Privacy Policy

Controller
MARISPYPER STUDIOS
Kottbusser Damm 81, 10967 Berlin, Germany
Email: design@marispyperstudios.com

This notice explains what personal data we process when you use marispyperstudios.com, for which purposes and on which legal bases, who receives your data, how long we store it, and what rights you have.

1) Data we process and purposes/legal bases

We process the following categories of data:

  • Website usage data (IP address, timestamp, URLs, referrer, user agent, basic device data) to deliver the site, maintain security, and compile aggregated statistics. Legal bases: Art. 6(1)(f) GDPR (legitimate interests: secure operation).

  • Order and account data (name, addresses, email, phone, ordered items, prices, order notes) to perform the contract and customer service. Legal bases: Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (tax/commercial retention).

  • Payment data (transaction ID, payment status, masked card info/PayPal/Klarna details) processed by our payment providers; we receive only what is necessary to reconcile payments. Legal bases: Art. 6(1)(b) GDPR; Art. 6(1)(f) GDPR (fraud prevention).

  • Shipping data (recipient, address, tracking number) to deliver orders. Legal basis: Art. 6(1)(b) GDPR.

  • Communication data (emails, contact form messages) to handle enquiries. Legal bases: Art. 6(1)(b) and/or Art. 6(1)(f) GDPR.

2) Cookies & consent

We use cookies and similar technologies. Non-essential cookies (analytics/marketing) are only set after your consent. You can withdraw or change your choice anytime via “Cookie settings” on the site. Browser controls let you delete cookies at any time. Legal bases: Art. 6(1)(a) GDPR (consent) for non-essential cookies; strictly necessary cookies rely on Art. 6(1)(f) GDPR.

Note: If we embed third-party content (e.g. Instagram, maps, web fonts), those providers may set their own cookies when you consent.

3) Recipients (processors and independent controllers)

  • Hosting & website platform: Squarespace Ireland Ltd. (and affiliates) – website hosting, content management, logs, security.

  • Payments: PayPal (Europe) S.à r.l. et Cie, S.C.A.; Klarna Bank AB (publ). These providers act as independent controllers for payment processing; we receive transaction data needed for fulfilment.

  • Carriers: DHL, UPS – shipping and tracking.

  • IT/service partners: Only where necessary for support, email delivery and security, bound by data processing agreements.

Links to provider privacy notices:
PayPal, Klarna, Squarespace, DHL, UPS (see providers’ websites).

4) International transfers

Some providers may process data outside the EU/EEA. Where required, transfers rely on Standard Contractual Clauses (SCCs) or other safeguards under Art. 46 GDPR. If no adequacy decision or SCCs apply in a specific case, we will ask for your explicit consent or use another Art. 49 GDPR derogation where permitted.

5) Retention

We store personal data only as long as necessary for the purposes above. Typical periods:

  • Contract and customer service data: until fulfilment plus statutory limitation (generally 3 years, end-of-year rule).

  • Tax/commercial records (e.g. invoices): retained according to German law (currently up to 8–10 years, depending on document type).

  • Security logs: short technical cycles unless needed for incident investigation.

6) Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on Art. 6(1)(f) GDPR. Where processing relies on consent, you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with the supervisory authority:
Berlin Commissioner for Data Protection and Freedom of Information,
Alt-Moabit 59–61, 10555 Berlin, Germany, mailbox@datenschutz-berlin.de.

7) Marketing emails

With your consent, we may send updates and offers. You can unsubscribe via the link in each email or by contacting us.

8) Children

Our website is not directed to children. We do not knowingly collect data from persons under 16 without consent of a holder of parental responsibility.

9) Updates

We may update this notice to reflect changes in our services or legal requirements. The current version is shown below.

Status: September 2025