Legal

Data Privacy

1. Controller and Overview

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is: Sales Art & Science – Enno Lückel
Toergartenstr. 11
35619 Braunfels
Germany
Email: hello at sales-art-and-science . com

2. Your Rights as a Data Subject

You have the following rights with regard to the personal data concerning you:

Right of access (Art. 15 GDPR) — confirmation of whether and which data we process about you.
Right to rectification (Art. 16 GDPR) — correction of inaccurate data.
Right to erasure (Art. 17 GDPR) — deletion of your data, subject to statutory retention obligations.
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR).
Right to object to processing (Art. 21 GDPR), in particular to processing based on legitimate interests or for direct marketing.
Right to withdraw consent at any time with future effect (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is: [Your competent state data protection authority, e.g. Landesbeauftragter fÃ¼r Datenschutz — depends on the German state (Bundesland) you are based in].

3. Hosting and Server Log Files

This website is hosted by: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany

Every time this website is accessed, the hosting provider’s server automatically collects and stores information in server log files, which your browser transmits automatically. This typically includes: browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request, and IP address.

This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR (legitimate interest), to ensure a technically error-free presentation and the security of the website. It is generally deleted automatically after a short period, typically within a few days to a few weeks.

Our hosting provider also offers a built-in analytics feature (IONOS SiteAnalytics), which is active by default. It does not use cookies, and IP addresses are anonymized immediately upon receipt and used only to approximate visitor location; no data enabling identification of individual visitors is stored, and no data is shared with third parties. Because it does not use cookies or other local storage, this processing does not require consent under § 25 TDDDG and is based on Art. 6(1)(f) GDPR (legitimate interest in understanding site usage and improving the website).

4. Cookies and Local Storage (§ 25 TDDDG)

This website uses cookies and similar technologies (local storage). Where these are not strictly necessary for operating the site, § 25(1) TDDDG requires your prior consent before they are set — this applies regardless of whether the data involved is personal in the GDPR sense.

We obtain this consent through a consent management tool: CCM19

You can withdraw or adjust your consent at any time via the consent settings, typically accessible through a link in the footer of this website.

5. Contact Form

If you contact us via the contact form on this website, the information you provide — including your name, email address, and message, will be stored by us in order to process your inquiry and in case of follow-up questions. We do not share this data without your consent.

The legal basis for this processing is Art. 6(1)(b) GDPR (processing necessary for pre-contractual measures or performance of a contract), or, where no contractual relationship is intended, Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries directed to us).

We retain this data for as long as necessary to process your request, plus any applicable statutory retention periods, and delete it once it is no longer needed.

6. Newsletter

If you subscribe to our newsletter, we process the email address you provide (and, if requested, your name) to send you the newsletter. We use the double opt-in procedure: after signing up, you will receive a confirmation email, and the newsletter is only sent once you confirm your subscription. We log the time of registration and confirmation, and your IP address at the time of both actions, as evidence of consent.

Our newsletter is sent using the following service provider, which processes data on our behalf as our processor under Art. 28 GDPR: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”)

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link included in every newsletter email, or by contacting us directly. Unsubscribing automatically withdraws your consent for future emails.

7. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies that enable an analysis of your use of this website. The information generated is generally transmitted to a Google server and stored there.

Google Analytics on this site is configured with IP anonymization active, so your IP address is shortened by Google beforehand within Member States of the EU or the EEA; only in exceptional cases is the full IP address transmitted to a Google server in the US and shortened there.

This processing only takes place if you have given your consent via our consent management tool (see Section 4). The legal basis is Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can withdraw your consent at any time with future effect.

[Confirm you have signed Google’s standard data processing terms (Google Ads Data Processing Terms) for Analytics, and insert your Google Analytics property/measurement ID if you want to name it here.]

8. Embedded YouTube and Vimeo Videos

We embed videos from YouTube (operated by Google Ireland Limited) and/or Vimeo (operated by Vimeo.com, Inc., New York, USA) on this website. When you play an embedded video, a connection to the respective provider’s servers is established, and the provider may collect data about your use, including your IP address, even if you do not have an account with that provider.

We use a privacy-enhanced or two-click embedding method where possible, so that no connection to YouTube’s or Vimeo’s servers is established, and no data is transmitted, until you actively click to play the video. Loading and playing an embedded video therefore only happens with your active engagement, and — where our consent tool covers embeds — after your consent.

The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG). Both providers are certified under the EU-U.S. Data Privacy Framework; see the transfer note in Section 7 above, which applies equally here.

9. Google Fonts

This website uses web fonts for consistent typography.

The fonts used on this site are hosted locally on our own server. No connection to Google’s servers is established for this purpose, no data is transmitted to Google, and no consent is required for this specific feature.

10. Social Media Buttons

This website may display buttons or widgets linking to our social media presences (e.g. Instagram, Facebook, X/Twitter, LinkedIn). Where these are implemented as a two-click or “Shariff”-style solution, no data is transmitted to the respective platform until you actively click through to it, and no consent is required for the button’s mere presence. Where a plugin instead embeds live, functional widgets from these platforms directly (e.g. a live Instagram feed or a Like-button that loads on page view), that establishes a connection to the platform’s servers on every page load and does require your prior consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), with a cross-border transfer note as in Section 7.

11. International Data Transfers

Where personal data is transferred to service providers located outside the European Economic Area (EEA), in particular the United States (see Sections 6 to 10 above), this is based on an applicable adequacy mechanism under Art. 44 et seq. GDPR — currently the EU-U.S. Data Privacy Framework for self-certified providers such as Google, or Standard Contractual Clauses (Art. 46(2)(c) GDPR) where a provider is not DPF-certified. We only enable such transfers with your consent, obtained through our consent management tool.

12. Data Retention

We only retain personal data for as long as necessary for the purpose it was collected for, or as required by statutory retention obligations (e.g. under German commercial and tax law, typically six or ten years for business correspondence and accounting records). Data collected on the basis of consent is deleted once you withdraw that consent, unless a statutory retention obligation requires otherwise.

13. Automated Decision-Making

We do not use fully automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.

14. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes to our data processing practices or applicable law. The current version, as published on this page, applies.