Privacy policy
Last updated: November 2026
1. Controller
The controller responsible for processing personal data on our websites artnira.com and shop.artnira.com is:
Artur Kazun (artnira)
You can find our full business address and contact details in our legal notice.
2. General information on data processing
Protecting your personal data is important to us. We process personal data solely in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
Personal data is information that can identify you directly or indirectly.
We process this data in particular when you visit our websites, contact us, place an order or exercise your right of withdrawal.
Depending on the purpose, processing is based on Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (performance of a contract and steps prior to entering into a contract), Article 6(1)(c) GDPR (legal obligations) or Article 6(1)(f) GDPR (legitimate interests).
3. Hosting and server logs
When you visit our websites, technically necessary information is processed. This may include in particular:
- IP address
- Date and time of access
- Pages and files accessed
- Browser and operating system used
- Referrer URL
- Technical status and error messages
This processing serves to provide our websites, ensure their technical stability and protect them against misuse and unauthorised access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our websites.
Where we use hosting providers, they may have access to the necessary data as part of providing the technical infrastructure.
Server logs are deleted after no more than 30 days, unless longer retention is necessary to investigate specific security incidents.
4. Cookies and consent management
Our websites use cookies and similar technologies.
Some are technically necessary, for example for the shopping cart, checkout, website security or storing your privacy preferences.
Other technologies are used to analyse website usage or integrate external content.
Where required by law, we use these technologies only after you have given your express consent.
The legal basis for accessing or storing information on your device is section 25 of the German TDDDG. Subsequent processing of personal data is governed by the respective GDPR legal bases stated.
You can change or withdraw your consent at any time with effect for the future through our cookie settings.
We use our own cookie selection for artnira.com and shop.artnira.com. Your decision is stored for 180 days in a shared cookie on the artnira.com domain and additionally in local browser storage. It contains no visitor identifier. You can change your choice on either website at any time through “Cookie settings”. We also save a manually selected language in local browser storage for 180 days. Otherwise, when you enter through the home page, we use your preferred browser languages. We also count initial acceptances and selections of “Necessary only” on this website per calendar day and month. The counter stores only the day or month and two totals for each period, with no individual decisions, IP addresses or visitor identifiers. These counts are not sent to Google. Technical server logs are described in the hosting section.
5. Google Analytics 4
We use or plan to use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps us understand how visitors use our websites and which content is particularly interesting. This enables us to improve our offering and usability.
In particular, the following information may be processed:
- Page views and interactions
- Visit duration and usage behaviour
- Device and browser information
- Approximate geographical origin
- Technical usage data and online identifiers
Google Analytics is activated only if you have given the relevant consent beforehand.
The legal basis is Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG where technologies requiring consent are used.
Personal data may be processed by Google companies outside the European Economic Area. Information on the applicable transfer mechanisms will be added according to the configuration used.
The retention period for collected data depends on the settings we specify in Google Analytics.
Further information is available in Google’s privacy policy.
6. Google Tag Manager
We use Google Tag Manager from Google Ireland Limited. The container loads only after you consent to statistical analysis.
Google Tag Manager enables us to centrally manage and technically integrate various website tags.
Tag Manager is used in particular to control analytics and, where applicable, other website services. Technical connection data may be transmitted to Google in this process.
Services integrated through Google Tag Manager that require consent are controlled according to your privacy preferences.
Personal data is processed on the relevant legal basis depending on the technical implementation and purpose. Where consent is required, processing is based on Article 6(1)(a) GDPR.
Further information is available in Google’s privacy policy.
7. YouTube videos
Videos from the YouTube platform may be embedded on our websites.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When a YouTube video loads, personal data may be transmitted to Google. This includes in particular your IP address, technical information about your device and browser, and information about how you use the video.
We embed YouTube videos so that a connection to YouTube is established only after you have given the relevant consent.
The legal basis is Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG where technologies requiring consent are used.
You can withdraw your consent at any time through our cookie settings.
Further information is available in Google’s privacy policy.
8. Contact form and other enquiries
When you contact us using our contact form or by email, we process the personal data you provide.
This includes in particular:
- Name
- Email address
- Content of your message
- Other information provided voluntarily
We use this information to process your enquiry and ask follow-up questions where necessary.
If your enquiry relates to an existing or intended contract, processing is based on Article 6(1)(b) GDPR.
For other enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to handle and respond to incoming enquiries.
The data is deleted as soon as it is no longer required to handle your enquiry and there are no statutory retention obligations or legitimate grounds for further storage.
9. Electronic withdrawal form
Our website provides an electronic function for declaring withdrawal from a purchase contract.
When you use this function, we process in particular the following information:
- First name and surname
- Email address
- Order number
- Scope of the withdrawal
- Any additional information provided voluntarily
- Date and time of receipt
- Unique withdrawal reference
We use this data to receive your withdrawal declaration, document its receipt, send you an electronic acknowledgement of receipt and process the withdrawal.
The acknowledgement of receipt only documents receipt of your declaration. It does not constitute a decision on the legal validity of the withdrawal.
The legal basis is Article 6(1)(b) GDPR insofar as processing serves to administer the contractual relationship, and Article 6(1)(c) GDPR to fulfil legal obligations.
The data is stored for as long as necessary to process the withdrawal, fulfil statutory retention obligations or establish, exercise or defend legal claims.
10. Orders through our online shop
When you place an order through our online shop at shop.artnira.com, we process the personal data required to handle and fulfil your order.
This includes in particular:
- Name and contact details
- Billing and delivery addresses
- Products, variants and quantities ordered
- Order number and order date
- Payment and transaction information
- Shipping and tracking information
- Information about returns, complaints and refunds
Processing serves to perform the purchase contract pursuant to Article 6(1)(b) GDPR.
Where statutory retention obligations apply, processing is also based on Article 6(1)(c) GDPR.
To process payments and deliveries, we transmit the necessary data to the payment and shipping providers appointed for these purposes.
Order and invoice data is stored in accordance with applicable statutory retention periods. Other personal data is deleted as soon as it is no longer needed for the stated purposes and no statutory retention obligations prevent deletion.
11. Payment processing
You can pay for your order using the payment methods displayed in the online shop.
When you select a payment method, the data required to process the payment is transmitted to the relevant payment provider.
Depending on the payment method, this may include your name, billing details, payment amount, order reference and transaction information.
Processing is based on Article 6(1)(b) GDPR for the performance of the purchase contract.
Where payment providers process personal data as independent controllers, their privacy policies also apply.
We currently use PayPal exclusively for payment processing.
12. Shipping and delivery
To fulfil your order, we transmit the personal data necessary for shipping to the appointed shipping provider.
This includes in particular:
- Recipient’s name
- Delivery address
- Shipment and shipping information
- Any additional contact details necessary for delivery
Processing serves to perform the purchase contract pursuant to Article 6(1)(b) GDPR.
We work in particular with Hermes. Depending on the destination and shipping method, other shipping providers may be used.
The transmitted data is processed solely for the respective shipping operations and applicable legal obligations.
13. Statutory retention obligations
We store personal data only for as long as necessary for the respective processing purposes or as required by statutory retention obligations.
Documents relevant for tax and accounting purposes are subject in particular to the statutory retention periods under the German Fiscal Code and, where applicable, the German Commercial Code.
Where data is necessary to establish, exercise or defend legal claims, it may continue to be stored within the applicable statutory limitation periods.
Once the respective periods have expired, the data is deleted unless other legal grounds for retention exist.
14. Your rights
Subject to the applicable statutory provisions, you have the following rights:
- Access: You can request information about the personal data we process about you (Article 15 GDPR).
- Rectification: You can request the correction of inaccurate data or completion of incomplete data (Article 16 GDPR).
- Erasure: You can request the deletion of your personal data where the statutory conditions are met (Article 17 GDPR).
- Restriction: You can request restriction of processing under certain conditions (Article 18 GDPR).
- Data portability: Where the statutory conditions are met, you can request that we provide certain personal data in a structured, commonly used and machine-readable format (Article 20 GDPR).
- Objection: You can object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation (Article 21 GDPR).
- Withdrawal of consent: You can withdraw consent at any time with effect for the future (Article 7(3) GDPR).
To exercise your rights, you can contact us using the contact details in our legal notice.
15. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.
The Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht) is generally responsible for our business location in Bavaria.
Further information is available at:
You may also contact another competent data protection supervisory authority.
16. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and misuse.
Data transmitted between your browser and our websites generally uses encrypted HTTPS connections.
17. Changes to this privacy policy
We reserve the right to update this privacy policy when our data processing, the services used or legal requirements change.
The version currently published on our website applies.