Privacy Policy
Last updated: July 12, 2026
Introduction
eleven11artcore ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website and purchase digital artworks.
1. Responsible Party
Company: eleven11artcore
Represented by: Bernd Bienentreu
Address: Basedowstrasse 9, 99610 Sömmerda, Germany
Email: info@eleven11artcore.com
2. Data Collection & Processing
2.1 Personal Data We Collect
- Account Data: Email address, name, password (encrypted)
- Purchase Data: Name, email address, order details, payment method
- Technical Data: IP address (stored temporarily for security/fraud prevention, deleted after max. 14 days), browser type, device information
- Usage Data: Pages visited, time spent, interactions (via analytics)
2.2 How We Use Your Data
- Order Processing: To fulfill your orders and send digital artworks via email
- Customer Account: To manage your account and order history
- Communication: To send order confirmations, invoices, and customer support
- Analytics: To improve our website and services (only with your consent)
- Legal Compliance: To comply with tax and accounting requirements
2.3 Legal Basis (GDPR Article 6)
- Contract Performance: Processing orders and delivering digital artworks
- Legitimate Interest: Website security and fraud prevention
- Consent: Analytics cookies and marketing communications
- Legal Obligation: Tax records and invoice retention
3. Cookies & Tracking Technologies
We use cookies to enhance your experience on our website. You can manage your cookie preferences via the cookie banner.
3.1 Cookie Categories
✓ Essential Cookies (Required)
Session management, shopping cart, authentication. Cannot be disabled.
Analytics Cookies (Optional)
Google Analytics for website improvement (only with your consent).
Marketing Cookies (Optional)
Future marketing campaigns (currently not in use).
3.2 Google Analytics
If you consent to analytics cookies, we use Google Analytics to understand how visitors interact with our website. This data is anonymized and does not identify you personally. You can opt-out at any time via the cookie settings.
4. Data Security
We implement industry-standard security measures to protect your personal data:
- Encryption: SSL/TLS encryption for all data transmission
- Password Protection: Passwords are encrypted using bcrypt
- Secure Payment: Payments processed via Plisio (Crypto) and SEPA Bank Transfer
- Access Control: Limited access to personal data (admin only)
- Regular Backups: Database backups to prevent data loss
5. Data Sharing & Third Parties
We only share your data with trusted third-party service providers:
Payment Processors
Plisio (Worldwide) and direct SEPA Bank Transfers for secure payment processing
Hosting Services
Vercel Inc. (USA) for hosting the web application, frontend, and serverless API handlers
Email Service
Hostinger (Germany) for transactional emails (order confirmations, invoices)
Cloud Storage
AWS S3, Region eu-north-1 (Stockholm, Sweden — EU) for secure storage of digital artworks. Data is stored exclusively within the EU.
Analytics (Optional)
Google Analytics (only with your consent)
Note: We do NOT sell your personal data to third parties.
Data Processing Agreements (Art. 28 GDPR): We have concluded data processing agreements (DPA) in accordance with Art. 28 GDPR with all service providers who process personal data on our behalf.
6. Data Retention
- Account Data: Until account deletion (or 3 years of inactivity)
- Order Data: 10 years (tax and legal requirements)
- Invoices: 10 years (accounting regulations)
- Licenses: 10 years (proof of purchase, then anonymized in compliance with Art. 17 GDPR)
- Cookie Consent: 12 months (then re-prompted)
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to data processing (e.g., analytics)
- Right to Withdraw Consent: Revoke consent at any time
To exercise your rights, please contact us at info@eleven11artcore.com
8. International Data Transfers
Our primary infrastructure is located in Europe (AWS eu-north-1, Stockholm; Hostinger, Germany). Some service providers (Vercel, Google Analytics) are based in the USA. For these transfers, we rely on the adequacy decision of the European Commission for the EU–US Data Privacy Framework (DPF, July 10, 2023) and supplementary Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.
9. Children's Privacy
Our services are not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
10. Changes to This Privacy Policy
We may update this privacy policy from time to time. The "Last updated" date at the top indicates when the policy was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this privacy policy or want to exercise your rights:
Data Protection Contact
Email: info@eleven11artcore.com
Response time: Within 30 days (GDPR requirement)
12. Supervisory Authority
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (e.g., CNIL in France, ICO in UK, BfDI in Germany).