PRIVACY POLICY.

Controller

The person named above is the controller within the meaning of the General Data Protection Regulation (GDPR).

In brief

• This website sets no cookies and uses no analytics, tracking or advertising services.
• No fonts, scripts or images are loaded from third-party servers. All content comes from this website itself.
• I process personal data only when you visit the website (technically necessary), sign up for the newsletter or write to me.

Hosting and server log files

The website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary connection data in order to deliver the pages and to ensure security. This includes in particular:

• IP address,
• date and time of the request,
• requested page or file,
• browser type and operating system,
• previously visited page (referrer URL).

The processing is based on Art. 6 (1) (f) GDPR. My legitimate interest is the secure, stable and fast delivery of the website. Cloudflare may also process data in the USA. The transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework, in which Cloudflare participates, and additionally on the EU Commission's Standard Contractual Clauses. A data processing agreement is in place with Cloudflare. For more information see cloudflare.com/privacypolicy.

The address of this website (subdomain) is resolved via a DNS record at STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The page request itself does not run through STRATO.

Local storage in your browser

When you switch the language of the website, your browser stores this choice locally on your device (Local Storage, entry fm-language) so that the website appears in the same language on your next visit. The entry does not leave your device and is not transmitted to me or to third parties. The legal basis is § 25 (2) No. 2 TDDDG, as the storage is necessary to provide the language setting you explicitly requested. You can delete the entry at any time in your browser settings.

The sound layer of the website is generated entirely locally in your browser. No data is transmitted in the process.

Newsletter

You can sign up for my newsletter on the website. I use it to share exhibition dates, workshops and new work.

Data processed

I need your email address to sign you up. Any further details are voluntary and are not requested. When you submit the form, your email address is transmitted to the newsletter service provider together with your IP address. A connection to its servers is established only at that moment, not when you merely visit the website.

Double opt-in

Sign-up uses the double opt-in procedure: after entering your address you receive an email with a confirmation link. Only after you confirm is the address added to the mailing list. To be able to prove your consent, the service provider logs the time of sign-up and of confirmation, the IP address used in each case and the address of the form used. The legal basis for this log is Art. 6 (1) (f) in conjunction with Art. 7 (1) GDPR (duty to demonstrate consent).

Legal basis and withdrawal

The newsletter is sent on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time with effect for the future, for example via the unsubscribe link at the end of every newsletter issue or by email to me. The lawfulness of the processing carried out until then remains unaffected.

Retention period

Your email address remains stored until you unsubscribe. After that it is removed from the mailing list. The log proving your consent may be retained beyond that for as long as is necessary to defend against possible claims.

Performance measurement

The newsletter is sent without any personal evaluation of your opening and click behaviour.

Service provider

The newsletter is sent via CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. The data is processed on servers in data centres in the European Union. A data processing agreement under Art. 28 GDPR is in place with CleverReach. For more information see cleverreach.com/en/privacy-policy.

Contact by email

If you write to me, I process your email address and the contents of your message in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where a contract or pre-contractual measures are concerned, otherwise Art. 6 (1) (f) GDPR (interest in answering enquiries). I delete the data once the enquiry is dealt with and no statutory retention obligations apply.

External links

The website contains links to other services, for example to my website and shop at antonio-vitolo.de, to Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland), to Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and to Okkyo Design. These links are plain references. Data is transmitted to the respective service only once you click a link. From then on, the provider's own privacy terms apply.

Your rights

You have the following rights against me as the controller:

• access to your stored data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR).

Right to object: Where I process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, an email to av@antonio-vitolo.de is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is:

Data security

The website is delivered exclusively over encrypted HTTPS. Your input, for example in the newsletter form, is transmitted in encrypted form.

Changes

I will update this privacy policy if the website or the legal requirements change. The version published here at the time applies.