Privacy Policy

1. At a glance

This statement explains which personal data is processed when you visit this website, why, on what legal basis and for how long. The controller is the party named above. For questions about data protection, write to us at the email address named above; we have not appointed a data protection officer.

This website works without analytics, tracking, or advertising services: no Google Analytics, no advertising cookies, no social media plugins. The fonts are hosted on our own server.

2. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. With every request, the server processes the technically necessary data: IP address, date and time, page accessed, amount of data transferred, previously visited page (referrer), browser and operating system. Hostinger stores this information in server log files to deliver the website and protect it from attacks, and deletes it as soon as it is no longer needed for that purpose. We do not combine this data with other data.

The legal basis is our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). We have a data processing agreement with Hostinger (Art. 28 GDPR). The connection to this website is encrypted via TLS, recognizable by “https://” in the address bar.

3. Images and videos via Sanity

We manage the texts, images, and videos of this website in the content management system Sanity (Sanity AS, Norway, and Sanity US Inc., USA). Your browser loads images and videos directly from the image server cdn.sanity.io. In doing so, Sanity receives your IP address, information about browser and device, and the page accessed. Sanity secures transfers to countries outside the EU with the EU Commission's standard contractual clauses.

The legal basis is our legitimate interest in fast, reliable delivery of images (Art. 6(1)(f) GDPR).

4. Map of our locations (OpenFreeMap)

On the home page, the contact page, “About us,” and the location pages, a map shows where we are. The map tiles come from OpenFreeMap (Hyperknot Software Kft., Hungary) and load as soon as the map enters the visible area. In doing so, OpenFreeMap receives your IP address and browser information. According to OpenFreeMap, it sets no cookies, does not store IP addresses in access logs, and deletes the logs after 7 days, or after security incidents no later than 30 days. Delivery may run through the network of Cloudflare, Inc. (USA).

The legal basis is our legitimate interest in showing our locations clearly (Art. 6(1)(f) GDPR).

5. Chat assistant (Chatbase)

For quick answers to questions about our services, there is a chat assistant. The provider is Chatbase Inc., 2261 Market Street STE 85690, San Francisco, CA 94114, USA. The chat window loads from www.chatbase.co after the page has loaded; in doing so, Chatbase receives your IP address, browser information, and the page accessed. The script sets the cookie “chatbase_anon_id” on our domain with a random identifier, which is deleted when you close the browser.

What you type into the chat window is sent to Chatbase and answered there by an AI model. Chatbase stores the conversations in our account so that we can improve the assistant; we delete them as soon as they are no longer needed for that purpose. For personal matters, it is best to use the contact form or email.

The question box on the FAQ page sends your question through our server to Chatbase. Chatbase receives the question text and a conversation ID, but not your IP address. For this purpose, our server briefly keeps a check value (hash) of your IP address, to allow no more than 20 questions in 10 minutes.

Chatbase processes the data in the USA and secures the transfer with the EU Commission's standard contractual clauses. The legal basis is our legitimate interest in answering your questions quickly (Art. 6(1)(f) GDPR).

6. Contact form and email

When you write to us through the form, we process your details (for example name, email address, phone number, location, description of your project, and attached files) to answer your inquiry and prepare a quote. The legal basis is pre-contractual measures at your request (Art. 6(1)(b) GDPR) and your consent, which you give with the checkbox in the form (Art. 6(1)(a) GDPR). You can withdraw consent at any time by email, with effect for the future.

The form sends your inquiry to us by email, and a confirmation to you, both through Hostinger's mail server. Attached images and PDFs (up to 10 MB in total) are sent only as attachments to this email and are not kept on the server. What you add on the thank-you page is sent as a second email on the same inquiry.

So that no inquiry is lost and the form is protected against misuse, our server stores the following outside the publicly accessible area:

• check values (hashes) of your IP address and email address with a timestamp, to allow no more than 5 inquiries per hour and 3 confirmations per day: 2 days.
• in case of a sending error, the text of the inquiry without attachments, until sending succeeds: no more than 30 days.
• a log of sending errors with time and inquiry number: 30 days.

We keep your inquiry and our correspondence as long as they are needed for processing and a possible project. If an order results, the statutory retention periods under commercial and tax law of up to 10 years apply. If you write to us directly by email, we process your message in the same way.

7. Appointment via Google Calendar

After submitting the form, you can choose a consultation appointment on the thank-you page. Only when you click “Open calendar” does the booking tool from Google load (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In doing so, Google receives your IP address and browser information, and, if you book, also your name and email address. Google may transfer data to the USA and is certified under the EU-US Data Privacy Framework for this.

The legal basis is pre-contractual measures at your request (Art. 6(1)(b) GDPR).

8. Google reviews and Instagram posts

Rating, number, and individual reviews from our Google business profile are retrieved by our server through the Google Places API when the website is built, and written into the pages. Your browser does not connect to Google for this. Displayed are the name and text of each review as publicly shown on Google; translated reviews carry the note “Translated by Google.” The legal basis is our legitimate interest in showing genuine customer feedback (Art. 6(1)(f) GDPR).

Our server also downloads the images of our latest Instagram posts when the website is built, through the service Behold, and serves them itself. Your browser connects neither to Instagram nor to Behold.

9. Links to WhatsApp, Google Maps, and social networks

Buttons and links to WhatsApp, Google Maps, our Google profiles, Instagram, YouTube, and Flickr are simple links. Only when you click on them does your browser connect to the respective provider; its privacy policy then applies. If you send us your message directly via WhatsApp (WhatsApp Ireland Limited), we use it to answer your inquiry.

10. Cookies and browser storage

This website sets few cookies, and none for advertising or analytics purposes:

• artmos4_contact: is set only when the form is submitted and holds your inquiry for the thank-you page (inquiry number, name, email address, form of address, language). Deleted when you close the browser; the inquiry in it is valid for 2 hours.
• lang: remembers the language you selected in the menu for 1 year.
• chatbase_anon_id: random identifier of the chat assistant (section 5), deleted when you close the browser.

The website stores the following in your browser's storage:

• artmos4-contact-receipt: inquiry number for the thank-you page, until you close the tab.
• artmos4:faq-frage: your question from the FAQ question box, so it is ready in the contact form, until you close the tab.
• artmos4.inspiration.favorites.v1: the motifs you save on the motifs page, until you clear your selection.

The cookies “artmos4_contact” and “lang” as well as the entries in browser storage are necessary for the functions you use (§ 25(2) No. 2 TDDDG). You can delete cookies and browser storage at any time in your browser settings.

11. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). You can withdraw consent at any time, with effect for the future (Art. 7(3) GDPR). An email to the address named above is sufficient.

Right to object: if we process data on the basis of our legitimate interest, you can object at any time for reasons arising from your particular situation (Art. 21 GDPR).

You can also file a complaint with a data protection supervisory authority (Art. 77 GDPR), for example with the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

Last updated: November 2026.