Last updated: October 2025 
Effective date: October 2025

Introduction

At Artificraft GmbH, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website https://artificraft.org. 

We comply with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). 

Data Controller

Artificraft GmbH 
Schellingstraße 109 a 
80798 München 
Germany 

Managing Director: Ramona Al Dreihi 
Email: info@artificraft.com 
Phone: +49 174 764 3496 

Personal Data We Collect

We may collect the following personal data when you use our website: 

  • Contact Information: name, email address, and any information you provide via our contact form or email. 
  • Newsletter Data: your email address and consent for subscription. 
  • Usage Data: information about how you interact with our site (IP address, browser type, device info, pages visited, time spent). 
  • Cookies and Tracking Technologies: see Section 6 below. 

Purpose and Legal Basis for Processing

We process your data for the following purposes: 

Purpose 

Legal Basis (GDPR) 

Responding to contact inquiries 

Art. 6(1)(b) GDPR (performance of a contract) 

Sending newsletters 

Art. 6(1)(a) GDPR (consent) 

Website analytics and improvement 

Art. 6(1)(f) GDPR (legitimate interest) 

Compliance with legal obligations 

Art. 6(1)(c) GDPR 

You can withdraw consent at any time by contacting us at info@artificraft.com. 

Newsletter Subscription

If you subscribe to our newsletter, we will use your email address only for that purpose. 
You can unsubscribe at any time via the link provided in each email or by contacting us directly. 

Cookies and Tracking

Our website uses cookies and similar technologies to enhance user experience and analyze traffic. 
Cookies are small text files stored on your device. You can disable cookies in your browser settings, though some parts of the site may not function properly. 

We may also use: 

  • Google Analytics (by Google Ireland Ltd.) 
  • YouTube embeds (Google Ireland Ltd.) 
  • LinkedIn, Instagram, and Facebook plugins 

These services may transfer data to servers outside the EU. Where applicable, we ensure adequate safeguards through EU Standard Contractual Clauses. 

Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined above or as required by law. 
After this period, data will be securely deleted or anonymized. 

Data Sharing

We may share data with service providers who support our website operations (e.g., hosting, newsletter delivery, analytics). 
All such processors are bound by contracts under Art. 28 GDPR ensuring data protection compliance. 

We do not sell or rent personal data to third parties. 

Your Rights

Under GDPR, you have the following rights: 

  • Access (Art. 15 GDPR) 
  • Rectification (Art. 16 GDPR) 
  • Erasure (“Right to be forgotten”) (Art. 17 GDPR) 
  • Restriction of processing (Art. 18 GDPR) 
  • Data portability (Art. 20 GDPR) 
  • Objection (Art. 21 GDPR) 
  • Withdrawal of consent (Art. 7(3) GDPR) 

To exercise these rights, contact us at info@artificraft.com. 

Data Security

We use industry-standard encryption (SSL/TLS) and technical safeguards to protect your data from unauthorized access, loss, or misuse. 

Links to External Websites

Our website may include links to external sites (e.g., YouTube, LinkedIn, Instagram, Facebook). 
We are not responsible for their privacy practices. Please review the privacy policies of those sites separately. 

Updates to This Policy

We may update this Privacy Policy from time to time. 
The latest version will always be available at https://artificraft.org/privacy-policy/. 

Supervisory Authority

If you believe we are not processing your data in accordance with the law, you may contact the competent supervisory authority: 

Bavarian Data Protection Authority (BayLDA) 
Promenade 18, 91522 Ansbach, Germany 
www.lda.bayern.de