1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any information by which you can be personally identified. Detailed information on the subject of data protection can be found in our Privacy Policy listed below this text.

Data Collection on Our Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator's contact details in the legal notice of this website.

How do we collect your data?

Some of your data is collected when you provide it to us. This may include, for example, data you enter into a contact form, when registering a customer account, or when placing an order in the online shop. Other data is collected automatically by our IT systems when you visit the website. This primarily includes technical data (e.g. internet browser, operating system, or the time the page was accessed).

What do we use your data for?

Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior. For orders, we use your data exclusively for contract fulfillment and the discreet shipping of goods.

2. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data and your privacy very seriously. We treat your personal data confidentially and in accordance with the applicable data protection laws (GDPR, TDDDG) and this Privacy Policy.

Information on the Data Controller

The controller responsible for data processing on this website is:

Studio Ivan Kiss

Reuterstr. 82

12053 Berlin

Email: info@studioivankiss.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Data Retention

Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining your personal data (e.g. tax or commercial law retention obligations); in the latter case, the data will be deleted once those reasons no longer apply.

Information on Data Transfers to the USA and Other Third Countries

Among other services, we use tools provided by companies based in the United States (in particular Squarespace). When these tools are active, your personal data may be transferred to and processed in the USA. Please note that the USA does not provide a level of data protection comparable to that of the EU. We therefore use these services only on the basis of the EU-US Data Privacy Framework or under the EU Commission's Standard Contractual Clauses.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. The lawfulness of the data processing carried out before the withdrawal remains unaffected.

Access, Deletion, and Correction

Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of the data processing, and, where applicable, the right to have this data corrected or deleted.

3. Hosting and Content Delivery Networks (CDN)

Squarespace

We host our website with Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland (hereinafter "Squarespace").

Squarespace is a tool for creating and hosting websites. When you visit our website, Squarespace collects your IP address and technical information about your browser and operating system in order to display the website securely and reliably. The use of Squarespace is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website possible. We have concluded a Data Processing Addendum with Squarespace that guarantees the protection of your customer data.

4. Data Collection on Our Website (Online Shop & Payment Processing)

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only to the extent necessary for establishing, structuring, or modifying the contractual relationship (master data). This is carried out on the basis of Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods (e.g. 10 years for invoices under tax law) remain unaffected.

Data Transfer and Anonymization for Discreet Shipping

If you order goods from us, we will pass your address data on to the transport company responsible for delivery (e.g. freight carrier or parcel service) to the extent necessary for delivering the goods (Article 6(1)(b) GDPR).

To protect your privacy, information regarding the contents of the package is shared with the shipping company only in a completely neutral form. The shipping label and freight documents contain only the address details required for delivery and a neutral sender name. No indication is given to the shipping service provider or any third party regarding the nature of the goods ordered.

Squarespace Payments

We process payments on our website through the integrated Squarespace Payments service. The provider is Squarespace Ireland Limited, Ship Street Great, Dublin 8, Ireland.

For the purpose of payment processing (e.g. payment by credit card, Apple Pay, Google Pay, or Klarna), your payment data is transmitted to Squarespace Payments. Squarespace Payments uses, among others, the payment service provider Stripe for technical payment processing in the background. Your data is transferred solely for the purpose of processing the payment on the basis of Article 6(1)(b) GDPR. The charge appearing on your billing statement will also use a discreet, neutral billing description that does not reveal the nature of the product.

5. Cookies and Analytics Tools

Squarespace Analytics & Cookies

Our website uses functional and necessary cookies to enable visitors to navigate the website and use certain features (such as the shopping cart system and password-protected customer login).

In addition, Squarespace uses analytics cookies to analyze visitor behavior on our website, provided you have given your consent through the cookie banner (Article 6(1)(a) GDPR). You can adjust or withdraw these settings at any time via the cookie preferences menu on our website.