Privacy

English translation of the German information. Mandatory consumer rights remain unaffected.

Last updated: October 2026

1. Controller

The controller for this website is Stesan Finanzmanagement GmbH, Korbmacherstraße 7, 31171 Nordstemmen, Germany, represented by the managing directors Stephan Sandau and Tim Burckhardt. Email: kontakt@paulasue.de.

The works are sold by the artist Paula Sue Konrad herself (c/o Stesan Finanzmanagement GmbH, Korbmacherstraße 7, 31171 Nordstemmen). She is independently responsible for enquiries about a work and for any sale. Messages to kontakt@paulasue.de reach both her and us.

2. In brief

This website does not set cookies. Only if you choose a design in the "Design" menu does your browser remember that choice (section 5). There are no analytics or tracking services, no advertising, no embedded content from other providers and no social media plugins. Fonts, images and scripts are only loaded from this website's own server. Personal data is only processed to deliver the pages technically and when you write or buy a work.

3. Hosting and technical support

The website is technically supported by a service provider and hosted by ALL-INKL.COM - Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, where the mailbox is also located. Both only process data on our behalf. Data processing agreements under Art. 28 GDPR are in place for this.

When you request a page, the server processes your IP address and the technical details of your browser in order to deliver the page to your device. Access logs are switched off for this website, so this data is not stored. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is being able to show you the website.

4. Encryption

The connection to this website is encrypted using TLS, which you can recognise by "https://" in the address bar.

5. Remembered design choice

If you choose a different design in the "Design" menu, your browser stores this choice in its local storage (localStorage, entry "design") so that the website appears that way on your next visit. The entry only contains the name of the design, stays on your device and is not sent to the server. Storing it is strictly necessary for the service you expressly requested and therefore permitted without consent (Section 25(2) no. 2 TDDDG). You can change the choice in the menu at any time or delete the website data in your browser.

6. Contact by email and contact form

If you write, for example with a question, a price enquiry or a price suggestion, your email address, your name and the content of your message are processed in order to reply. The legal basis is Art. 6(1)(b) GDPR where a possible purchase is concerned, otherwise Art. 6(1)(f) GDPR. The legitimate interest is then handling and answering your enquiry. Messages are deleted once the enquiry has been dealt with, unless statutory retention obligations apply. The email links on this website only open your own email program. The website itself does not transmit anything.

If you use the contact form, the web server sends your details (email address, message and, if provided, name, work and price suggestion) by email to the mailbox kontakt@paulasue.de. The website does not store them. The same purposes, legal bases and deletion periods apply as for emails.

7. Buying a work

If you buy a work, the artist as seller processes the data needed for the contract, payment and delivery: name, address, email address, a phone number if needed and payment details. The legal basis is Art. 6(1)(b) GDPR. Recipients are, where necessary, the shipping company that delivers the parcel and, for bank transfers, the banks involved. Invoices and accounting records are kept for eight years, tax-relevant business letters for six years and records and financial statements for ten years, each from the end of the calendar year (Section 147 AO, Section 14b UStG, Art. 6(1)(c) GDPR).

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). Where processing is based on Art. 6(1)(f) GDPR, you may object to it on grounds relating to your particular situation (Art. 21 GDPR). An informal email to kontakt@paulasue.de is enough; it reaches both us and the artist.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

9. Obligation to provide data

You are not obliged to provide any data. Without an email address, however, no reply is possible, and without a name and address no sale can be completed. There is no automated decision-making or profiling.

10. Links to other websites

If you follow a link to another website, for example Instagram, that provider's privacy policy applies.