This policy explains which personal data is processed when you visit our website or place an order.
Controller
ad picturam, specialist publisher for scholarly art literature, registered merchant Im Ried 4b 79249 Merzhausen Germany
Telephone: +49 761 48911235 Email: info@ad-picturam.de
Server logs and hosting
When the website is requested, the web server processes technically necessary access data, particularly the IP address, time, requested address, data volume, referrer, browser type and operating system. This processing secures and stabilises the website and is based on Article 6(1)(f) GDPR.
The website will be operated by a technical hosting provider within the European Union. The production provider has not yet been selected and its company name, address and privacy notice will be added here before final production operation. A data-processing agreement under Article 28 GDPR will be concluded with that provider.
Device-local cart
The cart is stored only in your browser’s local storage. It contains publication identifiers and quantities, but no names, addresses or payment data. This storage is necessary to provide the cart you requested and can be removed by deleting this site’s browser data.
Orders and contract performance
For ordering, delivery and invoicing, we process your name, email address, delivery and billing addresses, optional company and VAT ID, and the ordered items, prices, tax and shipping details. The legal basis is Article 6(1)(b) GDPR. Continued storage required by commercial or tax law is based on Article 6(1)(c) GDPR.
We provide the appointed postal or parcel service with the recipient data required for delivery. The delivery provider may not use those data for its own advertising.
Online payments with Stripe
When you select online payment, Stripe Payments Europe, Limited processes the payment. Stripe receives contact, order, device and payment data required for payment and fraud prevention. Complete card or account details are entered directly into fields supplied by Stripe and are not stored on our servers.
Processing is necessary for contract performance and secure payment processing under Article 6(1)(b) and (f) GDPR. Stripe may use technically necessary cookies or similar storage for fraud prevention. Depending on the selected method, further payment providers identified by Stripe may participate.
For details, see the Stripe Privacy Policy.
Invoice orders and email
For invoice orders, we retain the request for manual review. After approval, we create an invoice and send it with the order confirmation to the supplied email address. A technical email provider acts as our processor. The production provider will be identified here before final production operation.
We process enquiries received by email or telephone as necessary to respond. The legal basis is Article 6(1)(b) or (f) GDPR.
Declarations received through the online withdrawal function are stored with the name, order number, email address, any optional message, and the date and time of receipt for contract performance and statutory proof obligations. The legal basis is Article 6(1)(b) and (c) GDPR.
Retention periods
We retain personal data only for as long as its purpose requires. Order, invoice and payment records are kept for the statutory periods under commercial and tax law. Unaccepted or abandoned orders are deleted or anonymised once technical, contractual and legal requirements cease to apply.
Recipients and international transfers
Recipients are limited to providers required for hosting, email, payment and delivery, and public authorities where disclosure is legally required. If a provider processes data outside the European Economic Area, this occurs only under an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.
Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, data portability and objection. Consent may be withdrawn for the future. To exercise your rights, contact info@ad-picturam.de.
Right to complain
You may lodge a complaint with a data protection supervisory authority. Our competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg