Privacy Policy

1. Introduction

Edition One GmbH i.G. ("Edition One", "we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, make purchases, or interact with our services.

We process personal data in compliance with the European General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Edition One GmbH i.G.
Potsdamer Str. 10
10785 Berlin, Germany

Email: contact@editionone.art
Phone: +49 152 23494303

3. Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide

• Account Information: Name, email address, password, phone number
• Order Information: Billing and shipping addresses, payment details, purchase history
• Custom Commission Data: Design preferences, reference images, project specifications
• Communication Data: Inquiries, support requests, feedback, and correspondence
• Artist Profile Data: Portfolio information, biography, social media handles (for artist accounts)

3.2 Automatically Collected Data

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, click patterns, referral sources
• Location Data: General geographic location based on IP address
• Cookie Data: As described in our Cookie section below

3.3 Third-Party Data

We may receive information about you from third parties, including payment processors, shipping partners, social media platforms (when you interact with our content), and marketing partners. This data is processed in accordance with this Privacy Policy.

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Contract Performance

• Processing and fulfilling your orders
• Managing custom commission projects
• Providing customer support and responding to inquiries
• Sending order confirmations, shipping updates, and delivery notifications
• Processing payments and preventing fraud

4.2 Legitimate Interests

• Improving our website, products, and services
• Analyzing usage patterns and customer preferences
• Preventing fraud, security breaches, and illegal activities
• Enforcing our Terms & Conditions
• Internal record keeping and business administration
• Creating anonymized, aggregated statistics for business insights

4.3 With Your Consent

• Sending marketing communications about new collections, events, and promotions
• Personalizing your experience based on your preferences
• Using your artwork images for marketing and promotional purposes
• Sharing your information with selected partners for joint marketing initiatives

4.4 Legal Compliance

We may process your data to comply with legal obligations, respond to legal requests, protect our rights, and cooperate with regulatory authorities.

5. Data Sharing

We share your personal data with the following categories of recipients:

• Service Providers: Payment processors (Shopify, Stripe), shipping carriers, cloud hosting providers, email service providers, and customer support tools
• Artists and Partners: When necessary to fulfill custom commissions or collaborative projects
• Analytics Providers: To help us understand website usage and improve our services
• Legal and Regulatory Bodies: When required by law or to protect our rights
• Business Transfers: In connection with any merger, acquisition, or sale of assets

We require all third parties to respect the security of your personal data and treat it in accordance with applicable laws. We do not sell your personal data to third parties.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where some of our service providers are located.

When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account Data: Until you request account deletion, plus a reasonable backup period
• Order Data: 10 years after the transaction for tax and legal compliance
• Commission Project Data: Indefinitely for provenance and authenticity purposes
• Marketing Data: Until you unsubscribe or withdraw consent
• Analytics Data: 26 months in anonymized form
• Support Communications: 3 years after resolution

After retention periods expire, data is securely deleted or anonymized.

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. When you first visit our website, you will be shown a cookie consent banner where you can accept or decline non-essential cookies.

8.1 Types of Cookies

• Essential Cookies: Required for website functionality, shopping cart, checkout, and user authentication. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website (requires consent)
• Preference Cookies: Remember your settings, such as cookie consent preferences

8.2 Google Analytics

We use Google Analytics 4, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies to analyze your use of our website. The information generated (including your truncated IP address) is transmitted to and stored on Google servers in the United States.

We have implemented Google Consent Mode, which means Google Analytics only collects data after you have given your consent via our cookie banner. If you decline cookies, Google Analytics operates in a limited, cookieless mode that does not track individual users.

Google may transfer this information to third parties where required by law, or where third parties process data on Google's behalf. For more information, see Google's Privacy Policy at policies.google.com/privacy.

8.3 Managing Your Preferences

You can manage your cookie preferences at any time by:

• Clicking "Cookie Settings" in the website footer to reset your preferences and see the consent banner again
• Adjusting your browser settings to block or delete cookies
• Using browser extensions that block tracking scripts

Note that disabling essential cookies may affect website functionality, including the shopping cart and checkout process.

9. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (with certain exceptions)
• Right to Restriction: Request limited processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise your rights, please contact us at contact@editionone.art. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• SSL/TLS encryption for data in transit
• Encrypted storage for sensitive data
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you and relevant authorities of any breach as required by law.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

12. Third-Party Links

Our website may contain links to third-party websites, including social media platforms, payment providers, and partner sites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending you an email. The "Last updated" date at the top indicates when the policy was last revised. Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Edition One GmbH i.G.
Potsdamer Str. 10
10785 Berlin, Germany

Email: contact@editionone.art
Phone: +49 152 23494303