Privacy Policy
Last updated: 16 October 2026
1. Data Controller
The controller responsible for processing personal data on this website is:
Purple Canvas GmbH
Elisabethstrasse 3
80796 Munich, Germany
Contact: Uschi Schmitt-Ladanyi
Telephone: +49 89 2429 0910
Email:
2. General Information
Purple Canvas GmbH respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how personal data is collected, used and protected when you visit our website, contact us or enquire about our artwork, bespoke art concepts and services.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection legislation.
3. Website Hosting and Server Logs
Our website operates on WordPress and is hosted using infrastructure provided by Vautron.
When you visit our website, technical information may be processed automatically. This may include your IP address, browser type, operating system, date and time of access, requested pages and referring website.
This information is used to ensure the functionality, security and stability of the website, identify technical errors and prevent misuse.
The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in providing a secure and reliable website.
Server log data is retained only for as long as necessary for technical and security purposes or as required by applicable law.
4. Cookies and Consent Management
Our website uses cookies and similar technologies to provide essential functionality and, where applicable, to enable additional services.
We use Real Cookie Banner to manage and document visitor consent.
Technically necessary technologies may be used without consent where permitted by applicable law. Optional technologies requiring consent are activated only after the visitor has given the relevant consent.
Access to or storage of information on a visitor’s device is subject to Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is processed, the applicable legal bases under the GDPR also apply.
You may change or withdraw your consent at any time through the cookie settings available on our website.
Information about individual cookies and services, including their purposes and storage periods, is provided through our consent management interface.
5. Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google, to understand how visitors interact with our website and to improve its content and functionality.
Depending on the configuration, Google Analytics may process information such as page views, interactions, technical device information, approximate location information and online identifiers.
Google Analytics is used on the basis of your prior consent where required by law.
The legal basis for processing personal data through Google Analytics is Article 6(1)(a) GDPR.
You may withdraw your consent at any time through our cookie settings.
Data may be processed by Google entities outside the European Economic Area. Where applicable, such transfers are subject to the safeguards required by the GDPR.
Further information is available in Google’s Privacy Policy: https://policies.google.com/privacy
6. Contact Form and Email Enquiries
When you contact us through our website or by email, we process the information you provide in order to respond to your enquiry.
This may include your name, email address, message and other information voluntarily submitted.
Our website uses Contact Form 7 to provide contact form functionality.
The legal basis is Article 6(1)(b) GDPR where your enquiry concerns contractual or pre-contractual matters, or Article 6(1)(f) GDPR for other business-related communication.
Your information is retained only for as long as necessary to process your enquiry or comply with applicable statutory retention obligations.
7. Website Security
We use appropriate technical and organisational measures to protect our website and the personal data processed through it.
These measures may include security plugins, access controls, spam prevention and protection against unauthorised access or misuse.
Where personal data is processed for website security, the legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in maintaining website security.
8. External Links and Third-Party Services
Our website may contain links to external websites, social media platforms and other third-party services.
When you follow an external link, the privacy policies and data processing practices of the respective third-party operators apply.
Where third-party content or services are embedded directly into our website, we take the applicable data protection requirements into account, including consent where legally required.
9. International Data Transfers
Where personal data is transferred outside the European Economic Area, we apply the safeguards required by Chapter V GDPR.
Depending on the circumstances, these may include adequacy decisions by the European Commission or appropriate contractual safeguards.
10. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.
Longer retention may be required where statutory obligations apply, including commercial or tax-related recordkeeping requirements.
Once personal data is no longer required and no legal retention obligation remains, it is deleted or anonymised as appropriate.
11. Your Data Protection Rights
Under the GDPR, you have the following rights, subject to applicable legal requirements:
- The right to access your personal data (Article 15 GDPR).
- The right to rectification of inaccurate personal data (Article 16 GDPR).
- The right to erasure of personal data (Article 17 GDPR).
- The right to restriction of processing (Article 18 GDPR).
- The right to data portability where applicable (Article 20 GDPR).
- The right to object to certain processing activities (Article 21 GDPR).
- The right to withdraw previously given consent at any time (Article 7(3) GDPR).
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, please contact .
12. Data Security
Our website uses HTTPS encryption to help protect information transmitted between your browser and our website.
We implement appropriate technical and organisational security measures designed to protect personal information against unauthorised access, alteration, loss or disclosure.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in legislation, website functionality or our data processing practices.
The latest version will be published on this website.
14. Contact for Privacy Enquiries
For questions about this Privacy Policy or the processing of personal data, please contact:
Purple Canvas GmbH
Elisabethstrasse 3
80796 Munich, Germany
Telephone: +49 89 2429 0910
Email:
15. Cookie Settings
You can review, change or withdraw your cookie preferences at any time using the cookie settings provided on our website.