Privacy Policy

Privacy Policy

Last updated: August 2026

1. Controller

Lea Köster – Layers.art
Ernst-Reuter-Ring 68, 50129 Bergheim, Germany
leakoester1@outlook.de

2. Overview

This Privacy Policy explains what personal data we collect, for what purposes, and on what legal basis when you visit layersart.com or place an order with us.

3. Data We Collect

  • Contact data (name, email address, postal address)
  • Order and transaction data
  • Usage data (pages visited, time spent, device type)
  • Log data (IP address, browser type, access times)
  • Communication data (messages sent via contact form or email)

4. Purposes and Legal Basis

  • Contract fulfilment – processing your order (Art. 6(1)(b) GDPR / UK GDPR)
  • Legal obligation – tax and accounting requirements (Art. 6(1)(c) GDPR / UK GDPR)
  • Legitimate interests – website security, fraud prevention, improving our services (Art. 6(1)(f) GDPR / UK GDPR)
  • Consent – marketing communications, cookies (Art. 6(1)(a) GDPR / UK GDPR)

5. International Data Transfers

We use Shopify Inc. (Canada/USA) to operate our online shop. Data may be transferred to servers outside the EU/EEA. For transfers to the USA, we rely on the EU-US Data Privacy Framework and Standard Contractual Clauses approved by the EU Commission. For UK customers, equivalent safeguards under UK GDPR apply.

For California residents: We do not sell your personal information. You have the right to know what data we collect and to request deletion under the CCPA.

6. Cookies

We use cookies to ensure the functionality of our shop, to analyse visitor behaviour, and – with your consent – for marketing purposes. You can manage your cookie preferences at any time via our cookie banner or your browser settings.

7. Data Retention

We retain personal data only as long as necessary for the purposes described above or as required by law (e.g. tax records for up to 10 years under German law). Log files are deleted after a maximum of 30 days.

8. Your Rights

Depending on your location, you have the following rights regarding your personal data:

  • Right of access – to obtain a copy of your data
  • Right to rectification – to correct inaccurate data
  • Right to erasure – to request deletion of your data
  • Right to restriction – to limit how we process your data
  • Right to data portability – to receive your data in a structured format
  • Right to object – to object to processing based on legitimate interests
  • Right to withdraw consent – at any time, without affecting prior processing

EU customers may also lodge a complaint with their national data protection authority. UK customers may contact the ICO (Information Commissioner’s Office) at ico.org.uk. California residents may exercise their CCPA rights by contacting us directly.

9. Contact

For any privacy-related requests, please contact us at: leakoester1@outlook.de

⚠️ Note: This Privacy Policy is a template and should be reviewed by a qualified legal professional, particularly regarding CCPA compliance for US customers.