Privacy Policy

Controller

The controller responsible for data processing on this site is:

Data we process

Server logs: our hosting provider records your IP address, the page requested, the time and your browser type. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR).

Newsletter: if you submit the subscription form, we process the email address you enter so we can send you updates. The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Language preference: when you pick a language, we store that choice in your browser so you land on the right version next time.

Payment processing

When you buy directly on this site, Stripe processes your payment card details as the payment service provider (Art. 6(1)(b) GDPR — contract performance). We do not store your card number. Stripe may transfer data to the US; this is covered by the European Commission’s standard contractual clauses.

We receive your email, name and shipping address from Stripe to fulfil your order and provide order tracking. This data is stored in our database (Supabase) for that purpose.

Cookies

We set one cookie, NEXT_LOCALE, which records the language you chose. It holds no identifier and is not used for tracking or advertising. It is strictly necessary to provide the feature you asked for, so we do not ask for consent.

We use Google Analytics (GA4) and the Meta Pixel to understand how visitors use our site and measure advertising. They collect pseudonymised data about pages visited and interactions; Meta may combine this data with information from its other services under its own privacy policy. You can opt out via your browser's Do Not Track setting or a browser extension. The legal basis is our legitimate interest in improving the site and measuring advertising (Art. 6(1)(f) GDPR).

Fonts and external content

Our typefaces are served from our own servers. Your browser makes no request to Google or any other font provider, and no data about you reaches them.

Hosting

This site is hosted by Vercel Inc. The server logs described above are processed on our behalf under a data processing agreement. Where data is transferred outside the EU, it is covered by the European Commission's standard contractual clauses.

How long we keep data

Server logs are deleted after a short retention period set by our host. Newsletter addresses are kept until you unsubscribe.

Your rights

You have the right to access your data (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21).

You also have the right to lodge a complaint with a supervisory authority — for us, the data protection authority of the State of Hesse.

Contact

For any question about your data, or to exercise any of the rights above, write to us: support@printsbyeri.com