Privacy Policy

Controller

Artesiana GmbH
Ameisenweg 16, 55128 Mainz, Germany
Commercial register: Local Court of Mainz, HRB 54012
Managing directors: Leo Schayan Naderi, Luca Elias Zacharias
Email: info@artesiana.de

Categories of data processed

• Basic data, such as your name and email address when submitting an inquiry
• Usage data, such as access times and pages visited, where technically necessary
• Communication data, such as the content of your message and your email address

Purposes of processing

• Responding to inquiries and communicating with you
• Providing and optimizing our website
• Taking steps in connection with a contract or prior to entering into a contract
• Complying with legal obligations, such as statutory tax retention requirements

Legal bases

• Article 6(1)(b) GDPR, performance of a contract or pre-contractual measures
• Article 6(1)(f) GDPR, our legitimate interest in a secure and functional website
• Article 6(1)(c) GDPR, compliance with legal obligations

Retention period

We process personal data only for as long as necessary for the purposes stated above. Statutory retention periods, including those under commercial and tax law, remain unaffected.

Recipients of data

We disclose data only where this is necessary to perform a contract, where we are legally required to do so, or where you have given your consent. Where external service providers are used, they are carefully selected and contractually bound in accordance with Article 28 GDPR.

Contact inquiries

When you contact us through the form, by email, or by phone, we process the information you provide in order to handle your inquiry. Form data is transmitted server-side to the notification service configured by us. The legal bases are Article 6(1)(b) and Article 6(1)(f) GDPR.

Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access the website, Vercel processes technically necessary access data on our behalf (IP address, date and time, page requested, browser and operating system type, referrer URL) in server log files in order to deliver the website, ensure its stability and security, and defend against attacks. The legal basis is Article 6(1)(f) GDPR. We have concluded a data processing agreement with Vercel pursuant to Article 28 GDPR; transfers to the USA are based on Vercel's certification under the EU-US Data Privacy Framework and on the EU Standard Contractual Clauses. Log data is retained only for as long as necessary for the purposes stated.

Cookies and local storage

We do not use analytics, tracking, or marketing cookies and do not embed third-party scripts. Fonts and videos are served from our own servers. The website stores only two technically necessary settings in your browser (cookie and local storage): "artesiana-lang" for your selected language and "artesiana-theme" for your selected appearance (light/dark). These entries contain no personal data, are not shared with third parties, and expire after twelve months. Storing them is strictly necessary for the function you requested and therefore does not require consent (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). You can delete these entries at any time via your browser settings.

Your rights

• Access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), and restriction of processing (Article 18)
• Data portability (Article 20 GDPR)
• Objection to processing based on legitimate interests (Article 21 GDPR)
• Lodging a complaint with a supervisory authority (Article 77 GDPR)

Changes to this policy

We may update this Privacy Policy to reflect changes in the law or changes to our processing activities.