Privacy Policy
1. Controller
Schneid Studio GmbH
Einsiedelstraße 6 / LMG Gelände
23554 Lübeck, Germany
Phone: +49 (0)451 408 338 29
Email: info@schneidstudio.com
Website: schneidstudio.com
If you have any questions about this Privacy Policy or how we process personal data, please contact us at info@schneidstudio.com.
2. What we collect and why
We process personal data only where necessary to operate our website, communicate with you, and fulfil orders.
a) Website use data (server logs)
When you visit our website, technical data may be processed such as IP address, device/browser information, date and time of access, referrer URL, and pages requested.
Purpose: website delivery, security, troubleshooting, and preventing misuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests).
b) Orders, checkout and customer service
If you place an order or contact us, we process information such as name, billing and shipping address, email address, phone number (if provided), order details, and correspondence.
Purpose: contract fulfilment, shipping, invoicing, customer support, and handling returns.
Legal basis: Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (legal obligations, e.g. tax/accounting), Art. 6(1)(f) GDPR (customer service and documentation).
c) Newsletter (Squarespace Email Campaigns)
If you subscribe to our newsletter, we process your email address and any optional information you provide (e.g. name).
Purpose: sending updates, launches, studio news and journal content.
Legal basis: Art. 6(1)(a) GDPR (consent).
You can unsubscribe at any time via the link included in every newsletter.
3. Cookies, consent and tracking
Our website uses cookies and similar technologies. Some are necessary for core functions (e.g. shopping cart), others are used for marketing/measurement.
We use a cookie consent banner to let you choose optional cookies. You can change your preferences at any time via the cookie settings in the banner (or your browser settings).
Legal basis:
Necessary cookies: Art. 6(1)(f) GDPR
Optional cookies (marketing/measurement): Art. 6(1)(a) GDPR (consent)
4. Pinterest Tag
We use the Pinterest Tag to measure performance of our campaigns and understand interactions with our website (e.g. visits or conversions), and to show relevant content on Pinterest.
Pinterest may process data such as device information, identifiers (cookies), IP address, and event data. If you consent to marketing cookies via our cookie banner, the Pinterest Tag may be activated.
Legal basis: Art. 6(1)(a) GDPR (consent).
Pinterest acts as an independent controller for its own processing. Please consult Pinterest’s privacy policy for further information.
5. Payments
Payments are processed through payment service providers. We do not store full payment card details.
Squarespace Payments
Squarespace Payments processes card payments and may receive the information required to complete your transaction (e.g. name, email, amount, billing details, transaction metadata).
Legal basis: Art. 6(1)(b) GDPR.
PayPal
If you choose PayPal, PayPal processes the payment under its own responsibility and receives the information required for payment processing.
Legal basis: Art. 6(1)(b) GDPR.
6. Shipping and fulfilment
To deliver your order, we share the necessary information with shipping carriers (e.g. name, delivery address, and where applicable email for shipping notifications).
Legal basis: Art. 6(1)(b) GDPR.
7. Data retention
We keep personal data only as long as necessary for the purposes described above and in line with statutory retention requirements (e.g. accounting and tax obligations). Order and invoice data may be retained for the legally required period.
8. Your rights under the GDPR
You have the right to:
access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
object to processing based on legitimate interests (Art. 21 GDPR)
withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
You also have the right to lodge a complaint with a supervisory authority.
9. International transfers
Some service providers may process data outside the European Economic Area. Where applicable, we rely on appropriate safeguards such as EU Standard Contractual Clauses or adequacy decisions.
10. Updates to this policy
We may update this Privacy Policy from time to time. The “Last updated” date indicates the latest revision.