Privacy notice
1. Controller
Aaron Schwarzer (artistic name: THE ONLY)Bellevuestrasse 1, 10785 Berlin, Germany
Telephone: +49 176 62830148
Electronic contact: the acquisition inquiry form on the home page
2. In short
This website sets no cookies, uses no analytics, advertising or tracking tools, and loads no third-party fonts, scripts or images. Personal data is processed only if you send an inquiry, or if you pay through Stripe.
3. Visiting the website
To deliver the site, the server and the hosting provider process technical connection data such as your IP address, the time of the request, the requested file and your browser type. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating and securing the site). To limit abuse of the inquiry form, your IP address is held in the server's memory for up to 15 minutes to count submissions; it is not written to storage by the application.
4. Acquisition inquiry
Data: full name, email address, country or jurisdiction, your optional message, and a reference number and timestamp added on receipt. Purpose: to answer your inquiry and, if you wish, to prepare a purchase. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract, at your request).
The form also contains a hidden field and a timestamp used only to detect automated spam; they are not stored with your inquiry.
Recipients: your inquiry is sent to the controller by email (through the controller's email provider as a processor) and may be kept in restricted storage on the server operated by the hosting provider as a processor. It is not sold or used for marketing, and there is no newsletter.
Storage period: inquiries are deleted 12 months after the last contact, unless a contract is concluded. Data from a concluded contract is kept for the statutory commercial and tax retention periods (generally 6 to 10 years in Germany).
Providing the data is voluntary, but without name, email and country the inquiry cannot be handled.
5. Direct purchase and payment through Stripe
If you choose “Buy now”, you are redirected to a payment page hosted by Stripe. You enter your payment data, name, email address, telephone number, billing address and, optionally, a tax ID directly with Stripe, not on this website, and the seller does not see your card number. Stripe processes this data as an independent controller; see Stripe's privacy policy at stripe.com/privacy. Before the redirect, this website records only that you confirmed the legal terms and whether you asked for early delivery; this is attached to the payment as a note.
The seller receives from Stripe your name, email address, telephone number, billing address, tax ID (if given), the amount and the payment and session identifiers, and is notified by email. Legal basis: Art. 6(1)(b) GDPR (performance of, and steps before, a contract) and, for tax and accounting records, Art. 6(1)(c). Records of a concluded purchase are kept for the statutory retention periods (generally 6 to 10 years in Germany). Stripe may transfer data to countries outside the EU/EEA under appropriate safeguards (such as standard contractual clauses or the EU-US Data Privacy Framework).
No data is sent to Stripe until you continue to the payment page. Payment by bank transfer involves your bank and the seller's bank.
6. Identity and funds verification
If a purchase goes ahead, the seller may need to verify your identity and, where the law requires, the origin of funds. This is done by the seller, only for that purpose and only where required by law (Art. 6(1)(c) GDPR) or to prevent fraud (Art. 6(1)(f)).
7. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing rests on consent you may withdraw it at any time with effect for the future. Use the contact details above.
You also have the right to lodge a complaint with a data protection authority. The authority responsible for the controller is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, datenschutz-berlin.de.
8. Security
The site is served over an encrypted connection. Submissions are validated and rate-limited on the server, and inquiry data is kept in restricted storage.
9. Changes
This notice may be updated; the date at the top shows the current version.