Privacy policy
Last updated: October 2026
1. Controller
ATELIER 3K GbR
St. Georgener Str. 7
79111 Freiburg
Deutschland
Email: info@atelier3k.de
2. Overview
We process personal data only as needed to operate our online shop, fulfil contracts, communicate with you, or based on your consent or another legal permission. We currently do not use any analytics, tracking or marketing tools.
3. Hosting and server log files
Our online shop is hosted by netcup GmbH (Daimlerstraße 25, 76185 Karlsruhe, Germany). The servers are located in Germany. When you visit the site, technical data (e.g. IP address, date/time, requested URL, browser type) is processed in server log files to ensure secure and stable operation (legal basis: Art. 6(1)(f) GDPR). Log files are kept only as long as needed for this purpose and then deleted. netcup GmbH processes this data solely on our behalf. Further information: netcup privacy policy.
Fonts and all other website files are served from our own server. No connections to Google Fonts or other third parties are made when you load a page (exception: card payment, see section 5).
4. Orders
When you place an order we process the data you provide (e.g. salutation, name, billing and delivery address, email address, optional phone number, order and payment details). Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR for statutory retention obligations. We keep order and invoice records for the periods required by commercial and tax law (up to 10 years).
Orders are placed without a customer account; no login or password is required. We store your details only to process the respective order. You can check the status of your order via the “View order” link in your order confirmation. You can request deletion of your data at any time by emailing info@atelier3k.de; data we are required to retain is restricted until the retention period ends.
5. Payment processing
Mollie. Card and Klarna payments are processed by Mollie B.V. (Keizersgracht 126, 1015 CW Amsterdam, Netherlands). We transmit the data needed for the payment (e.g. name, billing address, email address, order amount, order number) to Mollie. After dispatch we inform Mollie of the order’s shipping status. Legal basis: Art. 6(1)(b) GDPR. See Mollie privacy.
Card payment. The card input fields on the checkout page are loaded directly from Mollie (js.mollie.com), which transmits your IP address to Mollie. Your card details are sent directly to Mollie; we do not receive them (legal basis: Art. 6(1)(b) GDPR).
Klarna. If you pay with Klarna, Mollie passes your contact, address and order data to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna verifies your identity and creditworthiness, where applicable using credit agencies, and on that basis decides automatically whether the selected Klarna payment method can be offered (Art. 6(1)(b) and (f) GDPR, Art. 22(2)(a) GDPR). You may choose a different payment method at any time. Details: Klarna privacy.
Prepayment. If you pay by bank transfer, you receive our bank details with the order confirmation. The payment is handled by our bank, which processes your name, bank details and payment reference (Art. 6(1)(b) GDPR).
6. Shipping
We ship with DHL Paket GmbH (Sträßchensweg 10, 53113 Bonn, Germany). For delivery we share only your name and delivery address with DHL (Art. 6(1)(b) GDPR). We do not pass your email address or phone number to DHL.
7. Email delivery
To send and receive emails (e.g. order and shipping confirmations, invoices, replies to enquiries, newsletters) we use the email service of united-domains GmbH (Gautinger Straße 10, 82319 Starnberg, Germany). Your email address and the content of the message are transmitted via united-domains’ servers (Art. 6(1)(b) and (f) GDPR). See united-domains privacy.
8. Cookies and consent management
We only use technically necessary cookies that are strictly required to operate the shop (legal basis: Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR):
- session-: keeps your cart and checkout progress during your visit; deleted when you close the browser.
- timezone: stores your time zone so dates and times display correctly.
- cookie-preference: stores your choice in the cookie banner.
Should we use optional cookies or similar technologies in the future, we will do so only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change your choice at any time via “Manage cookies” in the footer.
9. Contact by email and contact form
If you email us or use the contact form, we process the details you provide (e.g. salutation, name, email address, phone number, subject, message) to handle your request (Art. 6(1)(b) or (f) GDPR). We delete this data once your request has been fully dealt with, unless statutory retention obligations apply.
10. Newsletter
You can sign up for our newsletter when placing an order. We process your email address and name based on your consent (Art. 6(1)(a) GDPR). Sign-up uses double opt-in: you receive an email with a confirmation link, and your address is only activated once you click it. To document your consent we store the time of sign-up and confirmation. You can unsubscribe at any time via the link in every newsletter or by emailing info@atelier3k.de. After unsubscribing we remove your address from the mailing list.
11. External links
Our website contains plain links to external sites (e.g. Instagram). No content from these providers is embedded. Data is only transmitted when you click a link; the respective provider’s privacy policy then applies.
12. Transfers to third countries
We do not ourselves transfer your data to countries outside the European Union or the European Economic Area.
13. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15–20 GDPR). You may withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Lautenschlagerstraße 20, 70173 Stuttgart, Germany).
14. Right to object
Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims. An informal objection to info@atelier3k.de is sufficient.
15. Obligation to provide data
Providing the data marked as required is necessary to conclude a contract. Without this data we cannot process your order.
Privacy questions: info@atelier3k.de