Privacy policy

Last updated: 02.01.2026

Privacy Policy – Visitors from the United States and Other Non-EU Regions

This Privacy Policy applies to visitors of our website.

Although our business is based in Germany, our products and services are currently offered exclusively to customers located in the United States.

As an EU-based company, we process personal data in accordance with the principles of the EU General Data Protection Regulation (GDPR), regardless of the user's location.

1. Data Controller

The responsible entity for personal data processing under the EU General Data Protection Regulation (GDPR) is:

ART o LUNA
Birkhahnweg 26
73230 Kirchheim unter Teck
Germany

Email: support@artolunastudio.com
Phone: +1 (607) 247-0550

2. Types of Personal Data We Collect

We may collect and process the following types of personal data:

Category Examples
Identity & Contact Data Name, address, email, phone number
Order & Transaction Data Products ordered, delivery address, billing status
Payment Data Transaction details, payment method (processed securely by third parties)
Device & Technical Data IP address, browser type, device type, cookies, usage statistics
Communication Data Support messages, inquiries, customer feedback
Marketing Preferences Newsletter opt-in, tracking consent

We do not knowingly collect data from children under 16 years of age.

3. Legal Basis for Processing

We process your data based on the following legal grounds:

Purpose Legal Basis
Order fulfillment Art. 6(1)(b) GDPR – Contractual necessity
Customer support Art. 6(1)(b) GDPR – Contractual necessity
Site security and analytics Art. 6(1)(f) GDPR – Legitimate interest
Marketing communications Art. 6(1)(a) GDPR – Consent
Legal compliance (tax, accounting) Art. 6(1)(c) GDPR – Legal obligation

4. Cookies and Tracking

We use cookies for basic functionality, analytics, and optional marketing (with consent).

You can manage your consent preferences through our cookie banner.

See our Cookie Policy for details.

5. Shopify as Processor

Our store is hosted by Shopify (Shopify International Ltd., Dublin, Ireland), which processes data on our behalf under a data processing agreement (Art. 28 GDPR).

Shopify may transfer data to non-EU countries, including the U.S., under Standard Contractual Clauses (SCCs).

See Shopify’s privacy terms: https://www.shopify.com/legal/privacy

6. Payment Processing

We use secure third-party providers (e.g., PayPal, Stripe) for payment processing.

We do not store any payment card data ourselves. Payments are handled by providers under their respective privacy and security policies (PCI-DSS).

7. Fulfillment and Shipping

We share order and delivery data with:

  • Production and fulfillment partners

  • Shipping and logistics providers

Only the data necessary to fulfill your order is shared, and our partners are contractually bound to handle your data securely.

8. Data Retention

We retain data as required by law and our operations:

Data Type Retention
Order/accounting 6–10 years (legal requirement)
Customer messages Up to 3 years after last contact
Marketing preferences Until consent withdrawn
Cookies Based on banner settings

9. Your Rights

As our business is located in the EU, users may exercise their GDPR rights where applicable:

  • Right of access (Art. 15)

  • Right to rectification (Art. 16)

  • Right to erasure (Art. 17)

  • Right to restrict processing (Art. 18)

  • Right to data portability (Art. 20)

  • Right to withdraw consent (Art. 7(3))

  • Right to object (Art. 21)

To exercise your rights, email: support@artolunastudio.com

We may need to verify your identity before responding.

10. Security

We implement:

  • SSL encryption

  • Access controls

  • Security monitoring & patching

We strive to protect your data but cannot guarantee 100% security.

11. International Transfers

Some of our processors are located outside the EEA. We ensure protection via:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions

  • Contractual safeguards

12. No Automated Profiling

We do not engage in automated decision-making that has legal or significant effects.

13. Marketing and Newsletter

We send marketing emails only with prior consent (Art. 6(1)(a)).

You can unsubscribe at any time via the unsubscribe link or by emailing us.

14. External Links

We are not responsible for the privacy practices of third-party websites linked from our site.

15. Changes to This Policy

We may update this privacy policy. The current version is always published with a date.

16. Contact

ART o LUNA is operated under:
Artem Tejvonen
Street: Birkhahnweg 26
City: Kirchheim unter Teck
Country: Germany
Zip Code: 73230
VAT: DE295433966
Email: support@artolunastudio.com
Phone: +1 (607) 247-0550

Feel free to Contact us with your questions.