Privacy Policy
01At a glance
This website is a portfolio. It does not use cookies, advertising, cross-site tracking, social media plugins or embedded third-party content. Fonts, images and videos are delivered from this website's own server. To see how the website is used, it counts visits with Umami, a cookieless statistics service that does not identify you (section 4). Beyond that, personal data is only processed where the hosting technically requires it, and when you write to me by email.
02Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Maximilian Auer
Postal address: see the imprint
Email: contact@retricdreams.com
A data protection officer is not required and has not been appointed.
03Hosting and server log files
When you open this website, the server necessarily receives your IP address, the date and time, the file requested, the referring page and your browser and operating system, and briefly records them in log files. This is needed to deliver the website and keep it secure and stable. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure and error-free operation of the website. My hosting provider processes this data on my behalf under Art. 28 GDPR. The log files are deleted once they are no longer needed for this purpose, unless a security incident requires keeping them longer to clarify it.
04Visitor statistics (Umami)
To understand which works and pages are of interest and where visitors come from, this website uses Umami, a privacy-friendly statistics service provided by Umami Software, Inc., United States. The statistics are stored on servers in the European Union.
When you open a page, a small script records the page address (without the part after "#"), the referring page, your browser, operating system, device type, screen size, language and the country derived from your IP address. It also counts how the website is used: clicks on a print shop, the email address, the social media links and a work's Instagram post; which works are opened, how they are reached and how many seconds each is looked at in the viewer; how the viewer is closed; the use of the gallery's controls; which sections of a page you reach; and, when a page is not found, the address asked for and the page that linked to it. Your IP address is used only briefly, to deliver the request, to form the anonymised identifier and to derive the country, and is not stored in the statistics. Visits are grouped using a short-lived, anonymised identifier that cannot be traced back to you and is not used across other websites. Umami does not set cookies and does not store identifiers on your device.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is understanding, in anonymous and aggregated form, how the website is used, in order to improve it. Umami processes the data on my behalf under Art. 28 GDPR. If your browser sends a "Do Not Track" signal, no statistics are recorded. You can also block the script with a content blocker.
05Encryption
This website is served over an encrypted connection (HTTPS/TLS). You can recognise it by the lock symbol and "https://" in your browser's address bar. Data you transmit to this website cannot be read by third parties in transit.
07Contact by email
If you write to me by email, I process your email address, your name if given, and your message to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR for enquiries about a commission or other contract, and Art. 6(1)(f) GDPR otherwise, where my legitimate interest is answering messages sent to me. Your data is deleted once the matter is settled, unless statutory retention obligations require longer storage. My email provider processes it on my behalf under Art. 28 GDPR.
08Links to other websites
This website links to shops where prints are sold (Displate, INPRNT, Redbubble, Society6) and to my profiles on Instagram and YouTube. These are plain links: no data is sent to these services when you visit this website. Only when you click a link does your browser open the other website, and from then on its operator's privacy policy applies. Some of these providers are based outside the European Union, for example in the United States.
09Your rights
Regarding your personal data, you have the right to:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR)
To exercise these rights, an email to contact@retricdreams.com is enough.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work, or where the alleged infringement took place. The authority responsible for this website is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.
10No automated decisions
There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.
11Changes to this policy
This policy is updated whenever the website or the legal requirements change. The version published here always applies.