Privacy

1. Controller

2. Visiting the website

Technically necessary connection and log data is processed when the website is accessed. This may include the IP address, time, requested address, transferred data volume, browser information and error data. Processing supports secure and reliable delivery and troubleshooting under Article 6(1)(f) GDPR.

We use contractually bound IT providers for hosting and technical delivery. Log data is retained only for as long as required for operation, security and specific incident handling.

3. Contact

If you contact us through the artist or buyer form, by email or telephone, we process the details you provide to handle your enquiry. Public forms collect the name, email address, enquiry type, message and optional project details. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual matters, and otherwise our legitimate interest in replying under Article 6(1)(f) GDPR.

Enquiry data is deleted when no longer required unless statutory retention duties or legitimate documentation needs apply. Public enquiries are shown only inside the protected Lentiart administration. Confidential production files are not collected through these forms.

4. Protected artist studio

The artist studio is available only to personally invited users. Account identifier, email address, access times and assignment to the relevant studio are processed for sign-in and account allocation. Submissions, messages, approvals and artwork files are processed to prepare and carry out the collaboration. High-resolution production files remain in protected storage and are not made public.

5. Cookies, analytics and shop

On public pages we use Plausible Analytics to understand pageviews and website use in aggregate. Plausible does not use cookies or persistent identifiers. It receives the public page visited, the referral source, and technical browser and device information. The IP address and full user agent are processed to calculate daily visitor counts but are not stored permanently. Protected artist and administration pages are not tracked. We rely on our legitimate interest in improving the website under Article 6(1)(f) GDPR. See Plausible's data policy for details. Technically necessary functions may use session information, particularly for sign-in to the artist studio. The public shop and Shopify checkout are not yet active. This policy will be updated before sales begin.

6. DIZON partner links, referral attribution and commission

Clearly labelled external links on Lentiart partner pages lead to DIZON. They contain a partner identifier, partner code and campaign parameters, but no names, email addresses or other personal details in the URL. When a link is opened, DIZON receives these parameters and processes the subsequent visit under its own responsibility. The DIZON privacy policy is available before registration and purchase.

Technically necessary attribution may be used only to assign the correct partner and discount. Non-essential marketing tracking or profiling is loaded only after valid consent. Lentiart does not join advertising-platform data with DIZON customer data without a separately assessed legal basis and documentation.

For settlement and verification, Lentiart generally receives only aggregated or pseudonymised information about partner attribution, purchase status, net revenue after discount, and provisional, approved or cancelled commission. Artwork images and unnecessary personal customer data are not intended for this purpose. Processing supports performance and verification of the partner agreement and the prevention of incorrect or abusive attribution. Retention follows statutory evidence and record-keeping duties and the period in which settlement disputes may arise.

7. Recipients and international transfers

Data is shared only with parties that need it for hosting, communication, sign-in or the agreed project work. Where providers process data outside the European Economic Area, legally recognised safeguards such as adequacy decisions or standard contractual clauses are used.

8. Your rights

Subject to the legal requirements, you have rights of access, correction, erasure, restriction, data portability and objection. Consent may be withdrawn for the future at any time. Requests can be sent to info@lentiprint.de. You may also complain to a data protection supervisory authority, in particular the Berlin Commissioner for Data Protection and Freedom of Information.

Invited artists can view their stored studio information in the protected privacy area and submit a formal request there.

9. Changes

We update this policy when functions, providers or legal requirements change. A revised version will be prepared before the shop launches.