Privacy Policy

§ 1 General information

This privacy policy provides detailed information about what happens to your personal data when you visit our website at https://artisanlane-creative-studio-shop.de/. Personal data means any data that can be used to identify you personally. When processing your data, we strictly comply with legal requirements, in particular the General Data Protection Regulation (GDPR). It is very important to us that your visit to our website is completely secure.

§ 2 Data controller

The party responsible under data protection law for collecting and processing personal data on this website is:

Name: ArTisanlane GmbH
Street, house number, postal code and city: Krefeld, business address: Oberstraße 3, 47829 Krefeld
Country: Germany
Email: wxiaorui9@gmail.com
Telephone: 04917631116343

§ 3 Access data (server log files)

When you access our website, we automatically collect access data transmitted to us by your browser and store it in server log files. This includes:

Your computer's browser type and version
The operating system used by your computer
The referrer URL (the source or reference from which you reached our website)
The hostname of the accessing computer
The date and time of the server request
The IP address currently used by your computer (in anonymised form, where applicable)

As a rule, we are neither able nor intending to associate this data with a particular person. This data is processed in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interest in improving the stability and functionality of our website.

§ 4 Cookies

We use cookies to make visiting our website appealing and to enable certain features. These are small text files stored on your device. Cookies cannot run programs or transmit viruses to your computer system.

Necessary cookies required for electronic communication or the provision of requested features are stored in accordance with Article 6(1)(f) GDPR. Our legitimate interest in storing them is to provide our services in a technically reliable and optimised manner. Other cookies (for example, those used to analyse your browsing behaviour) are addressed separately in this privacy policy.

We mainly use session cookies, which are automatically deleted when your visit ends. We also use cookies that remain stored on your device until you remove them yourself. These allow us to recognise your browser on your next visit.

You can configure your browser to notify you when cookies are about to be set. You can then decide whether to allow cookies in individual cases, to allow cookies in specified circumstances or to reject cookies altogether. You can also configure your browser to delete cookies automatically when you close it. Please note that disabling cookies may limit this website's functionality.

§ 5 Google Maps

Our website uses the Google Maps mapping service, which is integrated via an application programming interface (API).

To protect your data when you visit our website, Google Maps is disabled by default. A connection to Google's servers is only established when you actively use Google Maps (consent under Article 6(1)(a) GDPR). This prevents your data from being transferred to Google as soon as you first access our website.

Once Google Maps is activated, Google records your IP address and usually transfers it to a server in the USA, where it is stored. After Google Maps has been activated, the operator of this website has no control over this data transfer.

Detailed information about the processing of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

§ 6 Contact form

If you contact us by email or through a contact form, the data you submit, including your contact details, will be stored so that we can process your enquiry and respond to any follow-up questions. This data will not be disclosed to third parties without your express consent.

Data submitted through the contact form is processed exclusively on the basis of your consent under Article 6(1)(a) GDPR. You may withdraw this consent at any time without giving reasons. An informal email to us is sufficient to withdraw consent. Withdrawal does not affect the lawfulness of any data processing carried out before consent was withdrawn.

We retain the data submitted through the contact form until you ask us to delete it, withdraw your consent to its storage or the need to store the data no longer exists. Statutory retention periods remain unaffected.

§ 7 Customer account

Creating a customer account requires your consent to the storage of your basic data (name, address, email address and bank details) and usage data (username and password). This data is stored to enable you to place orders through your customer account using your email address and password.

§ 8 Online payments

To process your order in our online shop, we require certain personal data from you. Mandatory information required to perform the contract is marked accordingly. Depending on your chosen payment method, the data relevant to processing the payment will be transmitted to the corresponding payment service provider. The legal basis for processing your data is Article 6(1), first sentence, point (b) GDPR.

A. Apple Pay

Our website uses Apple Pay, an online payment service. The service provider is the US company Apple Inc., Infinite Loop, Cupertino, CA 95014, USA.

Responsibility for data processing in connection with Apple Pay lies primarily with Apple Pay. It is important to understand that this may involve processing and storing data without complete anonymisation. In addition, US authorities may be able to access this data under certain circumstances. This data may also be linked to information from other Apple Pay services if you have a user account with them.

You can learn more about the data processed through the use of Apple Pay in the privacy policy at https://www.apple.com/legal/privacy/de-ww/.

B. Google Pay

Our website uses the online payment provider Google Pay. The service provider is the US company Google Inc. For the European region, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for all Google services.

Responsibility for data processing in connection with Google Pay lies primarily with Google Pay. It is important to understand that this may involve processing and storing data without complete anonymisation. In addition, US authorities may be able to access this data under certain circumstances. This data may also be linked to information from other Google services if you have a user account with them.

Further information about the data processed through the use of Google Pay is available in the privacy policy at https://policies.google.com/privacy.

C. Klarna

Our website allows payment via Klarna. The payment service is provided by Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

When you use the Klarna Checkout solution to pay on our website, Klarna processes personal data. Information about the type and scope of data collection can be found in Klarna's privacy policy: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies to improve the usability of the Klarna Checkout solution. This is covered by Klarna's legitimate interest under Article 6(1)(f) GDPR. Cookies are small text files that your browser stores on your device. They remain there until you delete them. Details of Klarna's use of cookies can be found in the document at: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

Your data is transmitted to Klarna on the basis of your consent (Article 6(1)(a) GDPR) and to perform the contract (Article 6(1)(b) GDPR). You may withdraw your consent at any time. Please note, however, that withdrawal has no effect on data processing that has already taken place.

D. Mastercard

Our website uses the payment service provider Mastercard. The service provider is the US company Mastercard Inc. For the European region, Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium, is responsible.

Responsibility for data processing in connection with Mastercard lies primarily with Mastercard. It is important to understand that this may involve processing and storing data without complete anonymisation. In addition, US authorities may be able to access this data under certain circumstances. This data may also be linked to information from other Mastercard services if you have a user account with them.

Further information about the data processed through the use of Mastercard is available in the privacy policy at https://www.mastercard.de/de-de/datenschutz.html.

E. Visa

Our website allows payments via Visa. The service provider is the US company Visa Inc. For the European region, Visa Europe Services Inc., 1 Sheldon Square, London W2 6TT, United Kingdom, is responsible.

Responsibility for data processing in connection with Visa lies primarily with Visa. It is important to understand that this may involve processing and storing data without complete anonymisation. In addition, US authorities may be able to access this data under certain circumstances. This data may also be linked to information from other Visa services if you have a user account with them.

Further information about the data processed through the use of Visa is available in the privacy policy at https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

§ 9 Use and disclosure of data

We assure you that personal data you provide to us, for example when placing an order or by email (such as your name, address or email address), will not be sold to third parties or otherwise used commercially. Your data is processed solely for the purpose of corresponding with you and fulfilling the purpose for which you provided it. As part of payment processing, your payment details will be forwarded to the financial institution commissioned to process the payment.

Data automatically collected when you visit our website is used exclusively for the purposes stated above. The data is not used for any other purpose.

Protecting your personal data is important to us. As a general rule, we therefore do not disclose your data to third parties unless we are legally required to do so or you have given us your express consent.

§ 10 Encryption (SSL/TLS)

Our website uses SSL or TLS encryption to ensure the security and protection of confidential content during transmission. This applies in particular to orders or enquiries that you, as a visitor to the website, send to us as its operator. You can recognise an encrypted connection by the "https://" in your browser's address bar and the padlock symbol in your browser.

Activating SSL or TLS encryption prevents unauthorised third parties from reading the data you send to us.

§ 11 Retention period

Personal data you submit to us through our website is stored only for as long as necessary to achieve the relevant purpose of processing. However, certain data may be retained for up to 10 years in accordance with commercial and tax law retention obligations.

§ 12 Your data protection rights

As a person affected by data processing, you have the following rights against the controller in relation to your personal data, in accordance with the applicable legal provisions:

A. Right to withdraw consent

Many data processing operations are possible only with your express consent. Where the processing of your data is based on your consent, you have the right to withdraw that consent at any time with effect for the future under Article 7(3) GDPR. This does not affect the lawfulness of data processing carried out on the basis of your consent before its withdrawal. Withdrawal does not affect the storage of data for billing and accounting purposes.

B. Right of access

Under Article 15 GDPR, you have the right to obtain confirmation from us as to whether we process your personal data. If we do, you are entitled to access that data, including information about the purposes of processing; the categories of data processed; the recipients or categories of recipients to whom the data has been or will be disclosed; the planned retention period or the criteria used to determine it; the existence of rights to rectification, erasure, restriction of processing, objection to processing and lodging a complaint with a supervisory authority; the source of the data if it was not collected from you; the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you; and your right to be informed of the safeguards under Article 46 GDPR when your data is transferred to third countries.

C. Right to rectification

Under Article 16 GDPR, you have the right at any time to ask us to correct inaccurate personal data concerning you and/or to complete your incomplete data.

D. Right to erasure

Under Article 17 GDPR, you have the right to request the erasure of your personal data if one of the following grounds applies:

Your personal data is no longer needed for the purposes for which it was collected or otherwise processed.
You withdraw the consent that provided the basis for processing under Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for processing.
You object to processing under Article 21(1) GDPR and there are no overriding legitimate grounds for processing, or you object to processing under Article 21(2) GDPR.
The personal data has been processed unlawfully.
We are required to erase the personal data to comply with a legal obligation under Union law or the law of the Member State to which we are subject.
The personal data was collected in connection with the provision of information society services under Article 8(1) GDPR.

This right may be restricted in the following circumstances where processing is essential:

To comply with a legal obligation requiring processing under Union law or the law of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority;
To fulfil a legal obligation requiring processing under Union law or the law of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
For reasons of public interest in the area of public health under Article 9(2)(h) and (i) and Article 9(3) GDPR;
For archiving purposes, scientific or historical research purposes or statistical purposes under Article 89(1) GDPR that are in the public interest, where safeguarding the rights of the data subject would make the objectives of this processing impossible to achieve or seriously impair them; or
For the establishment, exercise or defence of legal claims.

If we have made your personal data public and are required to erase it under the provisions above, we will take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform controllers processing that data that you, as the data subject, have requested the erasure of all links to your personal data or of copies or replications of it.

E. Right to restriction of processing

Under Article 18 GDPR, you have the right to request the restriction (blocking) of the processing of your personal data. You may contact us at any time to exercise this right. Our contact details can be found in the Legal Notice (Impressum). Restriction of processing may be requested in the following cases:

If you contest the accuracy of your personal data stored by us, we generally need time to verify it. For the duration of that verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was or is unlawful, you may request restriction of processing instead of erasure.
If we no longer need your personal data but you require it for the exercise, defence or establishment of legal claims, you have the right to request restriction of processing instead of erasure.
If you have objected under Article 21(1) GDPR, your interests must be weighed against ours. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

Once the processing of your personal data has been restricted, it may, as a general rule, only be processed with your consent. Exceptions apply in certain cases defined by law, for example for the establishment of legal claims or the protection of public interests.

F. Right to notification

If you exercise your right to rectification, erasure or restriction of the processing of your personal data, Article 19 GDPR requires us to notify all recipients to whom the data has been disclosed. This does not apply if notification proves impossible or involves a disproportionate effort. At your request, we will inform you of the recipients of your data.

G. Protection against automated decisions (profiling)

Under Article 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision:

Is necessary for entering into or performing a contract between you and us;
Is authorised by Union or Member State law to which the controller is subject and that law provides appropriate measures to safeguard your rights, freedoms and legitimate interests; or
Is based on your express consent.

However, decisions in the cases referred to in (a) to (c) must not be based on special categories of personal data within the meaning of Article 9(1) GDPR unless Article 9(2)(a) or (g) applies and suitable measures have been taken to safeguard your rights, freedoms and legitimate interests.

In the cases referred to in (a) and (c), we take appropriate measures to safeguard your rights, freedoms and legitimate interests. These include, at a minimum, the right to obtain human intervention by the controller, to express your own point of view and to contest the decision.

H. Right to data portability

Where your personal data is processed on the basis of your consent under Article 6(1)(a) or Article 9(2)(a) GDPR, or on a contract under Article 6(1)(b) GDPR, and the processing is carried out by automated means, Article 20 GDPR gives you the right to receive the data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller, or to request that we transmit it to another controller where technically feasible.

I. Right to object

If we process your personal data on the basis of a balancing of interests under Article 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation; this also applies to profiling based on that provision. The legal basis applicable to each processing activity is set out in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims (objection under Article 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object to that processing at any time; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Article 21(2) GDPR).

In connection with the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

J. Right to lodge a complaint with the competent supervisory authority under Article 77 GDPR

If the provisions of the GDPR are infringed, data subjects have the right to lodge a complaint with a competent supervisory authority. In particular, a complaint may be lodged in the Member State of the data subject's habitual residence, place of work or the place of the alleged infringement. The right to lodge a complaint under this provision is without prejudice to any other administrative or judicial remedy.

Our competent supervisory authority is:

State Commissioner for Data Protection of Saxony-Anhalt (Landesbeauftragter für den Datenschutz Sachsen-Anhalt)

PO Box 19 47, 39009 Magdeburg

Otto-von-Guericke-Straße 34a, 39104 Magdeburg, 39104 Magdeburg

Telephone: 03 91/818 03-0 Email: poststelle@lfd.sachsen-anhalt.de Website: https://datenschutz.sachsen-anhalt.de/

§ 13 Effective date and changes to this privacy policy

This privacy policy takes effect on 1 October 2026. We reserve the right to amend this policy as necessary and in compliance with applicable data protection laws. This may be necessary, for example, to meet new legal requirements or to reflect changes to our website or new services offered through it. The current version of the privacy policy available on our website at the time of your visit is binding.

If we make changes to this privacy policy, we will publish them on this page to keep you fully informed about what personal data we collect, how we process it and under what circumstances we may disclose it.

Datenschutzerklaerung

Data controller

Verantwortlicher

§ 1 General information

§ 1 Allgemeine Informationen

§ 2 Data controller

§ 2 Verantwortliche Stelle

§ 3 Access data (server log files)

§ 3 Zugriffsdaten (Server-Logfiles)

§ 4 Cookies

§ 4 Cookies

§ 5 Google Maps

§ 5 Google Maps

§ 6 Contact form

§ 6 Kontaktformular

§ 7 Customer account

§ 7 Kundenkonto

§ 8 Online payments

A. Apple Pay

B. Google Pay

C. Klarna

D. Mastercard

E. Visa

§ 8 Online-Zahlungen

A. Apple Pay

B. Google Pay

C. Klarna

D. Mastercard

E. Visa

§ 9 Use and disclosure of data

§ 9 Verwendung und Weitergabe von Daten

§ 10 Encryption (SSL/TLS)

§ 10 Verschlüsselung (SSL/TLS)

§ 11 Retention period

§ 11 Speicherdauer

§ 12 Your data protection rights

A. Right to withdraw consent

B. Right of access

C. Right to rectification

D. Right to erasure

E. Right to restriction of processing

F. Right to notification

G. Protection against automated decisions (profiling)

H. Right to data portability

I. Right to object

J. Right to lodge a complaint with the competent supervisory authority under Article 77 GDPR

§ 12 Ihre Datenschutzrechte

A. Widerrufsrecht

B. Auskunftsrecht

C. Recht auf Berichtigung

D. Recht auf Löschung

E. Recht auf Einschränkung der Verarbeitung

F. Recht auf Unterrichtung

G. Schutz vor automatisierten Entscheidungen (Profiling)

H. Recht auf Datenübertragbarkeit

I. Widerspruchsrecht

J. Beschwerderecht bei der zuständigen Aufsichtsbehörde gemäß Art. 77 DSGVO

§ 13 Effective date and changes to this privacy policy

§ 13 Gültigkeit und Änderung dieser Datenschutzerklärung