Privacy Policy
Version: 23 July 2026
1. Controller
The controller responsible for processing personal data on this website is O. Schulze / M. Monka GbR, represented by its partners Olaf Schulze and Martina Monka, trading as spectrum/lentiprint, Wolfener Str. 32–34, Building C, 12681 Berlin, Germany.
Email: info@deinwackelbild.de
Phone: +49 (0)30 982 72 27
This Privacy Policy applies to the German and English storefronts operated under Dein Wackelbild and Pictale, including the studio, store, contact forms and newsletter.
2. Legal bases
Depending on the purpose, we process personal data on the following legal bases: consent (Article 6(1)(a) GDPR), performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR), compliance with legal obligations (Article 6(1)(c) GDPR), and our legitimate interests in secure, reliable and efficient operation and the establishment or defence of legal claims (Article 6(1)(f) GDPR). Where information is stored on or read from your device, section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) also applies.
3. Hosting, security and server logs
Our hosting and technical service providers process data on our behalf to operate and secure the website. When pages are accessed, server logs may contain the requested address, date and time, referrer, browser and operating-system information, IP address and technical status data. Processing is necessary to deliver the website and protect it against abuse and attacks (Article 6(1)(f) GDPR). Log data is deleted or anonymised when it is no longer required for security and operations, subject to legal preservation obligations.
Connections to this website are encrypted using TLS. Access to administrative and production data is restricted to authorised persons and service providers who require it for their tasks.
4. Cookies, local storage and consent management
We use Complianz to request, store and manage cookie and tracking choices. The consent record may include your selected categories, a consent identifier, time, policy version and technical information needed to demonstrate and respect your choice.
Technically necessary storage or access is used only where required to transmit a communication or provide a service you expressly request, such as language selection, security, the shopping cart or checkout (section 25(2) TDDDG; Article 6(1)(b) or (f) GDPR). Analytics, advertising and other non-essential technologies are activated only after consent (section 25(1) TDDDG; Article 6(1)(a) GDPR). You can reject optional categories and withdraw consent at any time using “Manage consent” on the website. Withdrawal does not affect processing carried out before withdrawal.
Details of current cookies, providers, purposes and storage periods are listed in our Cookie Policy. Because the services used may change, that automatically maintained policy is the primary source for the current cookie inventory.
5. Contact requests
When you contact us by form, email or telephone, we process the information you provide—normally your name, contact details, message and related order information—to answer the request. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual enquiries and Article 6(1)(f) GDPR for other legitimate correspondence. We delete enquiries when they are no longer required, subject to statutory retention periods and the need to establish or defend claims.
6. Studio, image uploads and production orders
The browser-based studio initially processes preview images on your device where possible. When you save a design, add it to the cart or submit an order, the selected images, generated views, design settings, text, format, order reference, language and storefront origin may be transmitted to our server and linked to the Ecwid cart and order. This is necessary to prepare and manufacture the personalised product (Article 6(1)(b) GDPR).
Production files are protected from public listing and are accessible only through restricted administrative access or an unguessable production link used for order handling. We retain them only as long as necessary for production, delivery, customer service, justified reorders and the establishment or defence of claims. You may request earlier deletion where no legal or operational reason requires continued storage. Order and accounting records are retained for the statutory commercial and tax periods.
Please upload only content that you are authorised to use. Uploaded images may contain personal data of other people; you are responsible for informing them and obtaining any permission required for the intended production.
7. Optional AI image processing
If you actively choose an AI editing function, the source image and the selected editing instruction are sent through our server to the OpenAI API so that a modified image can be generated. The provider is OpenAI; the OpenAI group company responsible for the API service depends on our contractual account setup. The legal basis is your request and consent (Article 6(1)(a) and (b) GDPR). You can create a lenticular picture without using the AI function.
Temporary AI working files and job data are scheduled for deletion after processing, normally within about one hour. If you subsequently save the generated image as part of a design or order, it is handled as a production file under section 6. Information may be processed outside the European Economic Area. Where required, transfers are protected by an adequacy decision, standard contractual clauses or another mechanism under Chapter V GDPR. Further information is available in OpenAI’s privacy and business-data documentation.
8. Ecwid store, customer accounts and orders
We use the Ecwid by Lightspeed commerce platform to display products, provide the cart and checkout, manage customer accounts, process orders and send transactional communications. Depending on how you use the store, Ecwid processes identifiers, contact and delivery details, cart and order contents, payment status, language, consent choices and technical usage data. The legal basis is Article 6(1)(b) GDPR and, for legally required records, Article 6(1)(c) GDPR.
Ecwid acts as a service provider for central shop functions and may also process data under its own legal responsibilities for security, fraud prevention and platform operation. Its privacy information is available on the Ecwid/Lightspeed website. Optional Ecwid advertising or analytics functions are subject to your consent where required.
9. Payment and delivery providers
When you select a payment method, the payment provider shown in checkout receives the information needed to authorise and process payment, such as name, amount, order reference and payment details. We generally receive status information rather than full card or account credentials. The legal basis is Article 6(1)(b) GDPR. The selected provider’s own privacy information also applies.
We provide the recipient name, delivery address and shipment information to the postal, parcel or logistics provider used for delivery. This is necessary to perform the contract (Article 6(1)(b) GDPR).
10. Newsletter
If you subscribe to the newsletter, we process your email address, consent, language, brand/storefront origin and registration time. The subscription is stored privately in WordPress and the marketing consent is synchronised to our shared Ecwid customer list. The legal basis is your consent (Article 6(1)(a) GDPR).
You can withdraw at any time by replying to a newsletter or welcome email with the subject “Unsubscribe”, or by writing to info@deinwackelbild.de. We then stop marketing use and delete or suppress the address unless retention is necessary to document the withdrawal or comply with legal obligations.
11. Analytics, advertising and tag management
Subject to your consent, we may use Google Tag Manager, Google Analytics, Google Ads conversion measurement and TAGGRS server-side tag management to understand use of the website and measure advertising. Depending on the activated service, data may include cookie or device identifiers, truncated or complete IP information, browser data, pages and events, campaign information and purchase/conversion data.
Google services are provided in Europe by Google Ireland Limited and may involve other Google group companies. TAGGRS and other configured service providers may process data on our behalf. These services are activated only for the consent categories you select. The legal basis is Article 6(1)(a) GDPR and section 25(1) TDDDG. International transfers are protected using the mechanisms described in section 13. You can withdraw consent through “Manage consent”.
12. Recipients
Personal data is disclosed only where necessary to hosting and IT providers, Ecwid/Lightspeed, payment providers, delivery providers, OpenAI when the optional AI function is used, analytics or advertising providers after consent, professional advisers, and public authorities where legally required. Providers acting on our behalf are contractually bound as required by data-protection law.
13. International data transfers
Some providers may process data in countries outside the European Union or European Economic Area. Where the European Commission has recognised an adequate level of protection, we rely on that decision. Otherwise, we use appropriate safeguards such as the European Commission’s standard contractual clauses and, where necessary, supplementary measures. You can contact us for more information about the relevant safeguard.
14. Retention
We retain personal data only for as long as required for the stated purpose. Relevant criteria include the duration of the customer relationship, production and support needs, consent status, limitation periods and statutory commercial and tax obligations. Invoice and accounting information may need to be kept for six or ten years under German law. Shorter technical and consent records are deleted or anonymised when they are no longer required.
15. Your rights
Subject to the statutory conditions, you have the right to access your data, correct inaccurate data, request deletion or restriction, receive data you provided in a portable format, object to processing based on legitimate interests, and withdraw consent at any time. You also have the right not to be subject to a decision based solely on automated processing where the statutory requirements apply. We do not use the studio preview or AI image function to make legal or similarly significant decisions about you.
To exercise your rights, contact info@deinwackelbild.de. You may also complain to a supervisory authority. The authority responsible for our Berlin establishment is the Berlin Commissioner for Data Protection and Freedom of Information: www.datenschutz-berlin.de.
16. Changes to this policy
We update this policy when services, legal requirements or processing activities change. The version shown at the top identifies the current publication date.