Privacy policy

PRIVACY POLICY

Last updated: May 20, 2026

Luka Torkovic Art & Media Studio operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Luka Torkovic Art & Media Studio is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

1. DATA CONTROLLER (VERANTWORTLICHER)

For the purpose of the EU General Data Protection Regulation (GDPR) and applicable data protection laws, the data controller responsible for processing your data is:

Luka Torkovic Art & Media Studio
Lohbekstieg 32D, 22529 Hamburg, Germany
Email: legal@lukatorkovic.art
Phone: +49 179 1245618

2. LEGAL BASIS FOR DATA PROCESSING (RECHTSGRUNDLAGEN)

If you reside within the European Economic Area (EEA), we process your personal information based on the following legal frameworks under the GDPR:

  • Contractual Performance (Art. 6(1)(b) GDPR): To fulfill your orders, manage your account, process payments, and arrange shipping.
  • Consent (Art. 6(1)(a) GDPR): For sending marketing communications, setting up tracking cookies, and running personalized advertising where you have explicitly opted-in via our Cookie Banner.
  • Legitimate Interests (Art. 6(1)(f) GDPR): To protect our store against fraud, secure our website, optimize the checkout user experience, and handle regular customer support inquiries.
  • Legal Obligations (Art. 6(1)(c) GDPR): To comply with German commercial, tax, and accounting law retention requirements.

3. PERSONAL INFORMATION WE COLLECT OR PROCESS

We may collect or process the following categories of personal information depending on how you interact with our Services:

  • Contact details: including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information: including credit card, debit card, payment confirmation, and transaction details. Payment details are securely processed directly by our payment gateways.
  • Account information: including your username, password, security questions, preferences, and settings.
  • Transaction information: including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange, or cancel.
  • Communications: including the information you include in customer support emails or contact forms.
  • Device and Usage information: automatically collected data including your IP address, browser type, network connection, device details, and timestamps of your interactions with our website through cookies.

4. HOW WE DISCLOSE PERSONAL INFORMATION

We share your data with trusted processors who execute technical operations on our behalf:

  • Shopify: Our e-commerce platform host. Data is transmitted to and shared with Shopify and its affiliates to manage transactions and optimize infrastructure.
  • Fulfillment & Shipping Carriers: To safely package and deliver your physical coloring books.
  • Payment Gateways: To guarantee secure transactions.
  • Marketing Partners: Where you have explicitly provided cookie opt-in consent to support performance tracking and analytics.

5. INTERNATIONAL DATA TRANSFERS

Because our website is hosted by Shopify, your personal information may be transferred, stored, and processed outside the European Economic Area (EEA), including to Canada and the United States. To ensure an adequate level of data protection, we rely on recognized transfer mechanisms, including the European Commission's Standard Contractual Clauses (SCCs), or we verify that the recipient is certified under an approved data protection framework (such as the EU-U.S. Data Privacy Framework).

6. SECURITY AND RETENTION OF YOUR INFORMATION

We implement technical and organizational security measures to protect your data. However, please note that no transmission over the internet is completely bulletproof.

We retain your personal data only as long as necessary to fulfill the purposes outlined (e.g., managing your account or delivering your order). Additionally, we are bound by German commercial and tax laws (Handelsgesetzbuch and Abgabenordnung) to retain transaction records and tax-relevant data for up to 10 years.

7. YOUR LEGAL RIGHTS UNDER THE GDPR

As an EU resident, you possess the following absolute rights regarding your data. You may exercise these at any time by contacting us at legal@lukatorkovic.art:

  • Right of Access (Art. 15 GDPR): Request a copy of all data we hold about you.
  • Right to Rectification (Art. 16 GDPR): Request corrections to inaccurate or incomplete data.
  • Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Request deletion of your personal records, provided it does not conflict with legal retention duties.
  • Right to Restriction of Processing (Art. 18 GDPR): Request that we limit how we use your data.
  • Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
  • Right to Object (Art. 21 GDPR): Object to data processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent (Art. 7(3) GDPR): Revoke your cookie or marketing consent at any time, effective immediately for the future.

8. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If you believe our data processing practices violate GDPR regulations, you have the right to lodge an official complaint with a data protection supervisory authority. For Hamburg, the responsible authority is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
Website: https://datenschutz-hamburg.de

9. THIRD-PARTY WEBSITES AND LINKS

Our website may feature hyperlinks to external platforms or social media widgets. Clicking these means third parties may track your data according to their own independent privacy notices. We carry no responsibility for their tracking architectures.

10. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this policy occasionally to align with technical modifications or evolving legal requirements. Any modifications will display an updated "Last updated" date at the very top.