Privacy Policy
Information on the processing of your personal data
Updated: 11.07.2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
2. General Information on Data Processing
The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of legal provisions (GDPR, TMG). In this privacy policy, we inform you about the most important aspects of data processing within the scope of our website.
We treat your personal data confidentially and in accordance with legal data protection regulations as well as this privacy policy.
3. Data Collection on This Website
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
| Data Type | Purpose | Legal Basis |
|---|---|---|
| IP address | Security, abuse detection | Art. 6 para. 1 lit. f GDPR |
| Browser type & version | Compatibility, error analysis | Art. 6 para. 1 lit. f GDPR |
| Operating system | Technical optimization | Art. 6 para. 1 lit. f GDPR |
| Date & time | Logging, security | Art. 6 para. 1 lit. f GDPR |
This data is not combined with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website.
4. Registration & User Account
You can register on our website to use additional functions. We use the data entered for this purpose only for the use of the respective offer or service.
Data Collected During Registration:
- Name: For personalization and addressing you
- Email address: For account management, notifications, password reset
- Password: Stored encrypted (bcrypt hash)
- Location: Optional, for display in your listings
- Profile picture: Optional, for displaying your profile
Legal basis: Processing is based on Art. 6 para. 1 lit. b GDPR (performance of a contract) as well as Art. 6 para. 1 lit. a GDPR (consent for optional information).
Retention period: The data is stored as long as your user account exists. After account deletion, the data will be deleted within 30 days unless there are statutory retention obligations.
5. Listings & Images
When you post listings, the following data is collected and publicly displayed:
- Listing title & description: Publicly visible
- Price & category: Publicly visible
- Images: Publicly visible, stored on our server
- Location: From your profile, publicly visible
- Contact details: Only visible to logged-in users
Important: Do not publish sensitive personal data in listing texts or images (e.g., ID documents, addresses, phone numbers). You are responsible for the content of your listings.
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract) - Processing is necessary to provide the listing service.
6. Cookies & Sessions
Our website uses only technically necessary cookies and session data. These are required for the website to function and cannot be disabled.
| Cookie | Purpose | Storage Duration |
|---|---|---|
| PHPSESSID | Session management, login status | Session |
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest) - Technically necessary cookies for providing website functions.
We do not use tracking cookies, analytics tools like Google Analytics, or advertising cookies from third parties.
7. Your Rights
You have the following rights at any time regarding your personal data:
- Right of access (Art. 15 GDPR): You can request information about your stored data.
- Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
- Right to erasure (Art. 17 GDPR): You can request the deletion of your data.
- Right to restriction (Art. 18 GDPR): You can request the restriction of processing.
- Data portability (Art. 20 GDPR): You can receive your data in a machine-readable format.
- Right to object (Art. 21 GDPR): You can object to processing.
- Right of withdrawal (Art. 7 para. 3 GDPR): You can withdraw given consent at any time.
To exercise your rights, contact us at: kontakt@kunstmaler.online
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The competent authority is the State Data Protection Commissioner of your state of residence.
8. Data Retention Period
We store personal data only as long as necessary for the respective purposes:
| Data Type | Retention Period |
|---|---|
| User account data | Until account deletion + 30 days |
| Listings | Until deletion by user or 2 years after last login |
| Server logs | 7 days |
| Contact form | 6 months after completion of the request |
9. Data Security
We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security measures are continuously improved in line with technological developments.
- SSL encryption: All data transmissions are encrypted (HTTPS)
- Password hashing: Passwords are stored encrypted with bcrypt
- Access control: Restricted access to server and database
- Regular backups: Protection against data loss