1. Controller
2. General Information on Data Processing
We only process personal data to the extent necessary to provide our website, handle orders, and enable the use of our services. Processing is based on legal provisions, in particular the GDPR and the BDSG.
3. Hosting
Our website is hosted by Hetzner Online GmbH and teserco GmbH with servers located in Germany.
4. Access Data and Server Log Files
When visiting our website, certain technical data is automatically processed, including IP address, browser type, operating system, referrer URL, and date and time of access.
These data are temporarily stored to ensure the secure and stable operation of the website, for example for error analysis or defense against attacks. Storage duration is limited to what is necessary for these purposes. Data is not combined with other sources or shared with third parties.
6. Tools and Services Used
-
Google Analytics (with IP anonymization)
Provider: Google Ireland Ltd. – Analytics tool to evaluate user behavior.
Legal basis: Art. 6(1)(a) GDPR (consent) -
Google Ads / Conversion Tracking
Used to measure the success of our advertising campaigns.
Legal basis: Art. 6(1)(a) GDPR -
Meta (Facebook) Pixel
For analyzing website visits and personalized advertising.
Legal basis: Art. 6(1)(a) GDPR -
TikTok Pixel
Provider: TikTok Technology Ltd. – For measuring advertising success.
Legal basis: Art. 6(1)(a) GDPR -
Pinterest Tag
For conversion tracking and audience building.
Legal basis: Art. 6(1)(a) GDPR -
Hotjar
User behavior is analyzed anonymously.
Legal basis: Art. 6(1)(a) GDPR -
OpenAI / ChatGPT
Our chatbot is based on technology from OpenAI L.L.C., USA. When using the chatbot, technical data (e.g., IP address, text inputs) may be processed.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
8. Orders and Contract Processing
When you place an order, we collect the following data:
- Name
- Address
- Email address
- Payment method
These data are necessary for contract fulfillment (Art. 6(1)(b) GDPR).
Data shared with third parties for delivery:
- UPS
- trans-o-flex
For payment processing we share data with the following providers:
- PayPal (PayPal Europe S.à r.l. et Cie, S.C.A., Luxembourg)
- Payone (BS PAYONE GmbH, Germany)
9. Payment Methods
- Bank transfer
- PayPal
- Credit card
11. Embedded Third-Party Content
The following third-party content is integrated into our website:
- Google Fonts
- Google Maps
- YouTube videos
Integration is via external servers. Personal data (e.g., IP address) may be transmitted to the respective providers. Legal basis: your consent pursuant to Art. 6(1)(a) GDPR.
12. Storage Duration
Personal data is stored only as long as necessary for the respective processing purposes or as required by law. In certain cases, longer storage may occur, for example to safeguard legitimate interests or fulfill legal obligations.
Data is regularly reviewed and deleted once it is no longer required – unless data subjects exercise their right to deletion earlier.
13. Data Subject Rights
You have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Objection to processing (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
Please send your request to service@photo-mosaic.co.uk.
14. Right to Complain to Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe your personal data is being unlawfully processed.
For example, the Berlin Commissioner for Data Protection and Freedom of Information: https://www.datenschutz-berlin.de/
15. Changes to this Privacy Policy
We reserve the right to update this privacy policy in the event of technical or legal changes. Please check our website regularly for the current version.
Last updated: July 2025
10. Social Media Links
Our website contains simple links to social media platforms (Twitter, Facebook, Pinterest). No data is automatically transferred when loading the page.