Privacy policy

Privacy Policy
Last updated: 20th October 2025

This Privacy Policy informs you about the processing of personal data when visiting and using my website https://melissadowden-art.com (“Website”).

1. Data Controller

Melissa Dowden
c/o Postflex #5977
Emsdettener Str. 10
48268 Greven, Germany
Email: info@melissadowden-art.com

2. Data We Collect

When you visit this website, the following device information is automatically collected:

  • IP address

  • Browser type and version

  • Time zone and language settings

  • Operating system and device type

  • Pages visited and navigation behavior

  • Referrer URL (e.g. Google, Instagram)

  • Cookie data and technical identifiers

We also collect personal data when you:

  • Place an order (name, billing and shipping address, email, phone number, payment information)

  • Subscribe to the newsletter (email address, optional location)

  • Use the contact form (email address, optional name, phone number, and your message)

3. Purposes of Data Processing

Your data is processed to:

  • Fulfil and process orders (including shipping, payment, and customer communication)

  • Send you our newsletter (only if you subscribe)

  • Improve our website technically and content-wise

  • Optimize our marketing (e.g. through analytics tools)

  • Detect potential risks and fraudulent activity

  • Communicate with you when you contact us

4. Newsletter and Contact Form

We use Shopify Mail to send newsletters, with a double opt-in procedure. If provided, your location may be used to tailor newsletter content. You can unsubscribe at any time using the link in each email.

Messages sent via the contact form are stored to process your inquiry and deleted once they are no longer needed.

5. Analytics and Security Tools

We use the following services:

  • Google Analytics 4 (with IP anonymization) for website analytics

  • reCAPTCHA v2 to prevent spam in contact forms

  • Shopify Mail with email tracking for newsletter statistics

You can opt out of Google Analytics data collection here:
https://tools.google.com/dlpage/gaoptout

6. Cookies and Consent Banner

When you visit our website, a cookie banner will appear. You can choose to allow or reject cookies for specific purposes (e.g. statistics, marketing). Consent-based cookies are only set after you provide your approval.

You can change your settings at any time via the “Cookie Settings” link in the footer:
https://melissadowden-art.com/policies/#shopifyReshowConsentBanner

7. Legal Bases

We process your data based on the following legal grounds:

  • Art. 6(1)(b) GDPR – performance of a contract (e.g. processing an order)

  • Art. 6(1)(a) GDPR – consent (e.g. newsletter subscription, cookies)

  • Art. 6(1)(f) GDPR – legitimate interests (e.g. analytics, IT security)

8. Data Retention

  • Order and billing data: 10 years (legal retention requirement)

  • Newsletter data: until unsubscribed or deletion requested

  • Contact form data: until your request is resolved, max. 12 months

9. Shared Use within the “See-mphonies” Project

As part of our “See-mphonies” project, my project partner (not an employee) has access to personal data related to this collaboration (e.g. order data, analytics). These data are used solely for joint creative and analytical purposes. A confidentiality agreement is in place.

10. Disclosure of Personal Data to Third Parties

Your data is shared with the following external service providers:

  • Shopify Inc. (platform, hosting, payment processing – based in Canada/USA)

  • Google LLC (Analytics & reCAPTCHA – based in the USA)

  • PayPal & Shop Pay (payment processing)

  • IONOS SE (domain provider, technical management)

For the production and shipping of your print orders, your personal data (e.g. name, shipping address) are transferred to our fulfillment partner theprintspace Ltd., London, UK.
The contractual partner for purchases remains Melissa Dowden. theprintspace processes these data solely to fulfill the order and under a data processing agreement.

Data is only shared with other third parties if legally required or necessary to fulfill a contract.

11. International Data Transfers

Data transfers to third countries such as Canada or the USA are carried out in accordance with Art. 44 ff. GDPR, e.g. via EU Standard Contractual Clauses or adequacy decisions.

12. Your Rights

You have the right to:

  • Request access to your stored data

  • Correct inaccurate data

  • Request deletion, unless legal retention obligations apply

  • Restrict processing

  • Request data portability

  • Object to processing based on legitimate interests

  • Withdraw your consent (e.g. for newsletter subscriptions)

To exercise your rights, please email info@melissadowden-art.com.
You also have the right to lodge a complaint with your local data protection authority.

13. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in data usage or new legal requirements. The version published on this website is the one currently in effect.

14. Contact

Melissa Dowden
c/o Postflex #5977
Emsdettener Str. 10
48268 Greven, Germany
Email: info@melissadowden-art.com