Privacy policy

Last updated: April 4, 2025

This Privacy Policy describes how Dana Art (the "Site," "we," "us," or "our") collects, uses, and discloses your personal information when you visit dana-art.shop (the "Site"), use our services, make a purchase, or otherwise communicate with us regarding the site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" refer to you as a user of the Services, whether you are a customer, a website visitor, or another person whose information we have collected in accordance with this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last Updated" date, and take any other steps required by law.

How We Collect and Use Your Personal Information

To provide the Services, we collect as listed below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses listed below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information Do We Collect?

The types of Personal Information we receive about you depend on how you interact with our Site and use our Services. When we use the term "Personal Information," we are referring to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of Personal Information we collect.

Information We Collect Directly from You

The information you provide to us directly through our Services may include:

Contact information—including your name, address, phone number, and email address.

Order information—including your name, billing address, shipping address, payment confirmation, email address, and phone number.

Account information—including your username, password, security questions, and other information used for account security.

Customer support information—including information you include in your communications with us, such as when you send a message through the Services.

Some features of the Services may require you to provide certain information about yourself directly to us. You can choose not to provide this information, but doing so may prevent you from using or accessing those features.

Information We Collect About Your Usage

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). We may use cookies, pixels, and similar technologies ("Cookies") for this purpose. Usage Data may include information about how you access and use our Site and your account, including device information, browser information, network connection information, your IP address, and other information about your interaction with the Services.

Information We Receive from Third Parties

Finally, we may receive information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

Companies that support our site and services, such as Shopify.
Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment, fulfill your orders, and provide you with the products or services you request, in order to fulfill our contract with you.
When you visit our site, open or click on emails we send you, or interact with our services or ads, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

All information we receive from third parties will be treated in accordance with this Privacy Policy. See also the section below, Third-Party Websites and Links.

How we use your personal data
Provision of products and services. We use your personal data to provide you with our services and to fulfill our contract with you, including processing your payments, completing your orders, sending you notifications about your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and managing your account, organizing shipping, facilitating returns and exchanges, and other account-related functions. We may also improve your shopping experience by allowing Shopify to match your account with other Shopify services you may wish to use. In that case, Shopify processes your data in accordance with its Privacy Policy and Consumer Privacy Policy.

Marketing and advertising. We may use your personal data for marketing and advertising purposes, such as sending promotional messages via email, SMS, or mail, and showing you advertisements for our products or services. This may include using your data to better tailor services and ads on our website and on other sites. If you are located in the EEA, the legal basis for these data processing activities is our legitimate interest in selling our products, pursuant to Article 6(1)(f) of the GDPR.

Security and fraud prevention. We use your personal data to detect, investigate, or take action regarding potential fraudulent, illegal, or malicious activity. If you choose to use our services and register an account, you are responsible for the security of your login credentials. We strongly recommend not sharing your username, password, or other access information with third parties. If you believe your account has been compromised, please contact us immediately. If you are located in the EEA, the legal basis for these activities is our legitimate interest in ensuring the security of our website for you and other customers, pursuant to Article 6(1)(f) of the GDPR.

Communication and service improvement. We use your personal data to provide you with customer support and to improve our services. This is based on our legitimate interest in being able to respond to you, provide effective service, and maintain our business relationship with you, pursuant to Article 6(1)(f) of the GDPR.

Cookies
Like many websites, we use cookies on our site. Specific information about the cookies we use in connection with providing our shop via Shopify can be found at https://www.shopify.com/legal/cookies. We use cookies to operate and improve our website and services (including storing your actions and preferences), to perform analytics, and to better understand how users interact with our services (based on our legitimate interest in managing, improving, and optimizing our services). We may also allow third parties and service providers to use cookies on our site to better tailor services, products, and advertising both on our website and on other websites.

Most browsers accept cookies by default, but you can set your browser to remove or reject cookies through its controls. Please note that removing or blocking cookies may negatively affect your user experience and cause some services or functions to not work properly. Blocking cookies may also not completely prevent us from sharing information with third parties such as our advertising partners.

How we share personal data
In certain circumstances, we may share your personal data with third parties to fulfill our contract with you, for legitimate purposes, or for other reasons described in this Privacy Policy. This may include sharing with service providers or third parties that perform services on our behalf (such as IT management, payment processing, data analysis, customer support, cloud storage, fulfillment, and shipping); with business and marketing partners to provide services and promote our products; with your consent, for example to send you products or when you use social media widgets or login integrations; within our corporate group for business purposes; or in connection with a business transaction such as a merger or bankruptcy, to comply with legal obligations, enforce terms of service, and protect our rights or those of our users.

We share the following categories of personal and sensitive personal data for the purposes outlined in the sections “How we collect and use personal data” and “How we share personal data”: identifiers such as contact and account information; commercial information such as order and customer support data; internet or network activity such as usage data; and geolocation data such as locations determined by IP address or other technical means. Recipients include service providers and third parties acting on our behalf, business and marketing partners, and affiliates. We do not use or disclose your data for any other purpose without your consent.

With your consent, we may share personal data for promotional and marketing purposes.

Third-party websites and links
Our website may contain links to websites or online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies as well as their terms and conditions. We are not responsible for the privacy, security, accuracy, completeness, or reliability of such third-party websites. Information you share in public or semi-public spaces, including on social networking platforms, may be viewed by other users of our services and/or users of those third-party platforms, without limitation. The inclusion of such links does not imply endorsement of their content or operators unless explicitly stated.

Children’s data
Our services are not intended for use by children, and we do not knowingly collect personal data from children. If you are a parent or guardian of a child who has provided us with personal data, please contact us to request deletion of that data. As of the effective date of this Privacy Policy, we are not aware of any sharing or sale of data belonging to individuals under the age of 16, as defined by applicable law.

Security and data retention
Please note that no security measures are completely secure, and we cannot guarantee “perfect security.” Information you send to us may not be secure during transmission, and we advise against using unsecure channels to send sensitive or confidential information.

The period for which we retain your personal data depends on several factors, including whether we need the data to manage your account, provide services, comply with legal obligations, resolve disputes, or enforce agreements and policies.

Your rights
Depending on where you live, you may have certain rights regarding your personal data. These rights are not absolute and apply only under certain circumstances. In some cases, we may lawfully deny your request. Possible rights include access to your data, deletion, correction, data portability, the right to opt out of sale, sharing, or targeted advertising, restriction of processing, withdrawal of consent, and the right to appeal. You may also manage your communication preferences and opt out of marketing emails at any time using the unsubscribe link in our emails.

You can exercise these rights as described on our website or by contacting us using the details below. We will not discriminate against you for exercising your rights. We may need to verify your identity (for example, through your email or account information) before responding to your request. You may also appoint an authorized representative to act on your behalf, subject to verification. We will respond to your request within the time required by law.

Complaints
If you have complaints about how we process your personal data, please contact us using the details below. If you are not satisfied with our response, you may have the right to appeal or file a complaint with your local data protection authority. For the EEA, you can find a list of supervisory authorities here.

International users
Please note that we may transfer, store, and process your personal data outside your country of residence. Your personal data may also be processed by staff, external service providers, and partners in these countries. When transferring data outside Europe, we rely on recognized transfer mechanisms such as the EU Standard Contractual Clauses or equivalent agreements issued by the relevant UK authority, unless the destination country has been deemed to provide adequate protection.

Contact
If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please contact us at info@dana-potthoff.de or at Burgstr. 2, Zierenberg, 34289, DE.

For purposes of applicable data protection law, and unless otherwise stated, we are the data controller of your personal data.