Privacy Policy

(pursuant to Art. 12 et seq. EU General Data Protection Regulation — GDPR)

1. Controller

WerbeArtPro GmbH
Düsseldorfer Straße 226
45481 Mülheim an der Ruhr — Germany
Phone: +49 (0) 208 38581215
E‑mail: info@werbeartpro.de
Website: www.werbeartpro.de
Represented by Managing Director Sara Mir Ali

2. General Information on Data Processing

Purposes: Operating and optimising our website, order processing (online shop & marketplaces), customer service, marketing, IT security.
Legal bases: Art. 6 (1) (a) GDPR (consent), (b) (contract performance), (c) (legal obligation), (f) (legitimate interests — e.g. security, analytics, advertising).
Categories of data subjects: Website visitors, users, customers, prospects, business partners.
Categories of personal data: Master/contact data, communication data, contract data, order & payment data, usage data, meta & device data (IP, browser etc.).

3. Hosting & Server Log Files

This website is hosted in Germany. The host automatically collects and stores the following data for a maximum of 7 days (Art. 6 (1) (f) GDPR): IP address, timestamp, requested file, transferred data volume, status code, browser type/version, operating system, referrer URL. Processing is necessary for stability, security and troubleshooting.

4. Cookies & Consent Management

We use cookies. Essential cookies (Art. 6 (1) (f) GDPR) are required for technical operation. All other cookies (e.g. analytics, marketing) are set only with your consent (Art. 6 (1) (a) GDPR) via our cookie consent banner. You can adjust your preferences at any time via “Cookie Settings” in the footer.

5. Web Analytics & Marketing Tools

5.1 Google Tag Manager

Google Tag Manager (Google Ireland Ltd.) manages tags and does not itself set cookies or collect personal data. Legal basis: consent (Art. 6 (1) (a) GDPR).

5.2 Google Analytics 4

We use Google Analytics 4 with IP anonymisation (Google Ireland Ltd.; parent company Google LLC, USA – secured by EU Standard Contractual Clauses). Data: truncated IP, usage & event data, device info. Purpose: statistical analysis & website optimisation. Legal basis: Art. 6 (1) (a) GDPR.

5.3 Google Ads / Remarketing

Google Ads conversion tracking and remarketing enable interest‑based advertising. Legal basis: your consent (Art. 6 (1) (a) GDPR).

5.4 Meta Pixel (Facebook Pixel)

The Meta Pixel (Meta Platforms Ireland Ltd.) measures campaign performance and builds audiences for ads. Legal basis: Art. 6 (1) (a) GDPR.

5.5 Newsletter & E‑mail Marketing

We send newsletters via Brevo (Sendinblue GmbH, Berlin). Data: e‑mail address, optional name/salutation. Double‑opt‑in and tracking pixel are used. Legal basis: consent, Art. 6 (1) (a) GDPR.

6. Orders & E‑Commerce Processing

6.1 Data Collected for Orders

For contract fulfilment (Art. 6 (1) (b) GDPR) we process:

Name, billing & shipping address, e‑mail address, telephone
Payment details, order information, delivery data

6.2 ERP / Order Management

We use Pickware GmbH (Darmstadt) and Billbee GmbH (Twistetal) for order management. Processing is based on Art. 6 (1) (b) GDPR and data processing agreements (Art. 28 GDPR).

6.3 Payment Service Providers

Data is transferred to:

PayPal (Europe) S.à r.l. et Cie, Luxembourg
Klarna Bank AB (publ), Sweden
Stripe Payments Europe, Ireland
Amazon Payments Europe S.C.A., Luxembourg

Legal basis: Art. 6 (1) (b) GDPR. Fraud prevention & credit checks rely on Art. 6 (1) (f) GDPR.

6.4 Shipping Providers

For delivery we forward name/address/e‑mail/telephone to DHL, DPD, UPS or Hermes (Art. 6 (1) (b) GDPR).

7. Storage Periods & Deletion

Data Category	Standard Retention
Tax & Commercial Records	6 – 10 years (German AO & HGB)
Order & Delivery Data	3 years after contract end (statute of limitations)
Analytics & Marketing Data	14 months (Google Analytics default)
Newsletter Consents	until withdrawal of consent

8. Your Rights

You have the following rights under Art. 15 – 20 GDPR:

Access to your stored data
Rectification of inaccurate data
Erasure (“right to be forgotten”) or restriction of processing
Data portability

Right to Object (Art. 21 GDPR): You may object at any time to processing based on legitimate interests — in particular to direct marketing.

Contact for privacy enquiries: info@werbeartpro.de

9. Right to Lodge a Complaint

If you believe your data are processed unlawfully, you can complain to any supervisory authority. Our lead authority is:

State Commissioner for Data Protection and Freedom of Information of North Rhine‑Westphalia
P.O. Box 20 04 44, 40102 Düsseldorf, Germany
Phone: +49 211 38424‑0
E‑mail: poststelle@ldi.nrw.de