Privacy Statement 

§ 1 General 

Your personal data (e.g. title, Name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of the German Data Protection Regulation and the Data Protection Regulation of the European Union (EU). The following regulations inform you not only about the processing purposes, recipients, legal bases, storage periods, but also about your rights and the persons responsible for your data processing. This data protections declaration only refers to our website. If you are forwarded to other sites via links on our pages, please inform yourself there about the respective handling of your data. 

§ 2 Data Processing for the Fulfilment of the Contract

(1) Your personal data, which you make available to us in the ordering process, are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without informing you of your address. With some payment procedures we need the necessary payment data, in order to pass them on to a payment service provider commissioned by us. The processing of your data entered during the ordering process is therefore carried out for the purpse of fulfilling the contract. If you send us an enquiry by e-mail, via a contact form etc. before concluding the contract, we process the data received in this way to carry out pre-contractual measures and answer, for example, your questions about our products. 

(2) The legal basis for this processing is § 6 1b) GDPR.

(3) Recipient categories are payment service providers, shipping service providers, hosting providers, if applicable merchandise management Systems, if applicable suppliers (drophs 

(4) We store the data required for the execution of the contract until expiry of the statutory warranty periods. We store the data required by commercial law and tax law for the legally specified periods, regularly ten years. The data processed for the implementation of pre-contractual measures will be deleted as soon as the measures have been carried out and a contract is clearly not concluded. 

§ 3 Comments 

(1) It is possible to write a comment. Your data (e.g. name/pseudonym, e-mail address, website) will then only be processed for the purpose of publishing your comment. 

(2) The legal basis for this processing is § 6 1f) GDPR. 

(3) Our legitimate interest is the public exchange of user opinions on certain topics and products. The publication serves, among other things, transparency and opinion-forming. Your interest in data protection is safeguarded because you can publish your comment under a pseudonym. 

(4) A certain storage period is not intended. You can request the deletion of your comment at any time. 

(5) You have the right to object at any time to data processing based on § 6 1f) GDPR and not for direct Advertising for reasons arising from your particular situation. In the case of direct marketing, however, you can object to the processing at any time without stating reasons. 

§ 4 Web Analysis with  Google Analytics 

(1) This website uses Google Analytics, a web Analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in execptional cases will the full IP address be transmitted to a Google werver in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. 

(2) The legal basis for this processing is § 6 1f) GDPR. 

(3) Our legitimate interest ist the statistical analysis of user behaviour for optimisation and marketing purposes. In order to protect your interest in data protection, this website uses Google Analytics with the extention "anonymizeIP()", so that the IP addresses are only processed in abbreviated form in order to exclude direct personal references. 

(4) Recipient categories are Google and its partner companies. 

(5) Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043) and is certified for the U.S. European Privacy Shield Agreement, which ensures compliance with EU data protection standards.

(6) The storage period is unlimited. 

(7) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plugin available und the following link: optout

§ 5 Information about Cookies 

(1) Technically necessary cookies are used on this Website. These are small text files that are stored in or by your internet browser on your computer system. These cookies make it possible, for example, to place several products in a shopping basket. 

(2) The legal basis for this processing is § 6 1f) GDPR. 

(3) Our legitimate interest is the funcionality of our website. The user data collected by technially necessary cookies are not used to create user profiles. This will safeguard your interest in data protection. 

(4) As a rule, the technically necessary cookies are deleted when you close your browser. Permanently stored cookies have a varying lifespan froma few minutes to several years. 

(5) If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. However, this may result in a functional limitation of our website. You can also delete permanently stored cookies at any time via your browser. 

§ 6 Newsletter 

(1) When registering for the newsletter, your e-mail address will be used for advertising purposes, i.e. within the scope of the newsletter we will inform you in particular about products from our range. For statistical purposes, we can evaluate which links are clicked in the newsletter. It is not recognizable to us which specific person clicked. You have expressly given the following consent separately or, if applicable, in the course of the ordering process: Subscribe to newsletter

(2) The legal basis for this processing is § 6 1a) GDPR.. 

(3) Recipient categories are, if applicable, newsletter dispatch providers.

(4) Your e-mail address will only be stored for the duration of the desired registration for the newsletter dispatch. 

(5) IYou can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: via an unsubscribe link in the newsletter; by e-mail 

§ 7 Your Rights as a Data Subject

If personal data are processed by you, you are affected in the sense of the GDPR and you have the following Rights against us as responsible: 

1. Right to Information You may request information about your personal data processed by us within the scope of § 15 GDPR. 

2. Right to Rectification If the information concerning you is (no longer) accurate, you may request correction in accordance with § 16 GDPR. If your data is incomplete, you may request that it be completed. 

3. Right to Deletion You may request the deletion of your personal data under the conditions set out in § 17 GDPR. 

4. Right to Limitation of Processing Within the framwork of the provisions of § 18 GDPR, you have the right to demand that the processing of data concerning you be restricted. 

5. Right to Data Transferability Pursuant to § 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request transmission to another responsible person. 

6. Right to Revoke the Declaration of Consent under Data Protection Regulation Pursuant to § 7 3 GDPR, you have the right to revoke your declaration of consent under data protection Regulation at any time. This does not affect the legality of the processing carried out on the basis of your consent until revoked.

7. Right of  Appeal to a Supervisory Authority If you are the opinion that the processing of your personal data is in breach of the GDPR, you have the right under § 77 GDPR to lodge a complaint with a supervisory authority (in particular in the Member State of your place of residence, workplace or place of presumed infringement).


Please also note your right of objection according to § 21 GDPR

a) General: justified abjection required. If the processing of your personal data takes place - to safeguard our overriding legitimate interest (legal basis according to § 6 1f) GDPR) or - in the public interest (legal basis according to § 6 1e) GDPR), you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiing based on the provisions of the GDPR. In the Event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, Rights and freedoms, or the processing serves the assertion, exercise or Defence of legal claims. 

b) If the personal data concerning you are processed for the Purpose of direct marketing, you have the right to object to such processing at any time and without stating reasons; this also applies to profiling in so far as it is connected with such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. 


Data Controller

Hendrik Wiermer

Dennlerstrasse 37

CH-8047 Zürich

hw@hendriks.gallery