Privacy policy

Status: 27.08.2025

1. general information

This privacy policy informs you in accordance with the General Data Protection Regulation (GDPR) and the Telecommunications Telemedia Data Protection Act (TTDSG) about the type, scope and purpose of the processing of personal data on this website.

Responsible for this website is:

SophiesNatureArt
Owner: Sophie Naumann
Am Bauernteich 15
04328 Leipzig
Phone: 01520 4749009
E-Mail: sophie-naumann@gmx.net

2. access data (server log files)

When you visit this website, information is automatically collected by the hosting provider webgo GmbH, Heidenkampsweg 81, 20097 Hamburg, Germany, and stored in so-called server log files.

Among other things:

  • Visited page

  • Date and time of access

  • Amount of data sent

  • Browser type and version

  • Operating system used

  • Referrer URL

  • IP address

This data is used to ensure trouble-free operation of the website and to improve the service. It is not merged with other data sources.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

3. cookies

We use the „Real Cookie Banner“ consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how „Real Cookie Banner“ works can be found at https://devowl.io/de/rcb/datenverarbeitung .

The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

Cookies may be technically necessary (e.g. to save language settings) or used for analysis and security purposes.

When you visit the website for the first time, you will be shown a cookie banner with which you can agree to the use of cookies requiring consent or reject them.

Cookies are set by Ecwid for the operation of the online store. These are only active with your consent.

Legal basis:

  • Technically necessary cookies: Art. 6 para. 1 lit. f GDPR

  • All other cookies: Art. 6 para. 1 lit. a GDPR (consent)

4. contact form (incl. encryption)

If you contact us via the contact form, we process the personal data you enter (e.g. name, e-mail address, message) exclusively for the purpose of processing your request.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

Your data is transmitted in encrypted form (SSL/TLS) to protect it from unauthorized access by third parties. Your data will not be passed on to third parties and will be deleted after your request has been processed, provided there are no legal obligations to retain it.

5. google reCAPTCHA

To protect against spam and abuse, this website uses Google reCAPTCHA v3, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA analyzes the behavior of visitors (e.g. mouse movements, dwell time) to determine whether it is a human input. Personal data (e.g. IP address) may be transmitted to Google servers in the USA.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent via cookie banner)
Privacy policy of Google: https://policies.google.com/privacy

6. use of the Ecwid online store

This website features an online store of the provider Ecwid Inc. (687 S Coast Hwy 101, Encinitas, CA 92024, USA). Ecwid makes it possible to present products and process orders directly on the website.

Data processing in connection with the Ecwid store

  • When visiting and using the online store, personal data is processed, including e.g. IP address, order information, contact data, payment data and usage data.

  • This data is transferred to Ecwid's servers in the USA and stored there.

  • Ecwid processes the data on behalf of and in the interest of the store operator for contract fulfillment, payment processing, communication with customers and fraud prevention.

Legal basis of the processing

The data processing takes place on the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR, which you give via the cookie banner.

Ecwid's data protection measures

Ecwid is certified and is committed to complying with the provisions of the GDPR. Further information on Ecwid's data protection can be found here:
https://www.ecwid.com/eu-privacy-policy

Your rights

You have the right to obtain information about your stored data at any time, to have it corrected or deleted or to object to its processing. To do so, please use the contact details above.

7. social media plugins

No social media plugins (e.g. Facebook, Instagram, Twitter) are currently actively integrated. Should this change in the future, this privacy policy will be adapted accordingly.

8. rights of the users

You have the right at any time:

  • to information about your stored data (Art. 15 GDPR)

  • to rectification of inaccurate data (Art. 16 GDPR)

  • to the erasure of your data (Art. 17 GDPR)

  • to restriction of processing (Art. 18 GDPR)

  • to data portability (Art. 20 GDPR)

  • to object to the processing (Art. 21 GDPR)

  • to revoke a given consent (Art. 7 para. 3 GDPR)

To exercise these rights, an informal notification to the above address is sufficient.

9. right of appeal to the supervisory authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Saxony this is:

Saxon data protection officer
Devrientstraße 5, 01067 Dresden
Web: https://www.saechsdsb.de

10. changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements. Please inform yourself regularly about the current status.