Privacy Policy / Datenschutzerklärung

1. General Information

This privacy policy explains how we process personal data when you visit our website www.aliciavaldes.eu, place an order, or contact us.
We comply with the General Data Protection Regulation (GDPR, EU 2016/679) and German data protection law.

2. Controller

Responsible for data processing:
Alicia Valdés
Schlankreye 69
20144 Hamburg, Germany
biodesign@aliciavaldes.eu

3. Data We Collect

We collect and process the following data:

  • Information provided during checkout (name, address, email, payment info)

  • Contact form and email correspondence

  • Newsletter signup (email address only)

  • Automatically collected technical data (IP address, browser, cookies, analytics)

4. Purpose of Processing

We process your data to:

  • Fulfil orders and ship products

  • Respond to enquiries and provide customer service

  • Send newsletters (only with consent)

  • Analyse website performance (anonymised)

  • Comply with legal accounting obligations

5. Legal Basis

Processing is based on:

  • Art. 6 (1)(b) GDPR – performance of a contract

  • Art. 6 (1)(a) GDPR – consent (e.g. newsletter)

  • Art. 6 (1)(c) GDPR – legal obligations (tax records)

  • Art. 6 (1)(f) GDPR – legitimate interests (website optimisation)

6. Sharing of Data

We use Squarespace for website hosting and e-commerce.
Squarespace, Inc. (USA) acts as a data processor under GDPR-compliant standard contractual clauses.
Payment processing is handled via integrated providers (Stripe, PayPal, etc.) under their own privacy terms.

We do not sell or share personal data with third parties for marketing purposes.

7. Cookies and Analytics

This website uses necessary cookies to operate securely and, where enabled, analytical cookies (e.g. Squarespace Analytics).
Visitors can adjust cookie preferences or disable analytics through browser settings.

8. Newsletter

If you subscribe to our newsletter, we store your email address to send updates about exhibitions, workshops, and new collections.
You can unsubscribe anytime via the link in the email.

9. Your Rights

You have the right to:

  • Access your stored personal data (Art. 15 GDPR)

  • Request correction or deletion (Art. 16–17 GDPR)

  • Withdraw consent (Art. 7 GDPR)

  • Object to processing (Art. 21 GDPR)

  • Lodge a complaint with the data protection authority (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

10. Storage Duration

We retain personal data only as long as necessary for the stated purposes or as required by law (e.g. 10 years for tax records).

11. Data Security

Your data is transmitted via SSL encryption (https).
We use Squarespace’s built-in security features, password-protected admin access, and secure third-party payment gateways.
Despite these measures, no internet transmission is 100% secure.

12. Contact

For questions regarding this policy, please contact:
biodesign@aliciavaldes.eu