Privacy Policy

We appreciate your interest in our website. Protecting your personal data is important to us. The following information explains how we process personal data when you visit our website.

1. Controller

The controller responsible for data processing on this website is:
Ivetta Karnelik
Am Höhenpark 16
70192 Stuttgart
Email: i.karnelik@gmail.com
Phone: +49 173 3690795

2. Access Data (Server Log Files)

When you visit our website, technical information transmitted by your browser is automatically collected, including:

  • IP address (shortened where technically possible)
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL

This data is processed based on Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation). This data is not combined with other data sources.

3. Cookies & Consent Management

Our website uses a consent management tool (Borlabs Cookie) to manage cookies in accordance with legal requirements. Technically necessary cookies are used to ensure the proper functioning of the site. Other cookies or external media are loaded only with your consent.

You can withdraw your consent at any time via the cookie banner.

4. Contact Form / Artwork Requests

We provide a contact form for inquiries regarding artworks or other questions. To protect against spam, we use WP Armour – Honeypot Anti Spam without Google reCAPTCHA.

When using the contact form, the following personal data may be collected:

  • Name
  • Email address
  • Your message

Data is processed for the purpose of handling your request based on Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent). Your data will not be shared with third parties.

5. Integrated Services and Plugins

5.1 Polylang (Multilingual Content)

To offer our content in multiple languages, we use Polylang. Only technical cookies required to store your language preference are set. No personal data is transferred to third parties.

5.2 Smash Balloon Social Feeds (Instagram, TikTok, Social Posts)

We use plugins from Smash Balloon to display posts from our social media channels (Instagram, TikTok and others).

In the current configuration, no personal data is transmitted to the respective platforms unless you actively click on a post.

When clicking on external content, you are redirected to the respective social media platform. Their privacy policies apply.

5.3 WooCommerce (technical use only)

WooCommerce is installed but not used as an active online shop. No ordering, payment, or customer account functionality is provided. WooCommerce may set technical cookies required for system operations.

5.4 Contact Form 7

Contact Form 7 processes only the data you enter into the form. No data is stored on external servers.

5.5 Local Fonts

Our website uses the font “Inter Regular”, which is hosted locally on our server. No connection is made to Google Fonts or other external font providers.

5.6 Emojis

If emojis are used on the website, they are delivered locally via the CMS/theme. No external emoji CDNs are loaded.

6. Data Security

We use technical and organizational security measures to protect your personal data against loss, misuse, or unauthorized access. Data transmission is encrypted via SSL/TLS.

7. Your Rights

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

If you would like to exercise your rights, please contact us using the details provided in the Legal Notice (Imprint).

8. Updates to This Privacy Policy

This Privacy Policy is currently valid as of: [Insert date].

We may update this Privacy Policy to reflect changes to our website or legal requirements. The latest version is always available on this page.