Privacy Policy
This English version is provided for convenience only. The German version is legally binding.
As of: September 2026
The protection of your personal data is important to us. In this Privacy Policy, we inform you about which personal data we process when you visit our online shop art-jungle.de, place orders and use our services.
1. Data Controller
The controller responsible for the processing of personal data is:
Art Jungle
Owner: Anas Ktesh
Sole proprietorship
Brückenstraße 1B
10179 Berlin
Germany
E-mail: info@art-jungle.de
Phone: +49 176 34619352
2. General Information
Personal data is any information relating to an identified or identifiable natural person.
This may in particular include:
Name and address
E-mail address
Phone number
IP address
Order and payment information
Delivery information
Customer account data
Communication data
Technical device and browser information
We process personal data only if there is a legal basis for doing so.
3. Legal Bases
The processing of personal data is carried out in particular on the basis of:
Art. 6 Abs. 1 lit. a DSGVO [Art. 6(1)(a) GDPR]
if you have given us your consent.
Art. 6 Abs. 1 lit. b DSGVO [Art. 6(1)(b) GDPR]
if the processing is necessary for the performance of a contract or prior to entering into a contract.
Art. 6 Abs. 1 lit. c DSGVO [Art. 6(1)(c) GDPR]
if we are required to process data due to legal obligations.
Art. 6 Abs. 1 lit. f DSGVO [Art. 6(1)(f) GDPR]
if the processing is necessary for the purposes of our legitimate interests, provided that your interests or fundamental rights do not override them.
4. Accessing Our Website
When you visit our website, technically necessary data may be processed automatically.
This may in particular include:
IP address
Date and time of access
Accessed pages and files
Referrer URL
Browser type and browser version
Operating system
Device type
Technical connection information
This processing is necessary to provide our website in a secure, stable and technically functional manner.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO [Art. 6(1)(f) GDPR].
Our legitimate interest lies in the secure and reliable operation of our online shop.
5. Hosting and Technical Infrastructure
For the technical operation of our website, we use external IT, hosting and storage providers.
For the storage and delivery of media and product files, we use services including those of:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
When retrieving corresponding files, technically necessary information such as your IP address may be processed.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO [Art. 6(1)(f) GDPR].
6. Orders and Contract Performance
When you place an order with Art Jungle, we process the data necessary for the execution of your order.
This may in particular include:
First name and surname
Billing address
Delivery address
E-mail address
Phone number, where applicable
Ordered products
Product size and product variant
Order number
Order date
Purchase price
Payment status
Shipping status
Return and refund information
We use this data in particular for:
Processing your order
Manufacturing your products
Payment processing
Shipping
Communication regarding your order
Withdrawals and returns
Refunds
Complaints
Warranty claims
The legal basis is Art. 6 Abs. 1 lit. b DSGVO [Art. 6(1)(b) GDPR].
Insofar as statutory retention obligations exist, further storage takes place on the basis of Art. 6 Abs. 1 lit. c DSGVO [Art. 6(1)(c) GDPR].
7. Payment Processing via Stripe
For payment processing, we use Stripe in particular.
Depending on the selected payment method, the following data in particular may be processed:
Name
Billing address
E-mail address
Payment amount
Order number
Payment status
Payment method
Technical device and connection data
Payment information required for the payment
As a rule, Art Jungle does not receive complete credit card details, provided these are processed directly by the payment service provider.
The processing required to execute the payment takes place on the basis of Art. 6 Abs. 1 lit. b DSGVO [Art. 6(1)(b) GDPR].
Stripe may process data additionally for fraud prevention, security checks and to comply with its own legal obligations.
In addition, the privacy notices of the respective payment service provider apply.
8. Shipping with DHL
We currently deliver exclusively within Germany.
We use DHL for the delivery of your order.
For this purpose, the following data in particular may be transmitted to DHL:
Name
Delivery address
Consignment information
Order information
Insofar as required and legally permissible for shipping notifications or the requested delivery, your e-mail address or phone number may also be transmitted.
The processing takes place for the performance of the purchase contract on the basis of Art. 6 Abs. 1 lit. b DSGVO [Art. 6(1)(b) GDPR].
9. Customer Account
If our online shop offers the creation of a customer account and you create such an account, we process the data required for this purpose.
This may in particular include:
Name
E-mail address
Login details
Saved addresses
Order history
Account settings
The processing takes place to provide the customer account on the basis of Art. 6 Abs. 1 lit. b DSGVO [Art. 6(1)(b) GDPR].
Following the deletion of a customer account, data will be deleted provided that no statutory retention obligations or other legal bases for further storage exist.
10. Contacting Us
If you contact us by e-mail, telephone or via a contact form, we process the information provided by you.
This may in particular include:
Name
E-mail address
Phone number
Content of your message
Order number
Further information transmitted by you
If your inquiry relates to an order or a potential contract, the processing takes place on the basis of Art. 6 Abs. 1 lit. b DSGVO [Art. 6(1)(b) GDPR].
For other inquiries, the processing generally takes place on the basis of Art. 6 Abs. 1 lit. f DSGVO [Art. 6(1)(f) GDPR].
Our legitimate interest lies in the proper processing of customer and business inquiries.
11. Right of Withdrawal, Returns and Complaints
If you declare a withdrawal, register a return or submit a complaint, we process the information required for this purpose.
This may in particular include:
Name
Contact details
Order number
Information about the product
Content of your declaration
Return information
Refund information
Date and time of an electronically declared withdrawal, where applicable
The processing takes place in particular on the basis of Art. 6 Abs. 1 lit. b and lit. c DSGVO [Art. 6(1)(b) and (c) GDPR].
12. Newsletter and Electronic Advertising
Insofar as we offer a newsletter and you subscribe to it, we generally use your e-mail address on the basis of your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO [Art. 6(1)(a) GDPR].
You can revoke consent given at any time with effect for the future.
For this purpose, you can in particular use the unsubscribe link in a corresponding e-mail.
Insofar as direct marketing to existing customers is legally permissible without separate consent, you may object to this use of your data at any time.
13. Cookies and Comparable Technologies
Our website uses cookies and comparable technologies.
This may in particular include:
Cookies
Local storage
Session storage
Security tokens
Technical identifiers
Technically strictly necessary technologies may be required in particular for the shopping cart, checkout, login, customer account, security and the storage of your cookie selection.
Non-essential analytics, marketing or other tracking technologies are only used if the statutory requirements necessary for this purpose are met.
Detailed information can be found in our separate Cookie Policy.
You can change your cookie settings at any time via the “Cookie Settings” link on our website.
Analytics and advertising services
As of 29 October 2026
We only use the services below with your consent. On your first visit a banner asks whether you agree to the “Statistics” and “Marketing” categories. Nothing from these services loads before you choose, and if you decline, nothing loads at all.
We store your choice in your browser so we don’t ask again on every page. You can change or withdraw it at any time via the “Cookie settings” link at the bottom of every page.
Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We use Google Analytics 4 to understand how visitors use our shop – for example which pages are viewed and which products are looked at, added to the basket and bought. We only see the results in aggregated form.
It processes usage and device data (such as pages viewed, time on page, browser, device type, approximate location), a random identifier in a cookie and, on a purchase, the order number, order value and products. According to Google, IP addresses of users in the EU are neither logged nor stored.
The legal basis is your consent in the “Statistics” category (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time, with effect for the future, via the “Cookie settings” link at the bottom of every page.
Google LLC in the USA may access the data. The transfer to the USA relies on the EU-U.S. Data Privacy Framework, under which Google LLC is certified.
The Analytics cookies are kept for up to two years.
- Google Privacy Policy (opens in a new tab)
- How Google uses information from sites (opens in a new tab)
Google Ads conversion tracking
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads conversion tracking tells us whether a click on one of our ads on Google leads to a purchase, so we can manage our advertising.
It processes the click identifier from the ad, identifiers in cookies, device and browser data and, on a purchase, the order number and order value. On a purchase your email address is also sent in hashed form (SHA-256), so Google can match the purchase to a Google account (enhanced conversions).
The legal basis is your consent in the “Marketing” category (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time, with effect for the future, via the “Cookie settings” link at the bottom of every page.
Google LLC in the USA may access the data. The transfer to the USA relies on the EU-U.S. Data Privacy Framework, under which Google LLC is certified.
The data is kept for as long as the purpose requires; Google's privacy policy gives the details.
- Google Privacy Policy (opens in a new tab)
- How Google uses information from sites (opens in a new tab)
- Google ad settings (opens in a new tab)
Pinterest Tag
Provider: Pinterest Europe Limited, Dublin, Ireland.
The Pinterest Tag tells us whether our ads and Pins on Pinterest lead to visits and purchases, and lets us show ads on Pinterest to visitors of our shop.
It processes usage and device data (such as pages and products viewed, browser, IP address), identifiers in cookies, a click identifier when you arrive from an ad, and, on a purchase, the order number, order value and products. If you are signed in to Pinterest in your browser, Pinterest can link this data to your account.
The legal basis is your consent in the “Marketing” category (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time, with effect for the future, via the “Cookie settings” link at the bottom of every page.
Pinterest, Inc. in the USA may access the data. The transfer to the USA relies on the EU-U.S. Data Privacy Framework, under which Pinterest, Inc. is certified.
The data is kept for as long as the purpose requires; Pinterest's privacy policy gives the details.
14. External Links and Social Networks
Our website may contain links to external websites and social networks such as Instagram or Pinterest.
With standard external links, a connection to the respective provider is generally only established when you click on the link.
The respective external provider is generally responsible for any data processing that takes place subsequently.
15. Recipients of Personal Data
Personal data is only passed on insofar as this is necessary, required by law or otherwise legally permissible.
Possible recipients include in particular:
Hosting and IT service providers
Hetzner
Stripe
DHL
E-mail and communication service providers
Tax advisors
Authorities and courts in the event of a legal obligation
We do not sell personal data to data brokers.
16. Data Transfer Outside the EEA
With individual service providers, processing of personal data outside the European Union or the European Economic Area may take place.
Such a transfer takes place only in compliance with the statutory requirements.
For this purpose, the following may in particular be used:
Adequacy decisions of the European Commission
EU-US Data Privacy Framework
Standard contractual clauses of the European Commission
Other legally recognised safeguards
17. Retention Period
We generally store personal data only for as long as is necessary for the respective purpose.
In addition, statutory retention obligations may exist.
In particular, different retention periods currently apply depending on the type of document.
Accounting records must generally be retained for eight years.
Six-year or ten-year retention periods may apply to certain other business documents.
After expiration of the respective retention period, the data will be deleted, provided that no other legal basis for further storage exists.
18. Data Security
We deploy appropriate technical and organisational measures for personal data, in particular against:
Loss
Manipulation
Unauthorised access
Unauthorised disclosure
Other unlawful processing
to protect it.
Data transmission between your browser and our website is generally encrypted.
19. Your Rights
Within the scope of the statutory requirements, you have in particular the following rights:
Right of access pursuant to Art. 15 DSGVO [Art. 15 GDPR]
Right to rectification pursuant to Art. 16 DSGVO [Art. 16 GDPR]
Right to erasure pursuant to Art. 17 DSGVO [Art. 17 GDPR]
Right to restriction of processing pursuant to Art. 18 DSGVO [Art. 18 GDPR]
Right to data portability pursuant to Art. 20 DSGVO [Art. 20 GDPR]
Right to object pursuant to Art. 21 DSGVO [Art. 21 GDPR]
Where processing is based on your consent, you can revoke this consent at any time with effect for the future.
To exercise your rights, please contact us at:
20. Objection to Direct Marketing
If personal data is processed for direct marketing, you may object to this processing at any time.
Following your objection, your personal data will no longer be processed for these direct marketing purposes.
21. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority.
The competent authority for our registered office is in particular:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany
Phone: +49 30 13889-0
E-mail: mailbox@datenschutz-berlin.de
22. Changes to This Privacy Policy
We may update this Privacy Policy if our data processing operations, technical services or legal requirements change.
The current version published on art-jungle.de applies in each case.
23. Privacy Contact
If you have any questions regarding data protection or the exercise of your rights, please contact us:
Art Jungle
Owner: Anas Ktesh
Brückenstraße 1B
10179 Berlin
Germany
E-mail: info@art-jungle.de
Phone: +49 176 34619352