Responsible entity:
Laura Wnuk
Matternstr. 7
10249 Berlin
Germany
Below is an overview of how personal data is collected and processed when using this website.

Hosting Provider:
This website is hosted by Hostinger, whose registered office is located at :
61 Lordou Vironos Str.,
6023 Larnaca,
Zypern
When you visit Laura Wnuk’s website, certain data (such as your IP address) is automatically collected and stored in log files by my hosting provider for security and technical maintenance purposes. The legal basis for this data processing is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website).

1. General Information on Data Protection
The processing of personal data complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Unless stated otherwise, providing personal data is neither legally nor contractually required and is not mandatory for making a purchase. However, not providing certain data may limit website functionality or the ability to process orders.
“Personal data” refers to any information that relates to an identified or identifiable individual.

2. Data Collection and Processing
Legal Bases for Data Processing
Laura Wnuk processes personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Depending on the purpose, the processing is based on the following legal grounds:
• Communication & Inquiries: If you contact Laura Wnuk via email or contact form, she processes your data under Art. 6(1)(b) GDPR (necessary for contract initiation) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
• Orders & Payments: To fulfill purchase contracts, Laura Wnuk processes customer information (name, address, payment details) under Art. 6(1)(b) GDPR (contract execution).
• Shipping & Delivery: Laura Wnuk shares necessary data (name, address) with shipping providers based on Art. 6(1)(b) GDPR (contract execution).
• Marketing & Newsletter: If you subscribe to the newsletter, your data is processed under Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time.
• Website Security & Analytics: Laura Wnuk uses log files and analytics tools under Art. 6(1)(f) GDPR (legitimate interest in website security and improvement).

You can browse this website without submitting personal data. However, each time you access it, certain data is automatically transmitted by your internet browser and stored in server log files.
This includes:
•  Name of the accessed page
• Date and time of the request
• IP address (anonymized before storage)
• Amount of data transferred
• Requesting provider
The IP address is anonymized before storage to prevent direct identification.
This data processing is carried out under Article 6(1)(f) GDPR, based on Laura Wnuk’s legitimate interest in ensuring the website’s smooth operation and security. The collected data is used exclusively for security purposes, such as detecting and preventing fraudulent activities or cyberattacks.
Personal data is only shared with external service providers when strictly necessary.

3. Contact & Communication
Contact via Email:
If you contact Laura Wnuk via email, the personal data you provide (e.g., name, email address, message) will be used solely for processing your request.
• If the request concerns a potential purchase or an existing order, processing is based on Article 6(1)(b) GDPR (pre-contractual or contractual necessity).
• For all other inquiries, data processing is carried out under Article 6(1)(f) GDPR, as responding to inquiries is a legitimate business interest. You have the right to object to this processing at any time for reasons related to your particular situation.
Retention period:
• Data will be stored for as long as necessary to process your request.
• Once the inquiry is resolved, your data will be deleted, unless further processing is required for legal reasons or you have consented to extended use.
• Emails exchanged will be stored for a maximum period of 6 months after the last interaction unless further retention is legally required.

4. Contact Form
When using the website’s contact form, the following data is collected:
• Name
• Email address
• Message text
This data is strictly used to respond to your inquiry.
• Processing is carried out under Article 6(1)(b) GDPR if the inquiry concerns a potential or existing purchase.
• Processing is carried out under Article 6(1)(f) GDPR if the inquiry is unrelated to a transaction, based on the legitimate interest in responding to customer messages.
As with email inquiries, you may object to processing based on Article 6(1)(f) GDPR at any time if there are reasons specific to your situation.
Retention period:
• The data will be deleted after 6 months, unless legally required otherwise.

5. Updates to this Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in legal requirements or business practices. Any modifications will be posted on this page with the updated date.
For any questions regarding data protection, please contact:
laurawnuk.studio [ @ ] gmail.com 

Customer Account
If you create a customer account, your personal data will be collected as indicated during registration. The purpose of this processing is to enhance your shopping experience and facilitate order processing.
This processing occurs under Article 6(1)(a) GDPR, based on your explicit consent. You may withdraw your consent at any time by contacting me. Withdrawal does not affect the legality of the processing carried out before withdrawal. Upon withdrawal, your customer account will be deleted.

6 – Collection, Processing, and Transfer of Personal Data in Orders
Only strictly necessary data is shared with external service providers.
When you place an order, Laura Wnuk collects and processes your personal data solely for:
• Processing and fulfilling your order
• Responding to any inquiries related to your purchase
Providing this data is mandatory for completing the contract. Without it, a purchase cannot be made. Processing is based on Article 6(1)(b) GDPR, as it is necessary for contract performance.
Your data may be shared with:
• Shipping companies (for delivery)
• Payment providers (for transaction processing)
• Service providers (for order handling)
• IT service providers (for hosting and platform management)
These service providers are contractually required to process data in compliance with GDPR and are prohibited from using it for other purposes. All data transfers comply strictly with legal requirements and are limited to what is necessary.