DEEN

Privacy policy

General information

This privacy policy informs you how I, as a fine artist, process personal data—especially in the context of inquiries about works, commissions, and sales.

Controller

Aurelius Wendelken
Bachstraße 21
24943 Flensburg
Deutschland

Email: hello@kunstbube.art

Types of data processed

I process in particular:

  • Contact data (name, email address, if applicable phone number)
  • Address data (for offers, contracts, shipping, invoicing)
  • Contents of your inquiries (e.g. desired work, format, budget, project description)
  • Contract and billing data (e.g. purchased works, prices, invoice data)

Purposes of processing

Your data is processed in particular for the following purposes:

  • Responding to inquiries about works, commissions, and collaborations
  • Preparation and execution of purchase and commission contracts
  • Invoicing, bookkeeping, and statutory retention obligations
  • Organizing shipping / handover of works

Legal bases include in particular Art. 6(1)(b) GDPR (contract / pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation, e.g. tax retention), and Art. 6(1)(f) GDPR (legitimate interest in professional communication and handling).

Contacting me (email & contact form)

If you contact me by email or via the contact form on this website, your details—including the contact data provided there—will be stored in order to process your request and in case of follow-up questions.

Processing is based on Art. 6(1)(b) GDPR (preparation of a contractual relationship) and my legitimate interest under Art. 6(1)(f) GDPR to respond to your inquiry carefully.

I do not disclose this data to third parties without your consent unless this is necessary for contract performance or due to legal obligations (e.g. tax advisors, shipping providers).

Retention period

I store personal data only for as long as necessary for the respective purposes.

  • Inquiries without a contract: usually up to 12 months.
  • Contract and invoice data: in accordance with statutory retention periods (usually 6–10 years).

Hosting & server log files

This website is operated by an external service provider (host). When you access the pages, so-called server log files are automatically collected:

  • browser type and browser version
  • operating system used
  • referrer URL
  • hostname of the accessing computer
  • time of the server request
  • IP address (possibly shortened or anonymized)

As a rule, I cannot assign this data to specific persons. It is used to ensure stable and secure operation of the website (Art. 6(1)(f) GDPR).

Link to Instagram

This website contains a link to my profile on Instagram (Meta Platforms). Simply visiting this website does not establish a connection to Instagram.

Only when you actively click the link will you be redirected to Instagram. Instagram’s privacy policy then applies and can be accessed at: https://privacycenter.instagram.com/policy/

No tracking, no profiling

At present, I do not use tools such as Google Analytics, Facebook Pixel, or similar tracking services on this website. No profiling within the meaning of the GDPR takes place.

Your rights under the GDPR

Under the applicable legal provisions, you have the right to:

  • access to your stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to certain processing (Art. 21 GDPR)

You can contact me at any time using the contact details provided above.

Withdrawal of consent

If processing is based on your consent (Art. 6(1)(a) GDPR), you can withdraw it at any time with effect for the future. The lawfulness of processing carried out until withdrawal remains unaffected.

Complaint to a supervisory authority

You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.