Privacy policy

Privacy Policy

We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). We collect and process your personal data in order to be able to offer you our website and our services. In accordance with Article 13 of the GDPR, this statement describes what data we use, in what way, for what purpose and to what extent, and what options and rights you have in connection with the use of your personal data.

1. Responsible entity

KURIOSIS Fine Art GmbH, represented by the managing director Alexander Schabert, Mühlenstr. 8a, 14167 Berlin, is responsible for compliance with data protection on our site. We have not appointed a data protection officer.

We are happy to help with any data protection inquiries. You can contact us using the following options:

E-mail: info@kuriosis.com

2. Data collection on our website

Server log files

When you visit our website, information is automatically transmitted by your browser to our website's server. This information is only stored briefly in a so-called log file and is automatically deleted.

This includes the following data:

Your IP address
Date and time of access
Name and URL of the file you accessed
Website from which the access was made (referrer URL)
Information about the browser and operating system you are using
Name of your access provider.

These data are used to ensure a smooth connection and a comfortable use of our website as well as to evaluate system security and stability.

The legal basis for the data processing arises from Art. 6 para. 1 sentence 1 lit. f GDPR, as we have a legitimate interest in data collection for the aforementioned purposes. In addition, a legal basis also arises from Art. 6 para. 1 lit. b GDPR for the processing of data for the performance of a contract or pre-contractual measures.

The data will not be used to draw conclusions about you.

Contact form/communication by email

You will find a contact form on our website. This is to enable our customers to contact us easily. You can also write to us directly by email. If you wish to use our contact form, you must provide your name and a valid email address. If you write to us by email, we receive your email address. All other data provided is optional. The data is collected for the purpose of initiating or executing contractual relationships in accordance with Art. 6 (1) point b GDPR. If your request is not for the purpose of initiating or executing a contract, we still have a legitimate interest in processing and answering your request. The use of personal data for this purpose is therefore in accordance with Art. 6 (1) point f GDPR.

We use the data you provide solely for the purpose of processing your request. If this is aimed at initiating or executing a business transaction, we will delete your data in accordance with our internal company deletion periods.

If your request is related to a different purpose, we will delete your data after processing if there is no other legal basis for data storage.

Processing of customer and contract data

For the purpose of initiating business, concluding a contract and fulfilling the contract, we use your personal data that is necessary for this purpose in accordance with Art. 6 (1) point b GDPR.

Data will only be transferred to third parties if this is necessary for the fulfillment of the contract, e.g. if a company for production or transport services or a credit institution for payment processing has been commissioned.

These personal data are deleted after the statutory warranty periods have expired or after the statutory retention periods have ended.

You can also create a user account with us. To do this, you must provide the data requested during registration. In the user account, you can then view the profile data you have provided and stored, as well as information on orders or products you have bookmarked. The user account is not publicly accessible. If you delete your user account, all data will be deleted, except for data that we are obliged to store under commercial and tax law in accordance with Art. 6 (1) point f GDPR.

Every time you log in, register, place an order or perform any other binding actions, we store your IP address as well as the day and time. This is done for your protection and in accordance with Art. 6 (1) point f GDPR for the purposes of our legitimate interest in being able to prove the origin of a claim and to prevent misuse or unauthorized use of our system.

Furthermore, a cookie may be set within the scope of your consent in accordance with Art. 6 (1) point a GDPR, which stores your data so that it is automatically entered the next time you visit.

Processing by payment service providers

For fee-based services, we process your personal data, in particular payment data (account, credit card, and other bank data), based on Art. 6 (1) (b) of the GDPR. This is done for the purpose of executing the contract (payment processing/bookkeeping). To the extent necessary, your payment data will be transmitted to service providers (credit institutions, payment providers, accounting service providers) or processed directly by them for the payment transaction and for billing.

Your payment data will be stored for the duration of the contractual relationship and deleted after the contractual relationship has ended completely (until all mutual contractual obligations have been fulfilled), provided there is no other legal basis for data storage.

We use the following payment providers:

PayPal

PayPal's privacy policy: https://www.paypal.com/myaccount/privacy/privacyhub

Klarna

Klarna's privacy policy:

Instant transfer (www.sofort.de)

Instant transfer's privacy policy:

Shopify Payments

Shopify Payments' privacy policy: https://www.shopify.de/legal/datenschutz

Newsletter

On our website, you have the option to subscribe to a free newsletter for the purpose of direct advertising. When you register for the newsletter, your name and email address from the input mask will be transmitted to us. In addition, your IP address and the date and time of registration will be used. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.

During the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration. The legal basis for the processing of data after registration for the newsletter by the user, given the user's consent, is Art. 6 para. 1 lit. a GDPR.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The user's e-mail address will therefore be stored for as long as the newsletter subscription is active.

If you have entered into a contractual relationship with us on our website and provided us with your e-mail address, we may subsequently use it to send you a newsletter for the purpose of direct advertising. In such a case, the newsletter will only be used to send direct advertising for our own similar goods or services. The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 para. 3 UWG.

The user concerned can cancel their newsletter subscription at any time. There is a link for this purpose in every newsletter.

E-mail delivery is carried out as part of a data processing agreement using Klaviyo, a mailing tool (Klaviyo, 225 Franklin St, Boston, MA 02110, USA). Your data is forwarded to Klaviyo in accordance with Art. 6 (1) point f GDPR and serves our legitimate interest in using a newsletter system that is effective in promoting, secure and user-friendly. We would like to point out that the data is transferred to the USA and processed there. Klaviyo does not use your data itself.

Further information on data protection can be found at:

Our website contains cookies. Cookies are small text files that are stored on your device. They help us to make it easier for you to navigate through our site and enable the website to be displayed correctly. They are designed to support the user-friendliness of the website and are, of course, completely harmless to your device. Information is temporarily collected in connection with the device and software you are using. No conclusions can be drawn about your identity from this.

For example, we use so-called “session cookies”. These cookies are automatically deleted after your visit. Likewise, we use cookies that are stored on your device, for example, to make it easier for you to use our site during a subsequent visit and to recognize your browser the next time you visit (“permanent cookies”). Of course, you can manually delete these cookies at any time.

We also use cookies to statistically record and evaluate the use of our website. This is done for the purpose of further optimizing our offer for you.

We also use cookies for pseudonymized reach measurement. You will find more information about this below.

We use the cookies that are absolutely necessary for the operation of our website, i.e. without which our website cannot be displayed, for this purpose to protect our legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. These are automatically deleted after a defined period of time.

We use the cookies that are necessary for the execution of contracts or for the contractually agreed use of our website in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO. These are automatically deleted after a defined period of time.

The use of cookies not referred to above is based on your consent in accordance with Art. 6 (1) point a GDPR. Your consent can be withdrawn at any time with immediate effect. To do this, go to the settings of the browser you are using and select “Delete browser data”. You must have selected “Cookies and other website data” and then remove these.

Google Analytics

Based on your consent (within the meaning of Art. 6 (1) (a) GDPR), we use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, on our site. We use Google Analytics to tailor our site to meet your needs and to continuously optimize it, as well as to collect and evaluate statistics about our website. In this context, pseudonymized user profiles are created and cookies are used. The following information about your use of this website is collected:

Your IP address
Date and time of access
Name and URL of the file you accessed
Website from which the access was made (referrer URL)
Information about the browser and operating system you are using
Name of your access provider

If you have given your consent, this information will be transmitted to a Google server in the United States and stored there. Please note that this is a data transfer to a country outside the EU. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

As described above, you can prevent cookies from being stored on your computer. In addition, you have the option to prevent Google from using the data collected by cookies by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Subject to legal or contractual permissions, we have Google process the data in a third country under the special conditions of Art. 44 ff. DSGVO.

For more information about privacy related to Google Analytics, see the Google Analytics Help Center ().

Google Marketing and Remarketing Services

Based on your consent (within the meaning of Art. 6 (1) point a GDPR), we use Google Marketing and Remarketing Services, hereinafter Google Marketing Services, of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter Google, on our site. We use Google marketing services to tailor our site to user needs and continuously optimize it, as well as for analysis purposes and to improve the economic efficiency of our online offering.

If you have given your consent, we can use Google marketing services to display targeted ads on our site and for our site on third-party sites in a way that is tailored to the potential interests of users. The ads can be customized so that the user receives offers on other pages that he has viewed on our site but not purchased (remarketing). For this purpose, a (re) marketing tag, a corresponding Google code, is executed and the web pages integrated on our site and on pages where Google marketing services are activated. This code generates a cookie on your device that records which websites you have visited as a user,

what content you are interested in and what offers you have completed or even just viewed. This code also stores technical data such as your browser, visiting times and information about the other pages visited. In addition, your IP address is transmitted to Google in anonymized form. It is also possible for Google to combine this data with data from other sources.

We use the Google Adwords service as part of these Google marketing services. By using Google Adwords, we can see what happens after a user clicks on the corresponding ad. This could be, for example, the purchase of a product, registration for a newsletter, a call to our company or the retrieval/download of a file. The corresponding customer actions that we have defined are referred to as conversions. The conversion cookie is customized for us and cannot be tracked by other Adwords customers. These conversion cookies are important to us because they enable us to compile statistics on the use of all customers in order to optimize our offer even better. No information that can identify an individual user is used.

As part of Google Marketing Services, we can use the Google AdSense service to integrate third-party advertisements on our website. AdSense uses cookies that enable Google and Google's partner websites to serve ads based on users' visits to this site and other sites on the Internet.

As part of Google's marketing services, we use the Google Optimizer service to conduct A/B testing to understand the impact of various changes to a website. Cookies are stored on users' devices for these test purposes. Only pseudonymous user data is processed.

As part of Google's marketing services, we can use the Google DoubleClick service to integrate third-party advertisements into our website. DoubleClick sets cookies on your device. These cookies enable Google partner websites to place ads based on users' visits to this and other websites.

We also use the Google Tag Manager, Google Datastudio and Search Console services. These services enable us to manage Google's marketing and analytics services on our website.

Furthermore, you can use the settings and opt-out options provided by Google if you wish to object to this processing.

You can find a corresponding link at:

Subject to legal or contractual permissions, we have Google process the data in a third country under the special conditions of Art. 44 ff. DSGVO.

Further information on marketing services can be found on the Google overview page:

You can find Google's privacy policy at:

Use of Google Maps

Based on your consent (within the meaning of Art. 6 (1) a GDPR), we use “Google Maps” from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google Maps”, to make our site easier to find.

If you have given your consent, a cookie will be set by Google each time the “Google Maps” component is accessed in order to process user settings and data when displaying the page on which the “Google Maps” component is integrated. This cookie is usually not deleted when you close your browser, but expires after a certain period of time, unless you have deleted it manually beforehand.

If you do not agree to this processing of your data, you have the option of disabling the Google Maps service and thus preventing the transmission of data to Google. To do this, you must disable the JavaScript function in your browser. However, we would like to point out that in this case you will not be able to use Google Maps or only to a limited extent.

The use of “Google Maps” and the information obtained via “Google Maps” is subject to the Google Terms of Use at:

http://www.google.de/intl/de/policies/terms/regional.html

as well as the additional terms and conditions for “Google Maps” at:

https://www.google.com/intl/de_de/help/terms_maps.html.

Google complies with European data protection law. For more information about privacy at Google, please visit:

https://policies.google.com/privacy?hl=de

Google Ajax & jQuery libraries, Google Webfonts (stored locally)

On the basis of Art. 6 para. 1 sentence 1 lit. f DSGVO, we use Google Ajax & jQuery libraries, Google Webfonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”, for the purpose of a customer-friendly and appealing presentation of our site. In this context, program libraries and fonts are retrieved by your browser from our server and loaded into the browser cache in order to display content, texts and fonts correctly. In doing so, information about your provider, operating system, browser and your IP address may be transmitted to our server. Since the Ajax & jQuery libraries and web fonts are stored locally on our server, no data is transmitted to Google.

Meta Pixel

Based on your consent (within the meaning of Art. 6 para. 1 lit. a. DSGVO), we use “Meta Pixel” from Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, hereinafter “Meta”, on our site. We use Meta Pixel for the needs-based design and continuous optimization and analysis of our site and our commercial offers. Meta Pixel enables us to display targeted advertising to Facebook users who are or may be interested in our offers. This way, our advertising reaches users who are interested and is not perceived as annoying. It also allows us to perform static evaluations for market research purposes. Further information on how Meta Pixel works can be found here: https://de-de.facebook.com/business/help/742478679120153

The data collected by Meta Pixel is also processed in accordance with Facebook's data usage policy: https://www.facebook.com/policy.php

You have the right to object to data collection by Meta Pixel. To do so, please use the settings for usage-based advertising from Facebook: https://www.facebook.com/settings?tab=ads. The settings you make are not limited to one device, but are applied to all devices you use.

As described above, you can prevent cookies from being stored on your computer.

Facebook

On the basis of your consent (within the meaning of Article 6 (1) (a) GDPR), we use the plug-in of the social network Facebook (address: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) on our website to increase our popularity.

You can recognize the plug-ins by the Facebook logo or the Like button (I like it) – you can find an overview at: http://developers.facebook.com/docs/Plug-ins/

Insofar as you have given your consent, the plug-in establishes a direct connection between your browser and the Facebook servers. We have no influence on the nature and extent of the data that the plug-in transmits to the Facebook Inc. servers.

You can find more information about this at:

https://www.facebook.com/help/186325668085084

The plug-in informs Facebook Inc. that you, as a user, have visited this website. There is a possibility that your IP address will be stored. If you are logged into your Facebook account while visiting the website, the above information will be linked to it.

If you use the plug-in functions by sharing or liking a post, the corresponding information will also be transmitted to Facebook Inc.

If you do not want Facebook Inc. to link this data to your Facebook account, please log out of Facebook before visiting this website and delete the stored cookies. You can use your Facebook profile to make further settings for data processing for advertising purposes or to object to the use of your data for advertising purposes. You can access the settings at:

Profile settings on Facebook: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Your consent can be revoked at any time for the future.

Instagram

On the basis of your consent (within the meaning of Art. 6 (1) point a GDPR), we integrate plug-ins of the social network Instagram (address: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) into our website. You can recognize the plug-ins by the Instagram logo.

If you have given your consent, the plug-in will establish a direct connection between your browser and the Instagram servers. We have no influence on the nature and extent of the data that the plug-in transmits to the Instagram servers.

You can find more information about this at:

https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

The plug-in informs Instagram that you, as a user, have visited this website. There is a possibility that your IP address will be stored. If you are logged into your Instagram account while visiting this website, the above information will be linked to it.

If you use the plug-in functions by clicking the Instagram button, the corresponding information will also be transmitted to Instagram.

If you want to prevent Instagram from linking this data to your Instagram account, please log out of Instagram before visiting this website and delete the stored cookies.

YouTube-nocookie

On the basis of our legitimate interest, we use the provider YouTube Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our site in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO for the integration of videos. This is done for the purpose of customer-friendly and more attractive presentation as well as to explain our services.

No personal data is initially transmitted to YouTube as long as you do not watch the videos.

If you watch the videos, personal data (IP address, browser data, end device data) is transmitted to YouTube in the USA on the basis of your consent (within the meaning of Art. 6 para. 1 lit. a. DSGVO).

The plug-in informs Google that you, as a user, have visited this website. There is a possibility that your IP address will be stored. If you are logged into your Google account while visiting this website, the aforementioned information will be linked to it.

You can find information about this at:

https://policies.google.com/privacy?hl=de

On the basis of your consent (within the meaning of Art. 6 (1) point a GDPR), we integrate the plug-in of the Pinterest social network, provided by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA, hereinafter “Pinterest”, on our website. You can recognize the plug-ins by the Pinterest logo.

If you have given your consent, the plug-in will establish a direct connection between your browser and the Pinterest servers. We have no influence on the nature and extent of the data that the plug-in transmits to the Pinterest servers.

You can find more information about this at: https://policy.pinterest.com/de/privacy-policy.

The plug-in informs Pinterest that you, as a user, have visited this website. There is a possibility that your IP address will be stored. If you are logged into your Pinterest account while visiting our website, the above information will be linked to it.

If you use the plug-in functions by using the Pinterest button, the corresponding information will also be transmitted to Pinterest.

If you do not want LinkedIn to link this data to your Pinterest account, please log out of Pinterest before visiting this website and delete the stored cookies.

Affiliate links/advertising links

We have integrated so-called affiliate links (advertising links) into our website. If you click on such an affiliate link and make a purchase via this link, we receive a commission from the relevant online shop or provider. We receive pseudonymized billing data for billing purposes. This data processing is based on Art. 6 (1) point b GDPR. The data is stored for 3 years until the end of the year and then deleted.

3. Social media channels

Facebook

We have created a fan page on the social network Facebook (address: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), hereinafter referred to as Facebook, and are considered to be the operator of this fan page together with Facebook as jointly responsible within the meaning of Art. 26 DSGVO. As a fan page operator, Facebook offers us the option of creating anonymous statistics in the form of page insights into how our fan page is used. To do this, Facebook installs cookies on the user's device and reads them.

We have agreed with Facebook that Facebook will assume primary responsibility for the processing of Insights data in accordance with the GDPR and will fulfill all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). In addition, Meta Platforms Ireland Ltd. will make the essence of this Page Insights supplement available to the data subjects.

This addendum can be viewed here:

https://www.facebook.com/legal/terms/page_controller_addendum

We process the data collected using Facebook Insights on the basis of our legitimate interest in accordance with Art. 6 (1) point f GDPR. Our legitimate interest is to increase our brand awareness by providing information about our services and our company in the much-used social media. In particular, it is important to us that our company is presented in a modern and timely manner.

You can find more information about Facebook Insights here:

https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram

We have created a business profile on the social network Instagram (operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), hereinafter referred to as Facebook, and, as the operator of this profile, we and Facebook are considered jointly responsible within the meaning of Art. 26 DSGVO. Facebook offers us, as the operator of an Instagram profile, the opportunity to create anonymous statistics in the form of so-called page insights into the usage behavior of our profile. To do this, Facebook installs and reads cookies on the user's device.

We have agreed with Facebook that Facebook will assume primary responsibility for the processing of Insights data in accordance with the GDPR and will fulfill all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 of the GDPR, Articles 15 to 22 of the GDPR and Articles 32 to 34 of the GDPR). In addition, Facebook will make the essence of this Page Insights Addendum available to the data subjects.

This addendum can be viewed here:

https://www.facebook.com/legal/terms/page_controller_addendum

We process the data collected using Facebook Insights on the basis of our legitimate interest in accordance with Art. 6 (1) point f GDPR. Our legitimate interest lies in increasing our brand awareness by providing information about our services and our company in the much-used social media as well. In particular, the modern and timely presentation of our company that this enables is important to us.

You can find more information about Facebook Insights here:

https://www.facebook.com/legal/terms/information_about_page_insights_data

Other social media channels

We use the social network Pinterest. Insofar as personal data is collected here, e.g. through direct messages, this is done for the purpose of initiating or executing contractual relationships in accordance with Art. 6 (1) point b GDPR.

Even if your request is not for the purpose of initiating or executing a contract, we still have a legitimate interest in processing and answering your request.

Therefore, the use of personal data for this purpose is based on Art. 6 (1) point f GDPR.

We use the data you provide exclusively to process your request. If your request is related to the initiation or execution of a business transaction, we will delete your data in accordance with our internal deletion periods.

If your request is related to another purpose, we will delete your data after processing, provided that there is no other legal basis for data storage.

4. Disclosure of data

Your personal data will not be transferred to third parties. However, data may exceptionally be transferred for the following reasons:

you have given your express consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR
the disclosure is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR and there is no overriding legitimate interest in not disclosing your data
we are legally obliged to disclose the data in accordance with Art. 6 (1) sentence 1 lit. c GDPR
insofar as disclosure is permissible and necessary for the performance of a contract with you in accordance with Article 6 (1) sentence 1 point (b) GDPR

If your data is processed, for example in the case of external hosting, by third parties commissioned by us, this is done on the basis of Article 28 GDPR by means of a data processing agreement.

5. transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this will only take place if it occurs in order to fulfill our (pre)contractual obligations on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests.

Subject to legal or contractual permissions, we process or allow the data to be processed in a third country only if the special requirements of Art. 44 ff. of the GDPR are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to that of the EU or the observance of officially recognized special contractual obligations (so-called “standard contractual clauses”).

A transfer of your data collected on this website is carried out in the USA by Google, Meta and Pinterest.

By accepting further cookies or activating the plug-ins, you consent in accordance with Art. 49 (1) 1 lit. a GDPR to your data being processed in the USA.

6. Rights of data subjects

Right of access Art. 15 GDPR

You have the right to request confirmation from us as to whether we are processing personal data about you. If this is the case, you can request information about this personal data and the following information:

the purposes of the processing
the categories of personal data concerned
the recipients or categories of recipients to whom the personal data have been or will be disclosed – in particular recipients in third countries or international organizations
if possible, the planned duration for which the personal data will be stored; if this is not possible, the criteria for determining this duration
the existence of a right to rectification or erasure of personal data concerning you, to restriction of processing or a right to object to such processing
the existence of a right of appeal to a supervisory authority
if the personal data is not collected from you, all available information about the origin of the data
the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject

Right to rectification Art. 16 GDPR

You have the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data stored by us.

Right to erasure (right to be forgotten) of your data, Art. 17 GDPR

You have the right to request the erasure of your personal data stored by us, provided that

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you withdraw consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing;
you object to the processing in accordance with Article 21(1) of the GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21(2) of the GDPR;
the personal data has been unlawfully processed;
the deletion of personal data is necessary to fulfill a legal obligation under Union or national law to which you are subject;
the personal data were collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

We are obliged to delete the data if the conditions are met, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

Right to restriction of processing, Art. 17 GDPR

You have the right to request that we restrict the processing of your personal data if

you dispute the accuracy of the personal data, but only for a period that allows us to verify the accuracy of the data
the processing is unlawful and you do not immediately want your personal data to be deleted, but instead request that the use of your personal data be restricted
we no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims
you have objected to the processing pursuant to Article 21(1) of the GDPR, as long as it is not yet clear whether the legitimate reasons on our part outweigh yours.

Insofar as the processing is restricted, we may only process your personal data – apart from storing it – with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

You will be informed again before the restriction is lifted.

Right to data portability Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

Right of objection Art. 21 DSGVO

You have the right, in accordance with Art. 21 DSGVO, to object to the processing of your personal data if it is processed on the basis of our legitimate interest, in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO. However, this only applies if there are reasons arising from your particular situation or if the objection is directed against direct mail.

Right of withdrawal Art. 7 para. 3 GDPR

You have the right, in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, to revoke your consent to us at any time. This revocation applies exclusively to future use.

Right to complain to regulatory authorities

Without prejudice to any other administrative or judicial remedy, you have the right to complain to a regulatory authority, in particular in the Member State of your habitual residence, your place of work or our registered office, if you consider that the processing of your personal data is in breach of the General Data Protection Regulation.

If you wish to exercise your rights as a data subject, you can also do so by sending an e-mail to the above e-mail address.

7. Data security

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize this by the fact that the address line of the browser changes from “http://” to “https://”. You will also see a padlock symbol in the browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

In addition, we have taken precautions in the form of technical and organizational measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.

8. Timeliness and changes to this privacy policy

This privacy policy is currently valid and was last updated on September 5, 2024.

To ensure that our privacy policy always complies with current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the privacy policy has to be adapted due to new or revised services, e.g. new services. The new privacy policy will then take effect on your next visit to our site.

Our data protection declaration is available for you to view and print out on our website at any time.

Privacy Policy

1. responsible body

We are happy to help with any data protection inquiries. You can contact us using the following options:

E-mail: info@kuriosis.com

2. data collection on our website

Server log files

This includes the following data:

Your IP address
Date and time of access
Name and URL of the file you accessed
Website from which the access was made (referrer URL)
Information about the browser and operating system you are using
Name of your access provider.

These data are used to ensure a smooth connection and a comfortable use of our website as well as to evaluate system security and stability.

The data will not be used to draw conclusions about you.

Contact form/communication by email

If your request is related to a different purpose, we will delete your data after processing if there is no other legal basis for data storage.

Processing of customer and contract data

For the purpose of initiating business, concluding a contract and fulfilling the contract, we use your personal data that is necessary for this purpose in accordance with Art. 6 (1) point b GDPR.

These personal data are deleted after the statutory warranty periods have expired or after the statutory retention periods have ended.

Furthermore, a cookie may be set within the scope of your consent in accordance with Art. 6 (1) point a GDPR, which stores your data so that it is automatically entered the next time you visit.

Processing by payment service providers

We use the following payment providers:

PayPal

PayPal's privacy policy: https://www.paypal.com/myaccount/privacy/privacyhub

Klarna

Klarna's privacy policy:

Instant transfer (www.sofort.de)

Instant transfer's privacy policy:

Shopify Payments

Shopify Payments' privacy policy: https://www.shopify.de/legal/datenschutz

Newsletter

The user concerned can cancel their newsletter subscription at any time. There is a link for this purpose in every newsletter.

Further information on data protection can be found at:

We also use cookies to statistically record and evaluate the use of our website. This is done for the purpose of further optimizing our offer for you.

We also use cookies for pseudonymized reach measurement. You will find more information about this below.

Google Analytics

Your IP address
Date and time of access
Name and URL of the file you accessed
Website from which the access was made (referrer URL)
Information about the browser and operating system you are using
Name of your access provider

Subject to legal or contractual permissions, we have Google process the data in a third country under the special conditions of Art. 44 ff. DSGVO.

For more information about privacy related to Google Analytics, see the Google Analytics Help Center ().

Google Marketing and Remarketing Services

We also use the Google Tag Manager, Google Datastudio and Search Console services. These services enable us to manage Google's marketing and analytics services on our website.

Furthermore, you can use the settings and opt-out options provided by Google if you wish to object to this processing.

You can find a corresponding link at:

Subject to legal or contractual permissions, we have Google process the data in a third country under the special conditions of Art. 44 ff. DSGVO.

Further information on marketing services can be found on the Google overview page:

You can find Google's privacy policy at:

Use of Google Maps

The use of “Google Maps” and the information obtained via “Google Maps” is subject to the Google Terms of Use at:

http://www.google.de/intl/de/policies/terms/regional.html

as well as the additional terms and conditions for “Google Maps” at:

https://www.google.com/intl/de_de/help/terms_maps.html.

Google complies with European data protection law. For more information about privacy at Google, please visit:

https://policies.google.com/privacy?hl=de

Google Ajax & jQuery libraries, Google Webfonts (stored locally)

Meta Pixel

The data collected by Meta Pixel is also processed in accordance with Facebook's data usage policy: https://www.facebook.com/policy.php

As described above, you can prevent cookies from being stored on your computer.

Facebook

You can recognize the plug-ins by the Facebook logo or the Like button (I like it) – you can find an overview at: http://developers.facebook.com/docs/Plug-ins/

You can find more information about this at:

https://www.facebook.com/help/186325668085084

If you use the plug-in functions by sharing or liking a post, the corresponding information will also be transmitted to Facebook Inc.

Profile settings on Facebook: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Your consent can be revoked at any time for the future.

Instagram

You can find more information about this at:

https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

If you use the plug-in functions by clicking the Instagram button, the corresponding information will also be transmitted to Instagram.

If you want to prevent Instagram from linking this data to your Instagram account, please log out of Instagram before visiting this website and delete the stored cookies.

YouTube-nocookie

No personal data is initially transmitted to YouTube as long as you do not watch the videos.

You can find information about this at:

https://policies.google.com/privacy?hl=de

You can find more information about this at: https://policy.pinterest.com/de/privacy-policy.

If you use the plug-in functions by using the Pinterest button, the corresponding information will also be transmitted to Pinterest.

If you do not want LinkedIn to link this data to your Pinterest account, please log out of Pinterest before visiting this website and delete the stored cookies.

Affiliate links/advertising links

3. Social media channels

Facebook

This addendum can be viewed here:

https://www.facebook.com/legal/terms/page_controller_addendum

You can find more information about Facebook Insights here:

https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram

We have agreed with Facebook that Facebook will assume primary responsibility for the processing of Insights data in accordance with the GDPR and will fulfill all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 of the GDPR, Articles 15 to 22 of the GDPR and Articles 32 to 34 of the GDPR). In addition, Facebook will make the essence of this Page Insights Addendum available to the data subjects.

This addendum can be viewed here:

https://www.facebook.com/legal/terms/page_controller_addendum

You can find more information about Facebook Insights here:

https://www.facebook.com/legal/terms/information_about_page_insights_data

Other social media channels

Even if your request is not for the purpose of initiating or executing a contract, we still have a legitimate interest in processing and answering your request.

Therefore, the use of personal data for this purpose is based on Art. 6 (1) point f GDPR.

If your request is related to another purpose, we will delete your data after processing, provided that there is no other legal basis for data storage.

4. Disclosure of data

Your personal data will not be transferred to third parties. However, data may exceptionally be transferred for the following reasons:

you have given your express consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR
the disclosure is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR and there is no overriding legitimate interest in not disclosing your data
we are legally obliged to disclose the data in accordance with Art. 6 (1) sentence 1 lit. c GDPR
insofar as disclosure is permissible and necessary for the performance of a contract with you in accordance with Article 6 (1) sentence 1 point (b) GDPR

If your data is processed, for example in the case of external hosting, by third parties commissioned by us, this is done on the basis of Article 28 GDPR by means of a data processing agreement.

5. transfers to third countries

A transfer of your data collected on this website is carried out in the USA by Google, Meta and Pinterest.

By accepting further cookies or activating the plug-ins, you consent in accordance with Art. 49 (1) 1 lit. a GDPR to your data being processed in the USA.

6. Rights of data subjects

Right of access Art. 15 GDPR

the purposes of the processing
the categories of personal data concerned
the recipients or categories of recipients to whom the personal data have been or will be disclosed – in particular recipients in third countries or international organizations
if possible, the planned duration for which the personal data will be stored; if this is not possible, the criteria for determining this duration
the existence of a right to rectification or erasure of personal data concerning you, to restriction of processing or a right to object to such processing
the existence of a right of appeal to a supervisory authority
if the personal data is not collected from you, all available information about the origin of the data
the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject

Right to rectification Art. 16 GDPR

You have the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data stored by us.

Right to erasure (right to be forgotten) of your data, Art. 17 GDPR

You have the right to request the erasure of your personal data stored by us, provided that

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you withdraw consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing;
you object to the processing in accordance with Article 21(1) of the GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21(2) of the GDPR;
the personal data has been unlawfully processed;
the deletion of personal data is necessary to fulfill a legal obligation under Union or national law to which you are subject;
the personal data were collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

Right to restriction of processing, Art. 17 GDPR

You have the right to request that we restrict the processing of your personal data if

you dispute the accuracy of the personal data, but only for a period that allows us to verify the accuracy of the data
the processing is unlawful and you do not immediately want your personal data to be deleted, but instead request that the use of your personal data be restricted
we no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims
you have objected to the processing pursuant to Article 21(1) of the GDPR, as long as it is not yet clear whether the legitimate reasons on our part outweigh yours.

You will be informed again before the restriction is lifted.

Right to data portability Art. 20 GDPR

Right of objection Art. 21 DSGVO

Right of withdrawal Art. 7 para. 3 GDPR

You have the right, in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, to revoke your consent to us at any time. This revocation applies exclusively to future use.

Right to complain to regulatory authorities

If you wish to exercise your rights as a data subject, you can also do so by sending an e-mail to the above e-mail address.

7. Data security

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

8. Timeliness and changes to this privacy policy

This privacy policy is currently valid and was last updated on September 5, 2024.

Our data protection declaration is available for you to view and print out on our website at any time.

9. Complaints and warnings

If you feel that your rights have been violated or that you have been disadvantaged in any other way, we ask that you inform us of this yourself. You will then receive a personal and individual response. In the context of your duty to minimize damages, we would like to point out that we will not cover the costs of a lawyer hired by you out of court without first contacting us. We expressly do not want you to hire a lawyer to issue a cease-and-desist letter and/or to submit a declaration of discontinuance with a penalty clause.

Consequently, an alleged intention cannot be relied upon.

Privacy policy

Cart

Select options

Wishlist