Privacy Policy

Privacy Policy

(pursuant to Art. 12 et seq. EU General Data Protection Regulation — GDPR)


1. Controller

WerbeArtPro GmbH
Düsseldorfer Straße 226
45481 Mülheim an der Ruhr — Germany
Phone: +49 (0) 208 38581215
E‑mail: info@werbeartpro.de
Website: www.werbeartpro.de
Represented by Managing Director Sara Mir Ali

2. General Information on Data Processing

  • Purposes: Operating and optimising our website, order processing (online shop & marketplaces), customer service, marketing, IT security.
  • Legal bases: Art. 6 (1) (a) GDPR (consent), (b) (contract performance), (c) (legal obligation), (f) (legitimate interests — e.g. security, analytics, advertising).
  • Categories of data subjects: Website visitors, users, customers, prospects, business partners.
  • Categories of personal data: Master/contact data, communication data, contract data, order & payment data, usage data, meta & device data (IP, browser etc.).

3. Hosting & Server Log Files

This website is hosted in Germany. The host automatically collects and stores the following data for a maximum of 7 days (Art. 6 (1) (f) GDPR): IP address, timestamp, requested file, transferred data volume, status code, browser type/version, operating system, referrer URL. Processing is necessary for stability, security and troubleshooting.


4. Cookies & Consent Management

We use cookies. Essential cookies (Art. 6 (1) (f) GDPR) are required for technical operation. All other cookies (e.g. analytics, marketing) are set only with your consent (Art. 6 (1) (a) GDPR) via our cookie consent banner. You can adjust your preferences at any time via “Cookie Settings” in the footer.


5. Web Analytics & Marketing Tools

5.1 Google Tag Manager

Google Tag Manager (Google Ireland Ltd.) manages tags and does not itself set cookies or collect personal data. Legal basis: consent (Art. 6 (1) (a) GDPR).

5.2 Google Analytics 4

We use Google Analytics 4 with IP anonymisation (Google Ireland Ltd.; parent company Google LLC, USA – secured by EU Standard Contractual Clauses). Data: truncated IP, usage & event data, device info. Purpose: statistical analysis & website optimisation. Legal basis: Art. 6 (1) (a) GDPR.

5.3 Google Ads / Remarketing

Google Ads conversion tracking and remarketing enable interest‑based advertising. Legal basis: your consent (Art. 6 (1) (a) GDPR).

5.4 Meta Pixel (Facebook Pixel)

The Meta Pixel (Meta Platforms Ireland Ltd.) measures campaign performance and builds audiences for ads. Legal basis: Art. 6 (1) (a) GDPR.

5.5 Newsletter & E‑mail Marketing

We send newsletters via Brevo (Sendinblue GmbH, Berlin). Data: e‑mail address, optional name/salutation. Double‑opt‑in and tracking pixel are used. Legal basis: consent, Art. 6 (1) (a) GDPR.


6. Orders & E‑Commerce Processing

6.1 Data Collected for Orders

For contract fulfilment (Art. 6 (1) (b) GDPR) we process:

  • Name, billing & shipping address, e‑mail address, telephone
  • Payment details, order information, delivery data

6.2 ERP / Order Management

We use Pickware GmbH (Darmstadt) and Billbee GmbH (Twistetal) for order management. Processing is based on Art. 6 (1) (b) GDPR and data processing agreements (Art. 28 GDPR).

6.3 Payment Service Providers

Data is transferred to:

  • PayPal (Europe) S.à r.l. et Cie, Luxembourg
  • Klarna Bank AB (publ), Sweden
  • Stripe Payments Europe, Ireland
  • Amazon Payments Europe S.C.A., Luxembourg

Legal basis: Art. 6 (1) (b) GDPR. Fraud prevention & credit checks rely on Art. 6 (1) (f) GDPR.

6.4 Shipping Providers

For delivery we forward name/address/e‑mail/telephone to DHL, DPD, UPS or Hermes (Art. 6 (1) (b) GDPR).


7. Storage Periods & Deletion

Data Category Standard Retention
Tax & Commercial Records 6 – 10 years (German AO & HGB)
Order & Delivery Data 3 years after contract end (statute of limitations)
Analytics & Marketing Data 14 months (Google Analytics default)
Newsletter Consents until withdrawal of consent

8. Your Rights

You have the following rights under Art. 15 – 20 GDPR:

  • Access to your stored data
  • Rectification of inaccurate data
  • Erasure (“right to be forgotten”) or restriction of processing
  • Data portability

Right to Object (Art. 21 GDPR): You may object at any time to processing based on legitimate interests — in particular to direct marketing.

Contact for privacy enquiries: info@werbeartpro.de


9. Right to Lodge a Complaint

If you believe your data are processed unlawfully, you can complain to any supervisory authority. Our lead authority is:

State Commissioner for Data Protection and Freedom of Information of North Rhine‑Westphalia
P.O. Box 20 04 44, 40102 Düsseldorf, Germany
Phone: +49 211 38424‑0
E‑mail: poststelle@ldi.nrw.de


10. Security Measures

  • TLS/SSL encryption for all transmissions
  • Access control & role‑based permissions
  • Regular software updates & penetration tests
  • Data processing agreements (Art. 28 GDPR) with all service providers

11. Changes to This Privacy Policy

We will update this policy whenever legal, technical or organisational changes make it necessary. Please check regularly for the latest version.

Last updated: 18 April 2025

Questions? Send an e‑mail to info@werbeartpro.de.