1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you visit our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The person responsible for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is André Wagner, Heinz-Sielmann-Ring 2a, 14476 Potsdam, Germany, tel: 01758159305, e-mail: info@andre-wagner.com. The person responsible for the processing of personal data is the natural or legal person who decides alone or together with others about the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the Controller) and you can recognize an encrypted connection by the string “https://” and the lock icon in your browser bar.
Privacy when using this website
Updated 30 September 2026. These notices describe this website’s artwork enquiries, price access and optional advertising services.
Website operation and necessary storage
Loading the website transmits connection information needed for delivery to the hosting and infrastructure providers. This may include an IP address, time and requested resource. Provider technical logs are separate from our aggregate statistics described below. The website uses HTTPS.
Your privacy choice is stored locally in your browser as “aw-privacy-v1” for up to 180 days. It contains categories and a timestamp, not a visitor identifier. Necessary functions and forms you expressly request work independently of statistics and marketing consent.
Our own statistics, with consent
Only when statistics is enabled do we count page views and defined interactions, such as opening an artwork enquiry. Our database stores daily counts for known public pages and event types only. It does not store individual browsing histories, visitor or session identifiers, IP addresses, referrers, form contents, email addresses or telephone numbers. URL parameters and fragments are not transmitted.
Reports are available only to authorised studio users. Daily counts older than 365 days are removed on the next accepted counting operation. They represent consent-dependent events, not unique visitors. Received aggregate totals cannot be attributed to an individual.
Google Ads and Meta: optional marketing consent
Google and Meta services are activated only when technically enabled and you have accepted marketing in the privacy settings. The configured identifiers are Google Ads AW-752376761 and Meta 528669018323129. These identify the advertising account, not you.
When activated, page views are transmitted with the public page address without URL parameters or fragments. Advertising page views are skipped on pages containing parameters or fragments. We do not pass names, contact details, room photos or form contents, and do not use advanced matching here. Unlocking prices is not reported as a purchase or an invented conversion.
Connections to Google or Meta disclose technical connection data such as IP addresses and browser information to those providers. Depending on the browser and existing settings, cookies or provider identifiers may be used for advertising measurement. Processing outside the EU is possible. Further information: Google privacy information and Meta privacy information.
You can reject marketing and statistics separately at any time through “Privacy settings”. New transmissions through these features then stop. Revoking already loaded Google functions reloads the page; accessible associated cookies are removed. Withdrawal does not recall data already transmitted to providers.
Art enquiries, advice and price access
Information submitted in an enquiry is used to handle it and reply personally. Price access requires verification of your email address through a six-digit email code. Submitted contact details, the selected work and confirmation status are processed within the protected system and available to authorised studio users. Contact contents are encrypted in the application database. Technical hashes support verification, access protection and abuse prevention.
An access code is valid for ten minutes and can be used once. Five failed attempts require a new code. A confirmed session lasts up to 30 days. “Stay signed in on this device” stores the access token locally under “aw-collector-access-v1”; otherwise it is stored for the browser session. Signing out ends that session. Confirmation is neither a purchase nor automatic newsletter registration. Enquiries and registrations are retained for handling and necessary records; you may request deletion using the contact below. Statutory retention obligations can prevent immediate deletion.
Newsletter and WhatsApp are separate choices
The newsletter and any offered WhatsApp contact are separate, optional choices. Neither is required for price access. Newsletter registration requires its own email confirmation; price confirmation does not replace it. Advertising consent can be withdrawn through the provided preference or unsubscribe link, or by contacting us. Telephone numbers are not passed to advertising pixels.
Private room photographs
After confirming access you may voluntarily upload a room photograph for the requested artwork advice. Photographs are stored privately and are not used on the public website or in advertising. Authorised studio users receive time-limited access links. Upload only photographs for which you have the necessary rights and avoid identifiable people or personal documents.
You may request deletion of your photograph. Administrative cleanup covers photographs older than 180 days; it is not a promise of deletion at an exact automatic deadline. Publication or use for another purpose requires a separate agreement.
Service providers and processing grounds
Supabase supports protected forms, the database, private photograph storage and studio access. Confirmation emails are delivered through the configured email service. The application database and infrastructure technical logs involve separate processing. Supabase provider information.
Optional statistics and advertising rely on your consent. Processing requested offers and pre-contractual enquiries serves those requests; technical security and abuse prevention support safe operation. Your statutory privacy rights are unaffected.
Saved works and backups
Without signing in, your selection stays in this browser. After verifying your email, we store selected artwork paths on the server under a pseudonymous identifier for your email, so you can open the same selection on other devices. Existing guest selections are added when you sign in. Additions and removals synchronise while connected; interrupted changes stay queued locally. Browser data “aw-selection-journal-v1” contains the guest selection, account caches and pending changes. Signing out hides the account selection but retains the local cache. On a shared device, clear this website’s data to remove it.
The server selection remains until you remove individual works or request deletion of access. Pseudonymous operation identifiers and artwork paths support reliable retries. Downloaded backups and restoration links contain selected titles, image paths and page addresses. Anyone receiving a file or link can open that selection. Restoring adds to the selection. A restoration link’s URL fragment is not sent to the server in the page request.
19) Rights of the person concerned
19.1 The applicable data protection law grants you comprehensive data subject rights (information and intervention rights) to the controller with regard to the processing of your personal data, about which we inform you below:
Right of access pursuant to Art. 15 GDPR: in particular, you have a right to access your personal data processed by us, the processing purposes, the categories of personal data processed by us, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if it has not been collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and the intended effects of such processing, as well as your right to information, what guarantees under Art. 46 GDPR exist when transferring your data to third countries;
Right to rectification in accordance with Art. 16 GDPR: You have the right to rectify inaccurate data concerning you immediately and/or to complete your incomplete data stored with us;
Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 para 1 GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request restriction of the processing of your personal data as long as the accuracy of your data disputed by you is verified, if you refuse to delete your data because of improper data processing and instead request restriction of the processing of your data, if you need your data for the purpose of asserting, exercising or defending legal claims, after we no longer need this data after the purpose has been achieved or if you have submitted an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
Right to information pursuant to Art. 19 GDPR: If you have asserted the right to rectification, deletion or restriction of processing against the Controller, the latter is obliged to notify all recipients to whom the personal data relating to you have been disclosed such rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller, as far as this is technically feasible;
Right to withdraw consent granted pursuant to Art. 7 para 3 GDPR: You have the right to withdraw consent once granted to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal;
Right to complain under Art. 77 GDPR: If you consider that the processing of personal data concerning you violates the GDPR, you have the right to complain to a supervisory authority, in particular in the Member State of your whereabouts, workplace or place of alleged infringement, without prejudice to any other administrative or judicial remedy.
19.2 LEGISLATION TO INJURY
If we process your personal data in the context of a weighing of interest based on our overriding legitimate interest, you have to invoke the right of every time, for reasons which arise from your particular situation, against this processing with effect for the future.
WHEREAS, FROM THE CONSUMPTION OF THEIR RIGHT OF RESPECT, WE ADOPT THE PROCESSING OF THE DATA CONCERNED, A REPEAL WHICH MAY BE DETERMINED FOR PROCESSING WHERE THEIR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS ARE APPLIED, EXERCISE OR DEFENCE OF LEGISLATIVE RIGHTS,
WHEN THEIR PERSONAL DATA WILL BE PROCESSED BY US TO DIRECT ADVERTISING, THEY HAVE THE RIGHT TO INVEST THE PROCESSING OF ANY PERSONAL DATA RELATING TO THE PURPOSE OF THAT ADVERTISION.
DO NOT DIRECTLY USE THEIR RIGHT OF CONTRIBUTION, WE DO NOT DIRECTLY PROCESS THE DATA CONCERNED.