



sezai Citak
Privacy Policy
1. Introduction
We take the protection of your personal data very seriously. In this Privacy Policy, we inform you about how we collect, use, and protect your data when you visit our website and purchase our artworks.
This Privacy Policy is based on the requirements of the General Data Protection Regulation (GDPR) applicable in the European Union.
2. Data Controller
Sezai Citak
Arnulfstraße 143
Germany
Email: art@sezaicitak.com
3. Data We Collect
When you use our website, we may collect the following personal data:
-
Name
-
Address (for delivery and invoicing)
-
Email address
-
Phone number (optional)
-
Payment information (processed securely via our payment providers)
-
IP address and technical usage data (e.g., browser type, device information)
4. Purpose of Data Processing
We process your data for the following purposes:
-
To fulfill and deliver your orders
-
To communicate with you about your purchase
-
To handle inquiries and customer service
-
To comply with legal obligations (e.g., invoicing, accounting)
-
(If applicable) For marketing purposes, if you have given consent (e.g., newsletters)
5. Legal Basis
The processing of your data is based on:
-
Art. 6(1)(b) GDPR (performance of a contract)
-
Art. 6(1)(c) GDPR (compliance with legal obligations)
-
Art. 6(1)(a) GDPR (your consent, if applicable)
-
Art. 6(1)(f) GDPR (legitimate interest, e.g., website optimization)
6. Sharing of Data
We only share your personal data with third parties when necessary:
-
Payment service providers (e.g., Stripe, PayPal)
-
Shipping companies (e.g., DHL, UPS)
-
Service providers (e.g., website hosting)
All third parties are contractually bound to comply with GDPR standards.
7. Data Storage and Retention
We store your personal data only as long as necessary for the purposes stated above or as required by law (e.g., tax regulations).
Typically, order-related data will be retained for 10 years under German commercial law.
8. Your Rights
You have the following rights regarding your personal data:
-
Right of access (Art. 15 GDPR)
-
Right to rectification (Art. 16 GDPR)
-
Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
-
Right to restriction of processing (Art. 18 GDPR)
-
Right to data portability (Art. 20 GDPR)
-
Right to object to processing (Art. 21 GDPR)
-
Right to lodge a complaint with a supervisory authority
To exercise your rights, you can contact us at any time via the contact information above.
9. Cookies and Tracking
Our website may use cookies to ensure the functionality of the site and to optimize your user experience.
When you first visit the website, you will be asked for your consent to the use of cookies.
10. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time to comply with legal requirements or to reflect changes in our services.
The updated version will be published on our website.
Additional Information on Specific Services
11. Payment Service Providers – PayPal
We offer payment via PayPal on our website. When you select PayPal as a payment method, your payment data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
The transmission of your data to PayPal is based on Art. 6(1)(b) GDPR (processing for contract purposes) and Art. 6(1)(f) GDPR (legitimate interest in providing a reliable and secure payment process).
PayPal may carry out credit checks independently. Further information can be found in PayPal’s privacy policy:
https://www.paypal.com/webapps/mpp/ua/privacy-full
12. Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies that enable an analysis of your use of the website. The information generated about your use of this website (including your IP address, which is anonymized before storage) is generally transmitted to a Google server and stored there.
We have activated IP anonymization (“anonymizeIP”) on this website to ensure that Google truncates your IP address within the member states of the European Union or other parties to the Agreement on the European Economic Area before transmission.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time via the cookie settings on our website.
Further information on the handling of user data by Google Analytics can be found in Google’s Privacy Policy:
https://support.google.com/analytics/answer/6004245?hl=en
End of Privacy Policy