Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Studio WAK
Emil-Abderhalden-Str. 5
06108 Halle (Saale)
Germany
Email: studiowak@studiowonandkim.com
2. General information
We process personal data only in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR). Personal data means any information relating to an identified or identifiable person, such as name, address, email address, order details, payment information or IP address.
3. Data collected when visiting our website
When you visit our website, certain technical data may be collected automatically by the hosting provider or website system. This may include:
- IP address
- date and time of access
- browser type and version
- operating system
- referring website
- pages visited
This data is processed to provide the website, ensure technical stability and maintain website security.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in operating a secure and functional website.
4. Contact by email or Instagram
- If you contact us by email or Instagram, we process the information you provide, such as your name, email address, Instagram account, message content and any additional information you choose to share.
- We use this data only to respond to your request and communicate with you.
- Legal basis: Art. 6(1)(b) GDPR if your request relates to an order or pre-contractual communication; Art. 6(1)(f) GDPR for general communication.
5. Orders in our online shop
When you place an order in our online shop, we process the personal data required to handle the order. This may include:
- name
- billing and shipping address
- email address
- order details
- payment information
- delivery information
This data is processed for order handling, payment processing, shipping, customer communication and legal accounting obligations.
Legal basis: Art. 6(1)(b) GDPR for contract performance; Art. 6(1)(c) GDPR for legal obligations, especially tax and accounting obligations.
6. Guest checkout
Orders can be placed as a guest. We do not currently offer customer accounts. Therefore, no permanent customer account is created on our website.
7. Payment processing
- We offer payment by PayPal and credit / debit card via WooPayments.
- Depending on the selected payment method, the data required for payment processing may be transmitted to the respective payment provider. This may include your name, billing address, email address, order amount, payment details and transaction information.
- PayPal payments are processed by PayPal. Credit and debit card payments are processed via WooPayments, which is built in partnership with Stripe.
- Payment providers process personal data in order to complete payments, prevent fraud, manage risk and comply with legal obligations. In some cases, the payment providers may act as independent data controllers. For further information, please refer to the privacy policies of PayPal and Stripe.
- Legal basis: Art. 6(1)(b) GDPR for payment processing required to perform the purchase contract; Art. 6(1)(c) GDPR where processing is required to comply with legal obligations.
8. Shipping providers
- For the delivery of your order, we transmit the necessary delivery data to the shipping provider.
- For standard products, we usually use DHL. For larger made-to-order products such as the Curved Coat Stand or Slit Shelving System, we may use GLS.
- The transmitted data may include your name, shipping address, and where necessary your email address or phone number for delivery notifications.
- Legal basis: Art. 6(1)(b) GDPR, performance of the purchase contract.
9. Cookies and similar technologies
- Our website may use cookies that are necessary for the technical operation of the website and online shop. These may include cookies required for shopping cart functions, checkout, payment processing, security or language settings.
- We do not currently use analytics or advertising tools such as Google Analytics, Meta Pixel or newsletter tracking.
If we use non-essential cookies in the future, for example for analytics or marketing, we will request your consent where required and update this Privacy Policy accordingly.
10. Data storage
- We store personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.
- Order and invoice data may be stored for the statutory retention periods required under German tax and commercial law.
11. Data sharing
We share personal data only where necessary to operate the website, process orders, receive payments, ship products, fulfil legal obligations or respond to customer requests.
Recipients may include:
- hosting provider
- payment providers
- shipping providers
- tax advisor or accounting services, if applicable
- public authorities, where legally required
12. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- right of access
- right to rectification
- right to erasure
- right to restriction of processing
- right to data portability
- right to object to processing
- right to withdraw consent, where processing is based on consent
- right to lodge a complaint with a supervisory authority
To exercise your rights, please contact us by email.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, legal requirements or data processing practices.