Privacy policy
Privacy Policy
Last Updated: September 4, 2026
1. An Overview of Data Protection
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.
Data Collection on This Website
- Who is responsible for the data collection on this website? The data processing on this website is carried out by the website operator. You can find their contact details in the "Information about the Responsible Party" section of this privacy policy or in our Imprint.
- How do we collect your data? On one hand, your data is collected when you communicate it to us. This can be, for example, data you enter into a contact form or during checkout. Other data is collected automatically or after your consent by our IT systems when you visit the website. This is mainly technical data (e.g., internet browser, operating system, or time of page access).
- What do we use your data for? Part of the data is collected to ensure the error-free provision of the website. Other data can be used to analyze your user behavior, process your orders, ship your artwork, and deliver digital downloads.
- What rights do you have regarding your data? You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future.
2. Information about the Responsible Party (Controller)
The responsible party for data processing on this website is:
Cornelia Vèronique Renz
[Kitsunari Studio]
Treffauerstr. 46
81373 Munich, Germany
Phone: +49 174 754 720 5
E-mail: info@soyy.studio
The responsible party (Controller) is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, e-mail addresses, etc.).
3. General Statutory Information
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Object to Data Collection in Specific Cases (Art. 21 GDPR)
If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Right to Lodge a Complaint with a Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a standard, machine-readable format.
Information, Erasure, and Correction
Within the framework of the applicable statutory provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of the data processing and, if necessary, a right to correction or deletion of this data.
4. Data Collection on Our Website
Cookies and Local Storage
Our website uses cookies or local browser storage to ensure technical functionality (such as keeping items in your shopping cart). Essential cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in providing an optimized, error-free service. Non-essential cookies (such as tracking or marketing tools) are only stored if you give your explicit consent via a cookie banner (Art. 6 para. 1 lit. a GDPR).
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. The processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and stable operation of the website).
Account Creation & Customer Data
If you create a customer account, we store the data you enter (such as name, address, and email) to simplify future purchases on the basis of Art. 6 para. 1 lit. b GDPR (performance of a contract).
5. Processing of E-Commerce Data (Orders, Shipping, and Downloads)
Contract Fulfillment and Shipping (Physical Artworks)
When you purchase a physical artwork, we process your personal data (name, billing address, shipping address, and contact information) to fulfill our contractual obligations.
- Legal Basis: Art. 6 para. 1 lit. b GDPR (performance of a contract).
- Data Transfer: We pass your shipping address and contact details (email or phone number for delivery notifications) to the shipping carrier responsible for delivery (e.g., DHL, FedEx, UPS, or Deutsche Post).
Delivery of Digital Downloads
When you purchase digital products, we process your email address to automatically send you the download link or to provide the file within your customer account.
- Legal Basis: Art. 6 para. 1 lit. b GDPR (performance of a contract).
6. Payment Service Providers
We integrate third-party payment services on our website to ensure secure, convenient payment processing. When you place an order, your payment data is transmitted directly to the payment processor.
Stripe
If you choose payment via Stripe, your payment data will be forwarded to Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
- Legal Basis: Art. 6 para. 1 lit. b GDPR (payment processing for contract fulfillment).
- Detailed information can be found in Stripe's Privacy Policy.
PayPal
If you pay via PayPal, your data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
- Legal Basis: Art. 6 para. 1 lit. b GDPR.
- Detailed information can be found in the PayPal Privacy Statement.
7. Cookie Consent Technology (Cookie Banner)
Our website uses a cookie consent technology to obtain your consent for storing certain cookies on your device or using specific tracking technologies, and to document this in accordance with data protection regulations.
- Legal Basis: Art. 6 para. 1 lit. c GDPR (Legal obligation to obtain explicit consent for non-essential cookies).
- How it works: When you enter our website, your consent choices are saved in a cookie or local storage so that your preferences are remembered on your next visit. This data is not shared with the cookie consent provider unless necessary to log your legal consent.
8. Email Newsletter
If you subscribe to our free email newsletter to receive updates about new artworks, exhibitions, and special offers, the data you enter into the subscription form (at least your email address) will be processed by us.
- Double Opt-In Process: To ensure that the newsletter registration is actually made by the owner of the email address, we use the so-called "Double Opt-In" process. After registering, you will receive a confirmation email. You must click the confirmation link to activate your subscription.
- Legal Basis: The processing of your data is based entirely on your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR.
- Revocation / Unsubscribe: You can revoke your consent to receive the newsletter at any time for the future. You can unsubscribe by clicking the "Unsubscribe" link found at the bottom of every newsletter email, or by contacting us directly via the email listed in the Imprint.