top of page

Privacy Policy

Atelier Hana Tsugi
Hamburg, Germany

​

1. Controller (Data Protection Responsible Party)

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Atelier Hana Tsugi
Hamburg, Germany
Email: HanaTsugi@outlook.com
Website: www.atelierhanatsugi.com

​

2. General Information

I process personal data exclusively in accordance with the applicable legal provisions, in particular:

  • The EU General Data Protection Regulation (GDPR)

  • The German Federal Data Protection Act (BDSG)

Personal data is collected only when you voluntarily provide it via:

  • The online shop

  • The quotation request form

 

3. Website Hosting (Wix)

This website is hosted by Wix.

Wix processes personal data on my behalf as a data processor in accordance with Art. 28 GDPR.

Wix may automatically collect certain technical data when you visit the website, such as:

  • IP address

  • Browser type and version

  • Date and time of access

  • Operating system

This data is necessary to ensure the secure and stable operation of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website operation).

Wix may process data on servers located within the EU or in third countries. Data transfers outside the EU are safeguarded through appropriate guarantees (e.g. Standard Contractual Clauses).

 

4. Online Shop & Contract Processing

When you place an order, the following data may be processed:

  • Name

  • Billing and shipping address

  • Email address

  • Order details

  • Payment information

Purpose of Processing

Your data is processed for:

  • Contract fulfilment (Art. 6(1)(b) GDPR)

  • Payment processing

  • Shipping and delivery

  • Customer communication

  • Compliance with legal retention obligations

​

5. Payment Processing (Credit Cards)

Payments are primarily processed via credit card through Wix’s integrated payment providers.

Payment data is processed directly by the respective payment service provider. I do not store complete credit card information.

Legal basis: Art. 6(1)(b) GDPR (contract fulfilment).

 

6. Quotation Request Form

When submitting a quotation request, the following data may be processed:

  • Name

  • Email address

  • Description of the object

  • Uploaded images

  • Any additional information you provide

Purpose of Processing

  • Preparation of a quotation

  • Pre-contractual communication

  • Customer correspondence

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).

 

7. Instagram Link

This website contains a link to my Instagram profile on Instagram.

When you click the link, you leave this website and are redirected to Instagram. Instagram may process personal data independently. I have no influence over data processing carried out by Instagram.

The legal basis for displaying the link is Art. 6(1)(f) GDPR (legitimate interest in online presence and communication).

​

8. Data Retention

Personal data is stored only for as long as necessary to fulfil the respective purpose for which it was collected.

Order-related data (including invoices and payment records) is stored for the duration of the contractual relationship and thereafter in accordance with statutory retention obligations under German commercial and tax law. These retention periods generally range from 6 to 10 years.

Data submitted via the quotation request form will be stored for up to 12 months after the last contact, unless a contractual relationship is established. In such case, the applicable statutory retention periods apply.

After expiry of the applicable retention periods, personal data will be deleted unless further storage is required by law.

 

9. Data Sharing

Your personal data will only be shared with third parties if:

  • Necessary for contract fulfilment (e.g. shipping providers, payment providers)

  • Required by law

  • You have given explicit consent

All service providers are carefully selected and comply with GDPR requirements.

 

10. Your Rights Under GDPR

You have the right to:

  • Access your stored data (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with the competent supervisory authority.

Responsible authority in Hamburg:

The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)

 

11. Contact

For all data protection inquiries:

HanaTsugi@outlook.com

bottom of page