Privacy Policy

Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is: Anett Alexandra Bulano Ringstraße 173 04209 Leipzig Germany Email: hello@anettbulano.art I process personal data in accordance with the EU General Data Protection Regulation (GDPR), applicable German data-protection laws and other applicable legal requirements.

2. General Information on Data Processing

Personal data is processed on this website only where necessary for the operation of the website, communication with visitors, handling enquiries and orders, fulfilment of contractual obligations, processing payments and deliveries, compliance with legal obligations, and protection of the website against misuse and attacks. Depending on the purpose, processing is based in particular on Article 6(1)(a), (b), (c) or (f) GDPR.

3. Website Access and Server Log Data

When you visit this website, technical information may be processed automatically by the hosting infrastructure. Depending on the technical configuration, this may include:
  • IP address
  • date and time of access
  • requested page or resource
  • browser type and version
  • operating system
  • referring website (referrer URL)
  • technical access and security information
This data is processed primarily to ensure the secure, stable and technically reliable operation of the website and to detect and prevent attacks, misuse and technical problems. The website is hosted by Hostinger. In connection with hosting and infrastructure services, personal and technical data may be processed. Where Hostinger uses service providers or subprocessors outside the EU/EEA, any transfer is carried out in accordance with applicable data-protection requirements and appropriate safeguards.

4. Cookies and Consent Management

This website uses cookies and similar technologies where they are technically necessary or where they are used for additional functions. Complianz is used to manage and document consent preferences. Where processing requires consent, the relevant processing takes place only after consent has been given. Consent can be changed or withdrawn through the available consent-management settings. Technically necessary cookies may be used where required for the operation, security or basic functionality of the website.

5. Contact by Email and Contact Forms

If you contact me by email or through a contact form, the information you provide will be processed for the purpose of handling your enquiry and communicating with you. This may include:
  • name
  • email address
  • contact details
  • the content of your message
  • any other information you voluntarily provide
The legal basis is generally Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures. In other cases, processing may be based on Article 6(1)(f) GDPR where there is a legitimate interest in responding to your enquiry. The data will be deleted once it is no longer required for the relevant purpose and provided that no statutory retention obligations prevent deletion.

6. Online Shop and Orders

Where this website provides an online shop, personal data necessary for processing and fulfilling orders is processed. This may include:
  • first and last name
  • billing and delivery address
  • email address
  • telephone number, where provided
  • order information
  • purchased artworks, products or formats
  • payment-related information
  • shipping information
  • communication relating to the order
Processing is carried out primarily for the performance of the purchase contract pursuant to Article 6(1)(b) GDPR and for compliance with legal obligations pursuant to Article 6(1)(c) GDPR. Where guest checkout is available, no customer account is required to place an order.

7. WooCommerce

WooCommerce may be used to provide the online shop and process orders. WooCommerce processes the information required for order processing in accordance with the configuration of the shop. Processing takes place in particular for the performance of purchase contracts, management of orders and compliance with legal obligations.

8. Germanized for WooCommerce

Where Germanized for WooCommerce is used, the plugin supports the implementation of legal requirements applicable to online shops in Germany. This may include functions relating to consumer information, withdrawal procedures and legally relevant processes during checkout. Any personal data processed through these functions is processed only for the relevant contractual, legal or legitimate purposes.

9. Withdrawal

Where this website provides an electronic function for exercising the statutory right of withdrawal, the following information may be processed:
  • order number
  • email address
  • information concerning the relevant order
  • any additional information required to process the withdrawal
Processing takes place for the purpose of handling the withdrawal and carrying out or reversing the purchase contract.

10. Payment Processing

Payments are processed using the payment service providers offered through the online shop. Depending on the payment method selected, the relevant payment service provider may receive information such as:
  • name
  • billing and delivery address
  • email address
  • order and transaction information
  • payment information
  • IP address
  • information required for fraud prevention, authentication or the handling of payment disputes
Processing necessary to perform the purchase contract is generally based on Article 6(1)(b) GDPR. Additional processing may be based on legal obligations or legitimate interests.

PayPal

Where PayPal is offered as a payment service provider, PayPal processes the personal and transaction-related information required to process the payment. This may include information relating to payment, transactions, authentication, fraud prevention and dispute handling. Further information about PayPal's processing of personal data can be found in PayPal's current privacy documentation.

Stripe

Where Stripe is activated and offered as a payment service provider, the information required to process payments may be transmitted to Stripe. This may include name, billing and delivery address, email address, IP address, and payment and transaction information. Stripe may use technical systems for fraud prevention. This section applies only if Stripe is actually activated and used as a payment service provider on this website.

11. Shipping and Delivery

Orders are shipped primarily through DHL and, depending on the size, type and destination of a shipment, other shipping providers may also be used. For delivery purposes, the information necessary to fulfil the shipment may be transmitted to the relevant shipping provider. This may include:
  • name
  • delivery address
  • email address
  • telephone number, where necessary
  • order and delivery information
The legal basis is Article 6(1)(b) GDPR because this processing is necessary to fulfil the purchase contract.

12. Hosting

This website is hosted by Hostinger. Hostinger provides the technical infrastructure required to operate the website. Technical and, where applicable, personal data may be processed in connection with these services. Where Hostinger uses service providers or subprocessors, or processes data outside the EU/EEA, this is carried out in accordance with applicable data-protection requirements and appropriate safeguards where required.

13. Google Fonts

Where Google Fonts are loaded directly from Google's servers, your browser establishes a connection to Google to retrieve the relevant font files. During this process, technical information, including your IP address, may be transmitted to Google. If the fonts used on this website are subsequently hosted locally on our own server, this section will be amended or removed accordingly.

14. Rank Math and Analytics

Rank Math may be used on this website for search-engine optimisation and related website functions. Depending on the configuration, analytics functions may be connected with services such as Google Analytics or Google Search Console. Where external analytics or statistics services are activated, they are used in accordance with applicable data-protection requirements and, where required, only after obtaining consent.

15. Complianz

Complianz is used to manage cookie settings and consent preferences. Complianz supports the management of visitors' consent decisions and may document those decisions. Processing associated with consent management takes place for compliance with applicable data-protection obligations and, where applicable, to protect legitimate interests.

16. Social Media

Where this website contains links to or embedded content from social-media platforms, accessing such content may establish a connection to the servers of the relevant provider. The processing of personal data by the respective social-media providers is governed by their own privacy policies. Data may be transmitted in particular when you actively access or interact with such content.

17. Your Rights

Subject to the applicable legal requirements, you have the following rights:
  • right of access pursuant to Article 15 GDPR
  • right to rectification pursuant to Article 16 GDPR
  • right to erasure pursuant to Article 17 GDPR
  • right to restriction of processing pursuant to Article 18 GDPR
  • right to data portability pursuant to Article 20 GDPR
  • right to object pursuant to Article 21 GDPR
  • right to withdraw consent at any time where processing is based on consent
You also have the right to lodge a complaint with a competent data-protection supervisory authority. To exercise your rights, you may contact the controller named above at any time.

18. Data Retention and Deletion

Personal data is retained only for as long as necessary for the respective purpose. Where statutory retention obligations apply, particularly under commercial, tax or other applicable laws, the relevant data will be retained for the legally prescribed period. After the applicable retention period has expired, the data will be deleted unless another legal basis permits or requires further processing.

19. Data Security

Appropriate technical and organisational measures are used to protect personal data. These measures are intended in particular to protect personal data against unauthorised access, loss, destruction, alteration or other unlawful processing. The website uses encrypted HTTPS communication where supported by the technical infrastructure.

20. Copyright, AI Training and Automated Scraping

The artworks, images, photographs, texts and other creative content published on this website are protected by copyright. Reproduction, distribution, modification or other use is permitted only within the scope of applicable law or with the appropriate permission. The content published on this website must not be systematically collected, copied, scraped or otherwise processed through automated means beyond what is permitted by applicable law. The use of my artworks, photographs, texts or other protected creative content for the training, development, testing or improvement of artificial-intelligence or machine-learning systems is not permitted without my prior express written permission.

21. Changes to this Privacy Policy

This Privacy Policy may be updated where the website, services, payment or shipping providers, technical infrastructure or applicable legal requirements change. The current version published on this website applies. Last updated: September 2026
error: Content is protected by Copyright© Anett Alexandra Bulano