Privacy policy
Privacy Policy
Effective: August 5, 2026
We appreciate your interest in our online store. Protecting your privacy is important to us. This policy explains how we process your personal data.
1. Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
The Artmere UG (haftungsbeschränkt)
trading as ARTMERE
Cotheniusstrasse 19
10407 Berlin
Germany
Represented by: Moritz Danner, Managing Director
Email: hello@theartmere.com
Telephone: +49 163 1389600
Website: www.theartmere.com
2. General information about data processing
We process personal data only to the extent necessary to provide a functional website, our content and our services. We obtain consent where required. In other cases, processing is permitted because it is necessary for a contract, a legal obligation or a legitimate interest.
3. Legal bases
- Article 6(1)(a) GDPR, consent: for processing that requires your consent, such as analytics and marketing cookies or newsletters.
- Article 6(1)(b) GDPR, contract: where processing is necessary to enter into or perform a contract, such as order processing, payment and delivery.
- Article 6(1)(c) GDPR, legal obligation: where processing is required by law, such as tax retention duties or duties connected with statutory withdrawal rights.
- Article 6(1)(f) GDPR, legitimate interests: where processing is necessary for our or a third party's legitimate interests and your interests or fundamental rights do not override those interests, such as fraud prevention and website security.
4. Hosting and technical operation
This website is operated through the ecommerce platform Shopify. The service provider is Shopify International Limited, c/o Intertrust Ireland, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.
When you access our website, technical server data may be processed, including your IP address, access date and time, the page and URL requested, referrer URL, browser, operating system and the amount of data transferred.
The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in providing the website securely and efficiently. Shopify may process data in countries outside the European Economic Area. Where required, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses. More information is available in Shopify's Privacy Policy.
5. Orders and contract performance
When you place an order, we process data required to perform the contract, including:
- first and last name;
- email address;
- billing and delivery address;
- telephone number for delivery coordination;
- payment information, which is transmitted directly to the payment service provider;
- order details such as products, sizes and prices.
The legal basis is Article 6(1)(b) GDPR. We retain order data for applicable statutory retention periods, generally six or ten years under German commercial and tax law.
6. Payment service providers
Payment data is transmitted to the payment provider selected at checkout. Depending on your selection, providers may include:
- PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg: Privacy Policy
- Klarna, Klarna Bank AB, Sweden: Privacy Policy
- Shopify Payments / Stripe, Stripe Payments Europe, Ltd., Ireland: Privacy Policy
Other checkout options may include Apple Pay, Google Pay, Mastercard, Visa, American Express, Maestro, UnionPay and Shop Pay. The legal basis is Article 6(1)(b) GDPR.
7. Cookies and consent
Our website uses cookies and similar technologies. Cookies required for the shopping cart, session management and other essential functions are processed on the basis of Article 6(1)(f) GDPR and Section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Analytics and marketing technologies are activated only with your consent. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can change or withdraw your consent at any time through the Cookie Settings link in the footer.
8. Analytics and advertising
8.1 Google Analytics 4
With your consent, we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how our website is used. IP anonymisation is enabled. The legal basis is Article 6(1)(a) GDPR. Transfers to the United States are based on the EU-US Data Privacy Framework where applicable. More information: Google Privacy Policy.
8.2 Meta Pixel
With your consent, we use the Meta Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, to measure activity after a person visits our website from a Meta advertisement. The legal basis is Article 6(1)(a) GDPR. Transfers to the United States are based on the EU-US Data Privacy Framework where applicable. More information: Meta Privacy Policy.
9. Email marketing with Omnisend
We use Omnisend UAB, Lithuania, for newsletters and transactional emails. Newsletter subscriptions use a double opt-in process. The legal basis for marketing emails is Article 6(1)(a) GDPR. You may unsubscribe at any time through the link in an email. More information: Omnisend Privacy Policy.
10. Spam protection with hCaptcha
We use hCaptcha from Intuition Machines, Inc., United States, to protect forms against automated abuse. Data is transmitted to hCaptcha when a protected form is used so that the service can assess whether the input was made by a person. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in protecting the website against spam and abuse. More information: hCaptcha Privacy Policy.
11. Online withdrawal form
If you use the online withdrawal form, we process the information you enter to identify the relevant contract, handle your declaration and communicate with you. This includes your name, email address, order number or another contract identifier, and any optional free-text information you provide.
The processing is necessary for pre-contractual or contractual measures and for compliance with our legal obligations relating to withdrawal rights under Article 6(1)(b) and (c) GDPR. We process technical security data on the basis of our legitimate interest in preventing abuse and fraud under Article 6(1)(f) GDPR.
The form is provided through the technical infrastructure of our Shopify store. More information about processing by Shopify is available in section 4 of this Privacy Policy.
12. SSL/TLS encryption
This website uses SSL/TLS encryption to protect confidential content in transit. An encrypted connection is indicated by the https address and the lock symbol in your browser.
13. Your rights
Subject to the applicable legal requirements, you may exercise the following rights:
- access under Article 15 GDPR;
- rectification under Article 16 GDPR;
- erasure under Article 17 GDPR;
- restriction of processing under Article 18 GDPR;
- data portability under Article 20 GDPR;
- objection under Article 21 GDPR where processing is based on Article 6(1)(f) GDPR;
- withdrawal of consent at any time with effect for the future under Article 7(3) GDPR.
If the United Kingdom GDPR applies to your personal data, you have equivalent rights under that framework, subject to its conditions and exceptions. These include the rights to be informed, access, rectification, erasure, restriction, data portability and objection, and rights relating to certain automated decisions.
If Canadian privacy law applies to your personal information, you may request access to and correction of your personal information and may withdraw consent where processing is based on consent, subject to legal and contractual restrictions. Depending on your province, additional rights may apply. We will verify your identity before completing a request.
To exercise your rights, contact hello@theartmere.com.
14. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority under Article 77 GDPR. The supervisory authority responsible for us is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
Germany
www.datenschutz-berlin.de
If you are in the United Kingdom, you may complain to the Information Commissioner's Office. Information about complaints is available at ico.org.uk/make-a-complaint.
If you are in Canada, you may complain to the Office of the Privacy Commissioner of Canada or the competent provincial privacy authority. Information is available at priv.gc.ca/en/report-a-concern.
15. Retention periods
We retain personal data only for as long as necessary for the stated purpose or as required by law. Typical retention periods include:
- order data: generally ten years where required by German tax law;
- server logs: thirty days;
- newsletter data: until consent is withdrawn;
- Google Analytics data: fourteen months;
- withdrawal correspondence: for as long as needed to handle the request, comply with statutory retention duties, or establish, exercise or defend legal claims.
16. International data transfers
Where personal data is transferred outside the European Union or European Economic Area, we use a valid transfer mechanism under Articles 44 et seq. GDPR, such as an adequacy decision, the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. Where the United Kingdom GDPR applies, we use a transfer mechanism recognized under that framework, such as an adequacy regulation, the United Kingdom International Data Transfer Agreement or the United Kingdom Addendum to the European Commission's Standard Contractual Clauses, as applicable. This may apply to Google LLC, Meta Platforms, Inc., Shopify Inc. and Intuition Machines, Inc., depending on the service used.
Personal information relating to Canadian customers may be processed outside Canada, including in Germany, the European Union and the United States. It may therefore be accessible to courts, law enforcement and national security authorities under the laws of those jurisdictions. We use contractual and organizational measures appropriate to the sensitivity of the information.
17. Changes to this Privacy Policy
We may update this Privacy Policy to reflect legal requirements or changes to our services. The version published on this website applies to your next visit.
This Privacy Policy was last updated on August 5, 2026.