Controller
The controller is Virtuma UG (haftungsbeschränkt), Petersberg 12, 54457 Wincheringen, Germany. Contact: info@maklerschilder.com, phone: +49 6501 960 6930.
Transparent data protection
Privacy policy
This page explains which data is processed in the shop and why it is needed.
Data we process
When you access the shop, our server processes technically required access data, in particular the IP address, time, requested page, amount of data transferred, referrer and browser and operating-system information. This processing keeps the service secure and stable.
For the cart, enquiries, orders, production, delivery, invoicing and customer communication, we process in particular company and contact details, billing and shipping addresses, order items, configurations, payment status, messages and uploaded artwork.
For customer accounts, we additionally process protected login credentials, saved addresses, security and two-factor status and order history. Artwork content is used solely for checking, production, order handling and legitimate evidence purposes.
Purposes and legal bases
We process data to take steps before entering into and to perform a contract under Article 6(1)(b) GDPR, to comply with tax and commercial-law duties under Article 6(1)(c) GDPR and on the basis of our legitimate interests under Article 6(1)(f) GDPR. These interests include IT security, fraud prevention, efficient operations and the establishment, exercise or defence of legal claims.
Where we request consent for optional processing, the legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.
Payments, shipping and other recipients
We disclose personal data only where necessary to process an order, to meet a legal obligation or where another legal basis applies. Recipients may include hosting and email providers, production partners, carriers, tax and payment service providers and technical processors.
If an online payment method is offered and selected at checkout, the data required for payment is sent to the named provider, for example Mollie or PayPal. The participating bank processes payment data for bank transfers. The provider’s own privacy information also applies.
Processing outside the European Economic Area takes place only where required for a service and where the statutory requirements are met, for example by an adequacy decision or appropriate safeguards.
Cookies and local storage
The shop uses technically necessary cookies and local storage for the session, cart, login, CSRF protection, language, delivery country and cookie selection. These are required for the shop functions you request.
Optional analytics or marketing services are activated only after prior consent. You can change your selection at any time under “Cookies & settings” in the footer.
Retention
We retain personal data only for as long as the relevant purpose continues. Contract, booking and invoice data is retained for the statutory periods under German commercial and tax law. Account data remains until the account is deleted unless retention or evidence duties require otherwise.
Artwork and order-related communications are stored for production, complaint handling and evidence and are then deleted when no contractual or statutory reason requires continued storage. Technical logs are deleted or anonymised when no longer required for security and error analysis.
Data security
We use appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. Data transferred between your browser and the shop is encrypted using HTTPS.
Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction and data portability. You may also object to processing on grounds relating to your particular situation and withdraw consent with effect for the future.
To exercise your rights, email info@maklerschilder.com. You may also lodge a complaint with the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany, email: poststelle@datenschutz.rlp.de, or another competent supervisory authority.
- Access and a copy under Article 15 GDPR
- Rectification under Article 16 GDPR
- Erasure or restriction under Articles 17 and 18 GDPR
- Data portability under Article 20 GDPR
- Objection under Article 21 GDPR
Version
September 2026. We update this privacy policy if the shop or legal requirements change.