Privacy Policy

This is a translation for your convenience. The German version is legally binding.

Last updated: 21.10.2026

1. Controller

Natalia Chvarts, Urban Cartoonery, Krossenerstr. 11a, 10245 Berlin, Germany
Email: contact@urban-cartoonery.com

We have not appointed a data protection officer, as we are not legally required to do so.

2. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and withdrawal of any consent given with effect for the future (Art. 7(3)). An informal email to contact@urban-cartoonery.com is sufficient.

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation. You may object to the use of your data for direct marketing at any time without giving reasons.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59-61, 10555 Berlin.

3. Hosting and shop system (Shopify)

Our online shop runs on the platform of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. When you visit the website, technically necessary data is processed (IP address, date and time, pages accessed, browser and device information) in order to provide and secure the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning shop). Shopify may also process data in Canada and the USA; such transfers are safeguarded by adequacy decisions of the EU Commission or standard contractual clauses. Shopify's privacy policy: https://www.shopify.com/legal/privacy

4. Orders and contract processing

To process your order, we process your name, delivery and billing address, email address, telephone number if applicable, ordered items and payment status. Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Creating a customer account is optional.

Printing and shipping. Our products are made to order by print partners and shipped directly to you. For this purpose we pass on your name, delivery address, telephone number if applicable and the ordered items to:

  • Gelato AS, Postboks 1338 Vika, 0112 Oslo, Norway (posters, mugs, phone cases)
  • Printful Latvia AS, Ojāra Vācieša iela 6B, Riga, LV-1004, Latvia (bags, backpacks, cushions, clothing)
  • Printify, Inc. or its European company (shower curtains, towels, socks, clocks)

The partners and the commissioned shipping service providers (e.g. DHL, DPD, UPS, national postal services) use the data solely for production and delivery. Legal basis: Art. 6(1)(b) GDPR. For deliveries outside the EU, the data is transferred insofar as this is necessary for the performance of the contract (Art. 49(1)(b) GDPR).

Payment. Payment data is processed directly by the respective payment service (e.g. Shopify Payments / Stripe, PayPal); we do not receive complete card or account details. Legal basis: Art. 6(1)(b) GDPR.

Storage period. We retain order and invoice data for up to 10 years due to commercial and tax law obligations (§ 147 AO, § 257 HGB); after that it is deleted.

5. Contact

If you write to us by email, via the contact form or the chat (Shopify Inbox), we process your details in order to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR (for questions about orders) or (f) (general enquiries). The data is deleted once the enquiry has been dealt with and no retention obligations apply.

6. Newsletter

You will only receive the newsletter with your consent (Art. 6(1)(a) GDPR) and after confirming your email address (double opt-in). You can unsubscribe at any time via the link in every email. Sent via Shopify Email.

7. Cookies and consent

We set technically necessary cookies (e.g. shopping cart, language setting, security) on the basis of § 25 Abs. 2 TDDDG and Art. 6(1)(f) GDPR. We use all other cookies and technologies for statistics and marketing only if you have consented in the cookie banner (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the "Cookie settings" link in the footer of the website.

8. Statistics and marketing (only with consent)

  • Shopify Analytics - anonymised statistics on the use of the shop.
  • Meta Pixel / Conversions API - Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. Measuring the success of ads on Facebook and Instagram and displaying the shop on Instagram. We are jointly responsible with Meta for the collection and transfer (Art. 26 GDPR). Privacy policy: https://www.facebook.com/privacy/policy
  • Google - Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Displaying our products in Google Shopping and measuring ads. Privacy policy: https://policies.google.com/privacy

Meta and Google may transfer data to the USA. Both companies are certified under the EU-US Data Privacy Framework.

9. Social media

On our website we link to our profiles on Instagram and Facebook. These links are simple references; data is only transferred when you click on them.

10. Changes

We will update this privacy policy when our shop or the legal situation changes. The version published here at any given time applies.