Information

PRIVACY POLICY

As of: 09 June 2026

Note: This English version is a convenience translation. The German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:
ARCHV – Inhaber:in Elena Roman, Angerstr. 22, 40593 Düsseldorf, Deutschland
E-mail: info@archv.eu

2. General Information on Data Processing

We process personal data only insofar as necessary to provide a functional website and our content and services. Legal bases are in particular the performance of a contract or pre-contractual measures, your consent, compliance with legal obligations and the safeguarding of our legitimate interests. We delete personal data as soon as the purpose of storage ceases to apply and no statutory retention periods conflict.

3. Hosting and Shop Platform

Our online shop is operated via the Shopify (Shopify International Ltd.) platform. The provider processes order, contact and usage data on our behalf as required to operate the shop. A data processing agreement is in place. Where data is transferred to third countries, this is based on appropriate safeguards (in particular standard contractual clauses).

4. Access Data / Server Log Files

When our website is accessed, information transmitted by your browser is automatically recorded: in particular IP address, date and time of access, page accessed, volume of data transferred, browser type and operating system. This data serves the technical provision, security and stability of the website (legitimate interest) and is deleted after a short time.

5. Customer Account

You can create a customer account. The data provided is processed to manage your account and handle orders. You can have your account deleted at any time.

6. Order Processing

To process your order we process inventory, contract and payment data. For the performance of the contract we share data with:

  • shipping service providers (DHL) for delivery;
  • payment service providers (Shopify Payments / Stripe, PayPal, Klarna) for payment processing;

insofar as necessary for the respective purpose.

7. Payment Service Providers

  • Shopify Payments / Stripe: When this payment method is selected, the data required for payment processing (e.g. name, address, payment data, order amount) is transmitted to the provider. The legal basis is performance of the contract. Transfers to third countries based on standard contractual clauses may occur. The provider’s own privacy notices apply additionally.
  • PayPal: When this payment method is selected, the data required for payment processing (e.g. name, address, payment data, order amount) is transmitted to the provider. The legal basis is performance of the contract. Transfers to third countries based on standard contractual clauses may occur. The provider’s own privacy notices apply additionally.
  • Klarna: When this payment method is selected, the data required for payment processing (e.g. name, address, payment data, order amount) is transmitted to the provider. The legal basis is performance of the contract. Transfers to third countries based on standard contractual clauses may occur. The provider’s own privacy notices apply additionally.

8. Newsletter

If you subscribe to our newsletter, we process your e-mail address for dispatch via Shopify Email (Shopify International Ltd.). Registration uses the Double-Opt-In procedure: after registering you receive a confirmation e-mail and are only added to the list after confirmation. The legal basis is your consent, which you can withdraw at any time with effect for the future, e.g. via the unsubscribe link in every newsletter.

9. Contact

If you contact us via the contact form or by e-mail, we process your details to handle the enquiry. The legal basis is our legitimate interest in responding or the initiation/performance of a contract.

10. Cookies and Consent

We use cookies and similar technologies. Technically necessary cookies are required for operation (legitimate interest). We use cookies for statistics and marketing only with your consent.

Consent is obtained via a cookie consent banner developed and operated by us in-house (ARCHV Consent-Management / Customer Privacy). No external consent service provider is involved; your consent data is not transferred to third parties.

Your choice — including the time and the categories consented to — is stored to document your consent in a technically necessary first-party cookie or in your browser’s local storage. You can withdraw or adjust your consent at any time with effect for the future, e.g. via the “Cookie settings” link in the footer.

11. Web Analytics and Marketing

Where you have consented, we use the following services:

  • Google Analytics 4 (provider: Google Ireland Ltd., Dublin; where applicable Google LLC, USA): audience and usage analytics and conversion measurement. Integration is via the Shopify “Google & YouTube” app; depending on the selected data-sharing level, event/conversion data is also transmitted to Google server-side (enhanced conversions). The legal basis is your consent (Art. 6(1)(a) GDPR). Transfer to third countries (USA) may occur on the basis of appropriate safeguards (EU-US Data Privacy Framework, where the provider is certified, or standard contractual clauses). You can withdraw your consent at any time via the consent tool.
  • Meta Pixel (Facebook/Instagram) (provider: Meta Platforms Ireland Ltd., Dublin; where applicable Meta Platforms, Inc., USA): processing of usage data for analytics or marketing purposes (incl. reach measurement, conversion tracking, retargeting). The legal basis is your consent (Art. 6(1)(a) GDPR). Transfer to third countries (USA) may occur on the basis of appropriate safeguards (EU-US Data Privacy Framework, where the provider is certified, or standard contractual clauses). You can withdraw your consent at any time via the consent tool.
  • TikTok Pixel (provider: TikTok Technology Limited, Dublin; where applicable TikTok Inc., USA, and affiliated companies): processing of usage data for analytics or marketing purposes. The legal basis is your consent (Art. 6(1)(a) GDPR). Transfer to third countries may occur on the basis of appropriate safeguards, in particular standard contractual clauses and supplementary measures. You can withdraw your consent at any time via the consent tool.
  • Google Ads Conversion Tracking (provider: Google Ireland Ltd., Dublin; where applicable Google LLC, USA): measurement of advertising success (conversions) and retargeting/remarketing. Integration is via the Shopify “Google & YouTube” app. The legal basis is your consent (Art. 6(1)(a) GDPR). Transfer to third countries (USA) may occur on the basis of appropriate safeguards (EU-US Data Privacy Framework, where the provider is certified, or standard contractual clauses). You can withdraw your consent at any time via the consent tool.

12. Social Media and Embedded Content

We link to or embed content from the following services: Instagram, TikTok, YouTube. When embedded content is loaded, data may be transmitted to the respective providers. Where consent is required, we obtain it via the consent tool. The providers’ privacy notices apply to processing on their platforms.

13. Transfer to Third Countries

Within the scope of the services mentioned, personal data may be transferred to countries outside the EU/EEA (in particular the USA). Where no adequacy decision exists, the transfer is based on the EU Commission’s standard contractual clauses and supplementary safeguards.

13a. Processing of Data of Artists and Creatives

Within our artistic collaborations (including the ARCHV Artist Series) we process personal data of participating artists, in particular: name, contact data, payout/bank data and tax data, profile pictures, social media profiles and portfolio/work information.

Purposes: initiation and performance of the collaboration, communication, accounting and payment, and presentation and promotion of the collaboration.

Legal bases are contract initiation and performance (Art. 6(1)(b) GDPR), compliance with legal — in particular tax and commercial — obligations (Art. 6(1)(c) GDPR), our legitimate interests in presenting the collaboration (Art. 6(1)(f) GDPR) and, where required, your consent (Art. 6(1)(a) GDPR).

Recipients may include payment service providers, tax advisors, hosting providers, marketing service providers and social media platforms. We store the data only as long as necessary; statutory retention periods apply to accounting and tax-relevant documents.

Where we use photos or videos that identifiably show the artists (e.g. portraits, behind-the-scenes, interviews), this is based on consent, which can be withdrawn at any time with effect for the future.

Photos and videos showing identifiable persons constitute personal data and are handled in accordance with the GDPR and the right to one’s own image.

14. Your Rights

You have the right to information, rectification, erasure, restriction of processing, data portability and to object to processing. You can withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

15. Data Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, in particular through encrypted transmission (SSL/TLS).

16. Currency and Changes

This Privacy Policy is currently valid. Further development of the website or changes in legal requirements may make adjustments necessary.