Privacy information

Privacy contact

Atelier ZESTREA by Anamaria, Laufen, Germany · atelierzestrea@gmail.com.

These notes describe the current website features. Full controller details and some information about service-provider processing are still outstanding.

Visiting the website

OpenAI Sites provides this website using Cloudflare infrastructure. Technical connection data, such as your IP address, requested page, access time and browser information, are processed to deliver and secure the website. The legal basis for this purpose is Article 6(1)(f) GDPR: the legitimate interest in operating a functional, secure website. See the OpenAI and Cloudflare privacy information.

Messages and photographs

Your email address and message are required; your name is optional. You may attach up to three JPG or PNG images, totalling no more than 10 MB. Submitting sends these details and files through FormSubmit to my Gmail inbox so I can reply. The legal basis is Article 6(1)(b) GDPR for enquiries about a commission, or Article 6(1)(f) for other enquiries: the legitimate interest in answering your message.

FormSubmit states that it retains submissions for 30 days, excluding uploaded files from that retrieval storage. This does not delete the delivered email or its attachments from the recipient's inbox after 30 days. Further retention depends on handling the enquiry and any applicable legal record-keeping obligations.

After submission, FormSubmit may display a Google reCAPTCHA check that processes additional technical data. No reCAPTCHA script is embedded on the Atelier homepage. You can instead email directly, avoiding FormSubmit; Gmail still processes the email. See FormSubmit's privacy information (PDF), its help page, and Google's privacy information.

Temporary browser storage and external links

Opening the photo picker temporarily saves a copy of your name, email and message in this tab's session storage, to recover the text if the browser reloads. The copy is removed when photo selection finishes or is cancelled, or when the page next loads. Only drafts less than 30 minutes old are restored. Otherwise, the stored copy remains until the browser session ends. Photos are not stored there.

The website code does not include its own advertising or analytics tools such as Google Analytics or Meta Pixel. Instagram, Facebook, Pinterest and Etsy are ordinary links, not embedded feeds. Their privacy policies apply when you visit them.

Providers and international processing

The providers mentioned above may process data outside the European Economic Area. The contractual arrangements, specific international-transfer safeguards and hosting retention periods applicable to this website have not yet been fully established. Links to provider policies do not replace those outstanding details.

Your rights

Subject to the GDPR's conditions, you can request access, correction, erasure, restriction and data portability. Where processing relies on consent, you can withdraw it for the future. You can object to processing based on legitimate interests for reasons relating to your particular situation. Contact the email address above to exercise your rights.

You may also complain to a supervisory authority, particularly where you live, work or believe an infringement occurred. The authority for private businesses in Bavaria is the BayLDA.