Privacy policy

1. Controller

Andreas Illitsch
atelier illitsch
Heimatweg 22a
83052 Bruckmühl
Germany

Email: Info@atelier-illitsch.de
Phone: +49 151 22394334

Please use these contact details for privacy enquiries or to exercise your rights.

2. Hosting and technical access data

The website and email service are operated on a virtual server provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The server is administered using Plesk software installed on it.

When you access the website, your IP address, the date and time, the requested file or page, HTTP status, volume of data transferred, browser and operating-system details and, where applicable, the referring page are processed. These details are needed to deliver content and handle connection, error and security events.

The purposes are reliable website operation, detecting and preventing attacks, and resolving errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and functional operation of our website.

STRATO receives data as the infrastructure provider. Processing on our behalf is subject to Article 28 GDPR. See STRATO’s privacy information.

Retention: technical logs are kept only for as long as needed to monitor secure operation and investigate specific errors or security incidents. Once that purpose no longer applies, they are deleted or anonymised. Data needed for a particular incident may be retained separately until it is resolved and, if necessary, to establish or defend legal claims.

3. Contact and appointment enquiries

You can contact us by email, phone or post. We process your contact details, the content of your enquiry and any information or attachments you voluntarily provide to respond, arrange an appointment or prepare an order.

The appointment email link opens your email application. Opening the link alone does not send a message to us. We receive a message only when you send it using your email application.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns entering into or performing a contract. For other enquiries it is Article 6(1)(f) GDPR; our legitimate interest is handling incoming enquiries.

The mailbox is hosted on the STRATO server described above. Email transmission also involves the email services used by the correspondents. Please send only the information needed for your enquiry.

Retention: enquiries are deleted once they have been dealt with and further retention is no longer necessary for the contract or to establish, exercise or defend legal claims. Correspondence and documents subject to statutory retention requirements are kept for the applicable period and then deleted. The period depends in particular on the type of document and the relevant tax or commercial-law requirements.

Contacting us and providing additional information are voluntary. Without a way to contact you and the information needed for your enquiry, we may be unable to respond or prepare a contract.

4. Language choice, fonts and external content

You can use this website in German or English. The page address determines the language shown; your language choice is not stored on your device. Links between pages retain the current language version. Visiting the main website address again opens the German version. No third-party translation service is used.

The public atelier website does not use its own cookies, local storage, analytics, advertising or marketing services. System fonts and images delivered by our server do not require connections to Google Fonts, image libraries or other external media providers.

There is no embedded contact form, booking system, map, video, Instagram feed or social-media plugin. The language feature does not contain visitor analytics or tracking.

5. Instagram and other external links

The Instagram link is an ordinary link. Visiting our website does not itself establish a connection to Instagram through that link. If you open it, you leave our website. Instagram is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

On the linked website, the provider may process personal data, use cookies and process data outside the EU or EEA. See Instagram’s privacy policy. Other external websites likewise process data independently under their own terms.

6. Recipients and transfers

Within the atelier, access is limited to people who need your data for the purposes described. Technical service providers acting on our behalf are bound by the applicable data-protection requirements. We disclose data to public authorities or others where required by law or supported by another legal basis.

The website and our email service are intended to operate on STRATO infrastructure in Germany. The website functions do not provide for transferring visitor data outside the EU or EEA. If you open external links or use an external email service, that provider is responsible for its own processing.

7. Your rights

Subject to the applicable legal conditions, you have the following rights:

• access to information about the processing of your personal data (Article 15 GDPR);
• rectification of inaccurate and completion of incomplete data (Article 16 GDPR);
• erasure (Article 17 GDPR);
• restriction of processing (Article 18 GDPR);
• data portability for automated processing based on consent or a contract (Article 20 GDPR).

Where processing is based on consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before withdrawal.

8. Complaints to a supervisory authority

You have the right to complain to a data-protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the alleged infringement (Article 77 GDPR).

For private-sector businesses in Bavaria, the relevant authority is in particular:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Email: poststelle@lda.bayern.de
Website and contact: lda.bayern.de

9. Automated decisions and changes

The website functions described here do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

We update this policy when our website or the services we use change.