Last updated: March 18, 2026

Quick overview: We only collect the data we need to run this website, answer your inquiries, improve the experience and fulfill legal obligations. Typical data are IP address and browser data (to keep the site functional), email and name when you contact us (to answer you), usage data like page views and clicks (to improve the site) and cookies, where we ask for your consent for analytics and preferences. Your data stays in your control. You can access, correct, delete, or export it at any time by contacting create@markenkunst.com.

1. Who we are

Responsible entity according to Art. 4 (7) GDPR:

Julian Pestal – Markenkunst
10777 Berlin, Germany
Email: create@markenkunst.com
Phone: +49 176 32264789

2. How we process your data

2.1 Our principles

We only collect personal data when it is necessary to make our website work properly, answer your questions, improve your experience or fulfill legal obligations. We never sell your data to third parties.

2.2 Legal basis

We process your data based on one of the following legal bases:

Art. 6(1) lit. a GDPR (consent) when you explicitly agree, for example via our cookie banner or when subscribing to a newsletter.
Art. 6(1) lit. b GDPR (contract) when processing is needed to fulfill a contract with you or to take steps at your request before entering into a contract, for example when you contact us with a project inquiry.
Art. 6(1) lit. c GDPR (legal obligation) when we are required by law to keep certain data, for example tax records.
Art. 6(1) lit. f GDPR (legitimate interest) when processing is necessary for our legitimate interests such as website functionality, security and basic analytics, and your interests or fundamental rights do not override these interests.

2.3 How long we keep your data

We delete your data as soon as the purpose for processing no longer applies, for example when your inquiry has been fully answered. Data may be stored longer if we are legally obliged to do so or if we need it to establish, exercise or defend legal claims. When legal retention periods expire, we delete or anonymize the data unless there is a new legal basis for further storage. As an example, tax law can require us to store invoice data for up to ten years.

3. Website hosting and infrastructure

3.1 Squarespace hosting

This website is hosted by Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA. Squarespace acts as our data processor and processes personal data on our behalf according to our instructions. We have concluded a Data Processing Agreement (DPA) with Squarespace. Squarespace is certified under the EU-U.S. Data Privacy Framework, which provides an adequate level of protection for personal data transferred to the USA.

When you visit our website, Squarespace automatically collects and stores certain information in server log files that your browser transmits. This includes the browser type and version, the operating system used, the referrer URL, the hostname of the accessing device, the time of the server request and the IP address. We do not combine this data with other data sources. The legal basis for this processing is Art. 6(1) lit. f GDPR, based on our legitimate interest in providing a secure, functional and user-friendly website. Log data is generally stored only for the duration of the session and is then automatically deleted, unless longer storage is required for security or legal reasons.

For more information about Squarespace’s data processing, please see https://www.squarespace.com/privacy.

3.2 Sub-processors

To provide its services, Squarespace uses sub-processors such as cloud infrastructure and payment providers. This can include, for example, Amazon Web Services (AWS) for hosting infrastructure, Google Cloud services for content delivery and Stripe for payment processing where applicable. You can find an up-to-date list of Squarespace sub-processors at https://www.squarespace.com/sub-processors.

4. Cookies and tracking

4.1 What are cookies?

Cookies are small text files stored on your device by your browser. They help us remember your settings, keep the website secure and understand how visitors use the site. Some cookies are technically necessary for the site to function, others are used for analytics or to remember your preferences.

You can configure your browser to inform you about the placement of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general and to delete cookies automatically when closing the browser. If you disable cookies, some features of this website may not work properly.

4.2 Types of cookies we use

We use essential cookies and analytics cookies.

Essential cookies are needed for basic website functions and security, for example to prevent cross-site request forgery and to maintain a secure session. Typical examples used by Squarespace include cookies such as “ss_cvr” or “crumb”. These cookies are usually stored only for the session or for a limited period and are processed on the basis of Art. 6(1) lit. f GDPR, based on our legitimate interest in providing a technically secure and functional website. These cookies cannot be fully disabled without impairing the website’s functionality and do not require consent.

Analytics cookies help us understand how visitors use our site, for example how many people visit which pages, which content is interesting and how visitors move through the site. An example is the Squarespace cookie “SS_MID”, which is used for visitor analytics. These cookies are only set with your consent via our cookie banner and are processed on the basis of Art. 6(1) lit. a GDPR. You can withdraw your consent at any time via our cookie banner or your browser settings.

4.3 Squarespace Analytics

We use Squarespace Analytics to analyze visitor behavior and to improve our website. Squarespace Analytics collects data such as page views and navigation paths, approximate geographic location on a country or city level, browser and device type, referral sources (how you found our website) and session duration. We do not use this data to identify you personally; we use it to understand usage patterns and optimize content and usability.

The legal basis for this processing is Art. 6(1) lit. f GDPR, based on our legitimate interest in analyzing and improving our website. Where required, we ask for your consent via the cookie banner before setting analytics cookies, in which case the legal basis is additionally Art. 6(1) lit. a GDPR. Data collected by Squarespace Analytics is stored for a period between 3 and 26 months, depending on our settings (currently configured for [BITTE AKTUELLE ANALYTICS-SPEICHERDAUER IN MONATEN EINFÜGEN] months). You can object to analytics tracking at any time by adjusting your preferences in the cookie banner or by blocking analytics cookies in your browser.

More information on Squarespace Analytics is available at https://support.squarespace.com/hc/en-us/articles/360001264507.

5. Contact and communication

5.1 Email and contact form

When you contact us by email or via a contact form, we process the data you provide, such as your email address, your name if you provide it, your phone number if you provide it and the content of your message. We use this data solely to handle and respond to your inquiry.

The legal basis for this processing is Art. 6(1) lit. f GDPR, based on our legitimate interest in communicating with website visitors and potential clients. If your inquiry is aimed at concluding or performing a contract, for example a commissioned artwork or collaboration, the additional legal basis is Art. 6(1) lit. b GDPR. We store this data for as long as it is necessary to process your inquiry and for a short follow-up period, typically until the matter is resolved plus 30 days, unless legal retention obligations require longer storage.

5.2 Newsletter (if applicable)

If we offer a newsletter, we will only send it to you if you have explicitly consented. We use a double opt-in process: after you sign up with your email address, we send you a confirmation email. Your subscription is only activated once you click the confirmation link. You can unsubscribe at any time via the link in each newsletter or by emailing create@markenkunst.com. The legal basis for sending newsletters is Art. 6(1) lit. a GDPR. If we do not currently offer a newsletter, this section does not apply.

6. Your rights

You have several rights regarding your personal data under the GDPR.

You have the right of access according to Art. 15 GDPR and can request confirmation whether we process personal data concerning you and, if so, obtain a copy of that data and further information.

You have the right to rectification under Art. 16 GDPR and can request that we correct inaccurate personal data or complete incomplete data.

You have the right to erasure (“right to be forgotten”) under Art. 17 GDPR. You can request that we delete your personal data, in particular when it is no longer needed for the original purpose, when you withdraw consent and there is no other legal basis for processing, when you object to processing and there are no overriding legitimate grounds or when your data has been processed unlawfully. Legal retention obligations can prevent immediate deletion; in such cases we restrict processing instead.

You have the right to restriction of processing under Art. 18 GDPR, for example when you contest the accuracy of the data, when processing is unlawful but you prefer restriction instead of deletion, when we no longer need the data but you require it for legal claims or when you have objected to processing and we are still assessing the situation.

You have the right to data portability under Art. 20 GDPR. You can receive the personal data you have provided to us in a structured, commonly used and machine-readable format and transmit it to another controller, where technically feasible.

You have the right to object under Art. 21 GDPR to the processing of your personal data based on Art. 6(1) lit. e or lit. f GDPR, including profiling based on those provisions. If you object, we will stop processing unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms or the processing is necessary for the establishment, exercise or defense of legal claims. You can object to direct marketing at any time and without giving reasons.

You have the right to withdraw consent at any time under Art. 7(3) GDPR. This applies to all processing based on your consent, for example for analytics cookies or newsletters. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

You have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR if you believe that the processing of personal data relating to you infringes the GDPR. You can contact the authority in your place of residence, place of work or the place of the alleged infringement.

The competent supervisory authority for Markenkunst is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin, Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de

7. How to exercise your rights

You can exercise your rights by contacting us via email, phone or postal mail using the contact details provided in section 1. We generally respond within 30 days. For complex or numerous requests, this period may be extended in accordance with Art. 12 GDPR. To protect your data, we may ask you to provide information or documentation to verify your identity before fulfilling your request.

8. Data security

We use appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. This includes SSL or TLS encryption for data transmission, secure hosting infrastructure provided by Squarespace, strict access controls so that only authorized persons have access to personal data and regular security updates. No system can be 100% secure, but we work to align our measures with current industry standards.

9. Children’s privacy

Our website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe that we have unintentionally collected data from a child, please contact us immediately at create@markenkunst.com so that we can delete this data.

10. International data transfers

Because we use Squarespace as a hosting provider, your data may be transferred to and processed in the United States. This transfer is safeguarded through Squarespace’s participation in the EU-U.S. Data Privacy Framework and through Standard Contractual Clauses included in our Data Processing Agreement where necessary. We rely on these mechanisms and additional technical and organizational measures to ensure an adequate level of data protection in line with GDPR requirements. More information on the Data Privacy Framework and Squarespace’s certification can be found at https://www.dataprivacyframework.gov.

11. Updates to this privacy policy

We may update this privacy policy from time to time, for example when we introduce new services, change our data processing practices or when legal requirements change. The current version of this privacy policy is always available on our website. If we make significant changes, we will inform you on our website and, where appropriate, by email.

12. Questions and contact

If you have any questions about this privacy policy or about how we handle your personal data, you can contact us at any time:

Julian Pestal – Markenkunst
Email: create@markenkunst.com
Phone: +49 176 32264789
[VOLLSTÄNDIGE ADRESSE EINFÜGEN]
10777 Berlin, Germany

We aim to respond to inquiries within 48 hours on business days.