, you leave this website and the external provider’s privacy rules apply.

DELETE unless confirmed: We do not embed social feeds, Like buttons or social tracking pixels.

15. “View in your space” room visualisation

When using the local room visualiser, you voluntarily select a room photograph on your device. The photograph is processed only in your browser, is not transmitted to us or a third party and is not stored persistently. It is not used for advertising, profiling or training AI models. Resetting or closing the feature discards the local representation.

If you download a mockup, the file is generated locally on your device.

Codex condition: publish this wording only if network inspection proves the photo and rendered canvas never leave the device. Replace this section before deployment if the architecture changes.

16. AR feature

IF AR IS USED.

To display an artwork in your environment, the website may open an AR function provided by the browser or operating system. Depending on the device, camera and sensor data may be processed locally by the browser, operating system or its provider. We do not receive access to your camera image if the implementation technically prevents such access.

Providers/modes and data flows: [[AR_PROVIDER_AND_DEVICE_SPECIFIC_DETAILS]]

The camera is used only after your active selection and device permission. The browser or operating-system provider’s privacy information also applies.

17. Electronic withdrawal function

If you use the electronic withdrawal function, we process your name, information identifying the contract or contract part, the email address or other electronic communication channel for acknowledgement, the content of the statement, and the date and time received.

Processing is necessary to meet legal duties under Article 6(1)(c) GDPR together with section 356a BGB and to reverse the contract under Article 6(1)(b) GDPR.

The record is retained with contract documentation for [[WITHDRAWAL_RECORD_RETENTION]] where statutory retention or evidential duties apply.

18. Recipients

Where necessary, recipient categories may include:

• hosting, CMS and IT providers;
• checkout and payment providers;
• parcel, freight, customs and art-logistics providers;
• email and consent-management providers;
• tax advisers, legal advisers and insurers;
• authorities and courts where disclosure is legally required.

Data is disclosed for other purposes only where a legal basis exists.

19. International transfers

Where a provider processes personal data outside the European Economic Area, transfer takes place only under Articles 44 et seq. GDPR, including an adequacy decision or appropriate safeguards such as standard contractual clauses. Each provider entry above must state the real mechanism, supplementary safeguards and how a copy can be obtained.

If no international transfer occurs, replace this with a factual statement and delete unused tokens.

20. Retention

Unless a specific period is stated above, we keep personal data only for as long as necessary for the relevant purpose. We then delete or anonymise it unless statutory retention, an ongoing contract, consent evidence or the establishment, exercise or defence of legal claims requires longer storage.

21. Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent under Articles 15–21 GDPR.

Where processing relies on Article 6(1)(e) or (f) GDPR, you may object for reasons arising from your particular situation. You may object to direct marketing at any time without giving a special reason.

Contact [[PRIVACY_EMAIL]] to exercise your rights.

22. Complaint right

You may lodge a complaint with a data-protection supervisory authority. The authority responsible for our establishment is:

[[DATA_PROTECTION_AUTHORITY_NAME]] [[DATA_PROTECTION_AUTHORITY_ADDRESS]] [[DATA_PROTECTION_AUTHORITY_URL]]

23. Required information

Order and delivery data is necessary to enter into and perform a contract. Without required fields, we may be unable to process an order, delivery, refund or contractual enquiry. Newsletter and marketing information is voluntary.

24. Automated decisions

We do not make decisions based solely on automated processing within Article 22 GDPR that produce legal or similarly significant effects. Delete or rewrite if a payment or fraud provider does so.

25. Changes

We update this notice if the law, website or services change. The current version is available on this page.

Draft supplement — planned payment and dispute records

Online checkout is currently inactive. If activated after review, we plan to keep a structured order record: artwork ID, description, photographs and condition, price/currency/tax and shipping costs, checkout/payment times, accepted legal-document version, buyer name/email, billing and Checkout shipping address, Stripe session/payment identifiers and payment status. Relevant communications, review decisions, dispatch/carrier/tracking, delivery/signature references, refunds and withdrawal/dispute records may be added for order handling and evidence. Card numbers, security codes and banking credentials must never be sent to us by email.

Access will be limited to authorised studio personnel and the confirmed service providers needed for payment, delivery, communications, accounting or dispute handling. Retention must follow a documented purpose and period, with deletion/anonymisation and a specific hold where an active legal or dispute obligation requires it. The inactive prototype includes a retention date and legal-hold control; no legal period has been assumed.

Before activation, complete and review: [[ORDER_EVIDENCE_LEGAL_BASES]], [[ORDER_RETENTION_PERIODS_AND_START_EVENTS]], [[STRIPE_PROVIDER_ENTITY_AND_TRANSFERS]], [[ORDER_DATABASE_AND_EMAIL_PROVIDERS]], [[RECIPIENTS_AND_ACCESS_CONTROLS]], [[DELETION_BACKUP_AND_EXPORT_POLICY]]. Reconcile this supplement with the rest of the privacy notice and remove inapplicable alternatives.