Controller
The controller is Virtuma UG (haftungsbeschränkt), Petersberg 12, 54457 Wincheringen, Germany. Contact: info@maklerschilder.com, phone: +49 6501 960 6930.
Transparent data protection
Privacy policy
This page explains which data is processed in the shop and why it is needed.
Data we process
When you access the shop, our server processes technically required access data, in particular the IP address, time, requested page, amount of data transferred, referrer and browser and operating-system information. This processing keeps the service secure and stable.
For the cart, enquiries, orders, production, delivery, invoicing and customer communication, we process in particular company and contact details, billing and shipping addresses, order items, configurations, payment status, messages and uploaded artwork.
For customer accounts, we additionally process protected login credentials, saved addresses, security and two-factor status and order history. Artwork content is used solely for checking, production, order handling and legitimate evidence purposes.
Purposes and legal bases
We process data to take steps before entering into and to perform a contract under Article 6(1)(b) GDPR, to comply with tax and commercial-law duties under Article 6(1)(c) GDPR and on the basis of our legitimate interests under Article 6(1)(f) GDPR. These interests include IT security, fraud prevention, efficient operations and the establishment, exercise or defence of legal claims.
Where we request consent for optional processing, the legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.
Payments, shipping and other recipients
We disclose personal data only where necessary to process an order, to meet a legal obligation or where another legal basis applies. Recipients may include hosting and email providers, production partners, carriers, tax and payment service providers and technical processors.
If an online payment method is offered and selected at checkout, the data required for payment is sent to the named provider, for example Mollie or PayPal. The participating bank processes payment data for bank transfers. The provider’s own privacy information also applies.
Processing outside the European Economic Area takes place only where required for a service and where the statutory requirements are met, for example by an adequacy decision or appropriate safeguards.
Cookies and local storage
The shop uses technically necessary cookies and local storage for the session, cart, login, CSRF protection, language, delivery country and cookie selection. These are required for the shop functions you request.
Optional analytics or marketing services are activated only after prior consent. You can change your selection at any time under “Cookies & settings” in the footer.
Retention
We retain personal data only for as long as the relevant purpose continues. Contract, booking and invoice data is retained for the statutory periods under German commercial and tax law. Account data remains until the account is deleted unless retention or evidence duties require otherwise.
Artwork and order-related communications are stored for production, complaint handling and evidence and are then deleted when no contractual or statutory reason requires continued storage. Technical logs are deleted or anonymised when no longer required for security and error analysis.
Data security
We use appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. Data transferred between your browser and the shop is encrypted using HTTPS.
Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction and data portability. You may also object to processing on grounds relating to your particular situation and withdraw consent with effect for the future.
To exercise your rights, email info@maklerschilder.com. You may also lodge a complaint with the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany, email: poststelle@datenschutz.rlp.de, or another competent supervisory authority.
- Access and a copy under Article 15 GDPR
- Rectification under Article 16 GDPR
- Erasure or restriction under Articles 17 and 18 GDPR
- Data portability under Article 20 GDPR
- Objection under Article 21 GDPR
Version
September 2026. We update this privacy policy if the shop or legal requirements change.
Google Analytics, Tag Manager and conversion measurement
With your consent, we use Google Analytics 4 and Google Tag Manager to analyse shop usage, purchases and product enquiries. These services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager manages the configured tags.
No Google tracking tags load before consent. Analytics and marketing choices are handled separately. Usage data, technical device information, an online identifier and product and order values may be processed. Our integration does not send names, email addresses, delivery addresses, artwork files or free-text customer notes.
Processing is based on your consent under Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG. Processing by Google companies in the USA is possible. The links below explain Google’s processing and transfer mechanisms.
You can change your choice and withdraw consent for the future at any time using Cookie settings in the footer. Browsing history from before consent is not sent retrospectively.
Review request after a purchase
We use your email address, order language and purchased products for a single review request after dispatch. The email delivery and any opt-out are recorded. You can opt out at checkout or later using the unsubscribe link, without affecting your order. We do not send order data to Google; the link only takes you to Google when you click it.
Cart and unfinished checkout
We store cart contents and product configurations, the shop and language, available contact details and contact and delivery details entered during checkout, including before an order is completed. We also record key steps, input problems and payment errors reported by the payment provider to enable purchases, handle customer enquiries and resolve technical problems. Only authorised staff can access this information. It is deleted from the activity history after 30 days of inactivity. No additional tracking cookies, fingerprints or payment credentials are stored for this purpose. An abandoned cart triggers neither an order nor a marketing email. Completed orders are subject to their separate retention periods.