Privacy Policy
Data Controller
KNNK STUDIO
Hindle Creative Studios eGbR
Rüpingstr. 36 A
48151 Münster, Germany
E-Mail: info@knnk-studio.com
Authorized representatives: N. R. Hindle & K. Hindle
General Information
We process personal data only to provide our website, fulfill contractual obligations, comply with legal requirements, or based on consent.
Purpose and Legal Basis of Processing
- Order Processing & Contract Fulfillment
Art. 6(1)(b) GDPR: processing for order handling, delivery, and invoicing. - Legal Obligations
Art. 6(1)(c) GDPR: e.g., tax and commercial retention obligations. - Legitimate Interests
Art. 6(1)(f) GDPR: e.g., IT security and fraud prevention. - Consent
Art. 6(1)(a) GDPR: optional services (social media plugins, tracking, newsletter).
Payment via PayPal
If you select PayPal during checkout, personal data (e.g., name, address, email, payment information) will be transmitted to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, Luxembourg.
Legal basis: Art. 6(1)(b) GDPR (contract fulfillment).
PayPal may share data with credit agencies for identity and credit checks. More information: https://www.paypal.com/us/webapps/mpp/ua/privacy-full.
Social Media (Instagram, Facebook, Pinterest)
Our website integrates features from Instagram and Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) as well as Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland).
When visiting a page that includes such plugins or elements, the respective providers may collect data (e.g., IP address, page visited, browser information) and link this with existing user profiles. If you are logged into one of these networks, your visit can be directly linked to your account.
Legal basis: Such integrations are only activated with your consent pursuant to Art. 6(1)(a) GDPR (via cookie banner/consent tool). You may withdraw your consent at any time with future effect.
For more information, please see the providers’ privacy policies:
- Instagram/Facebook (Meta): https://privacycenter.instagram.com/policy
- Pinterest: https://policy.pinterest.com/en/privacy-policy
Data Retention
We retain personal data only as long as necessary for the purpose or as required by law. After expiration, data will be deleted.
Rights of Data Subjects
You have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Lodge a complaint with a supervisory authority (Art. 77 GDPR).
Mandatory Data Provision
Providing certain data (e.g., for invoicing) is legally or contractually required. Without these data, a contract cannot be concluded.
No Automated Decision-Making
We do not use automated decision-making or profiling under Art. 22 GDPR.