Data Privacy

Privacy Policy
1. Data Controller

The person responsible for data processing on this website is:

Ruffinengo Art & Design

Luca Ruffinengo
Brabanter Str. 22, 65191 Wiesbaden
Email: contact@ruffinengo.studio

2. Data Collection on Our Website

a) Hosting and Server Log Files

When you visit our website, our hosting provider automatically collects technical data (server log files), such as browser type, operating system, referrer URL, IP address, date and time of access. This data serves the technical security and optimization of the website. Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in the secure and stable operation of the website.

b) Cookies and Usercentrics (Cookie Consent Tool)

Our website uses cookies. These are small text files stored on your device. To give you control over cookies, we use Usercentrics, a cookie consent manager from Usercentrics GmbH, Rosental 4, 80331 Munich, Germany.

What data is processed?

Usercentrics stores your consent or withdrawal regarding cookie usage. The following data is collected:- Your cookie settings
- Browser type and version
- Operating system
- Date and time of the visit
- IP addressLegal basis: Processing is carried out in accordance with Art. 6(1)(c) GDPR, as we are required to obtain your consent in a legally compliant manner.

Purpose: Usercentrics allows us to store your cookie settings according to your selection and set cookies only after your consent.Storage duration: Your cookie settings are stored for up to 2 years, after which you will be asked again.

Sharing with third parties: Your cookie settings are not shared with third parties, unless required by law.

Withdrawal: You can withdraw your consent at any time by accessing the cookie settings on our website again or by configuring your browser to delete cookies.

Further information can be found in Usercentrics' privacy policy:
https://usercentrics.com/privacy-policy/

3. Contact Form

If you send us inquiries via the contact form, your details from the inquiry form including your contact information (e.g., name, email) will be stored by us for processing your inquiry and for any follow-up questions. We process this data on the basis of Art. 6(1)(b) GDPR, insofar as the inquiry relates to the performance of pre-contractual measures or contract execution, or pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in efficient handling of your inquiry.

The data you enter in the contact form remains with us until you request deletion, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

4. Sale of Posters (Online Shop)

If you order posters on our website, we collect and process your personal data (e.g., name, address, email address, payment details) exclusively for the fulfillment of your order. Processing is carried out in accordance with Art. 6(1)(b) GDPR, insofar as this is necessary for the performance of the contract.

For payment processing, we use Stripe & PayPal . Your payment data is transmitted encrypted to the respective service provider.

Data is deleted after complete handling of the contract and after expiration of any statutory warranty and retention periods, unless you have expressly consented to further storage.

5. Social Media Buttons (Instagram & TikTok)

Our website includes buttons that link to our social media profiles:

Instagram: [Soon to be added]

TikTok: [Soon to be added]

These buttons are pure links. No automatic data transmission to Instagram or TikTok occurs unless you click the button yourself. Once you click one of the buttons and open the respective social media platform, the privacy policies of Instagram (Meta) or TikTok apply. We have no influence on further data processing by these providers.You can view the privacy information of the providers at:

- Instagram/Meta: https://www.facebook.com/privacy/policy

- TikTok: https://www.tiktok.com/legal/privacy-policy

6. Your Rights

You have the following rights regarding your personal data:- Right to information (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If you wish to exercise any of these rights, please contact us using the contact details provided above.

7. SSL/TLS Encryption

This website uses SSL/TLS encryption for secure data transmission. You can recognize an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and the lock symbol appears in your address bar.



Date:
May  2026