Privacy policy

This is a convenience translation. For contracts governed by German law, the German version is the legally binding one.

1. Controller

The controller responsible for data processing on this website is:

Ahmet Numan Saglam
Leunaer Str. 4
12681 Berlin
Germany
Phone: +49 176 61245764
Email: kontakt@blosha.com

2. General information

We take the protection of your personal data seriously and treat it confidentially and in accordance with the General Data Protection Regulation (GDPR) and supplementary national provisions. Personal data is any data by which you can be personally identified.

Data on this website is transmitted encrypted via TLS/SSL. You can recognise this by the address bar of your browser starting with “https://”.

3. Website hosting

Our online shop runs on the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, together with Shopify Inc., 151 O’Connor Street, Ottawa, Ontario, K2P 2L8, Canada.

Shopify processes all data required to operate the shop on our behalf – in particular order, contact and usage data. This is based on a data processing agreement pursuant to Art. 28 GDPR. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in a secure and efficient shop).

Data may be transferred to third countries. Such transfers are based on the EU Commission’s standard contractual clauses and, where applicable, on an adequacy decision.

4. Server log files

When you access our pages, information transmitted by your browser is recorded automatically: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR to ensure technically flawless presentation and the security of our systems.

5. Cookies

We use cookies and comparable technologies. Technically necessary cookies – for the cart, session and security, for example – are set on the basis of section 25(2)(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies, in particular for analytics and marketing, are only set with your consent pursuant to section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

You’ll find the details in our cookie policy.

6. Order processing

When you order from us, we process inventory and contract data: name, billing and delivery address, email address, phone number if provided, and details of the items ordered. The legal basis is Art. 6(1)(b) GDPR.

To fulfil your order we pass on the necessary data to:

  • our print and shipping service provider in Germany, who produces your poster and ships it directly to you (name and delivery address, items ordered),
  • the commissioned shipping company, insofar as this is required for delivery,
  • the payment service provider you selected in order to process the payment,
  • our tax adviser and the tax authorities, insofar as tax and commercial retention obligations require this.

Once the contract has been fully performed, further processing of your data is restricted and the data is deleted after the tax and commercial retention periods expire (generally six or ten years).

7. Payment service providers

We work with external payment service providers to process payments. You’ll see which ones during the ordering process. Your payment data – such as credit card or account details – is transmitted exclusively to the relevant provider and processed there; we do not store it. The legal basis is Art. 6(1)(b) GDPR and, with selected providers, additionally your consent pursuant to Art. 6(1)(a) GDPR. The payment service providers’ own privacy notices apply to their processing.

8. Customer account

You can create a customer account with us, but you don’t have to. If you do, we store the data held there until you delete the account. The legal basis is Art. 6(1)(b) GDPR. Statutory retention periods remain unaffected.

9. Contacting us

If you contact us by email, phone or contact form, we process your details in order to handle your enquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete this data once your enquiry has been resolved and no retention obligations apply.

10. Newsletter

If you subscribe to our newsletter, we process your email address in order to send you information about new designs and offers. Registration uses the double opt-in procedure: you first receive a confirmation email. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every email or by sending us a message; the lawfulness of processing carried out until then remains unaffected.

11. Your rights

You have the right at any time to:

  • information about the data stored about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
  • withdraw consent given with effect for the future (Art. 7(3) GDPR).

Simply contact us at kontakt@blosha.com.

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany

13. Changes to this privacy policy

We update this privacy policy whenever our services or the legal situation change. The version published on this page applies.