Privacy Policy
Last updated: October 2026
1. Controller
The controller responsible for data processing on this website is:
Kai Krause, Coquistraße 14, 39104 Magdeburg, Germany
E-Mail:
hello@krausekai.de
No data protection officer has been appointed, as there is no legal obligation to do so.
2. Overview
I only process personal data where this is necessary to run this website, to answer your enquiries and to sell my paintings. The legal bases are in particular Art. 6 (1) GDPR:
(a) your consent,
(b) a contract or pre-contractual steps (e.g. enquiry, offer, purchase),
(c) legal obligations (e.g. tax record-keeping),
(f) my legitimate interest in a secure, functioning website.
Data is deleted as soon as its purpose no longer applies and no statutory retention periods require otherwise.
3. Hosting and server log files
This website is hosted by Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, USA. When you visit the site, Webflow automatically processes technical data sent by your browser: IP address, date and time, page visited, referrer URL, browser type and operating system. This is necessary to deliver the website and protect it against attacks (Art. 6 (1)(f) GDPR).
A data processing agreement is in place with Webflow. Data may be transferred to the USA. Webflow is certified under the EU-US Data Privacy Framework; transfers are based on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses. Images and files are delivered via Webflow's content delivery network. The domain krausekai.de and my mailbox are managed by ALL-INKL.COM (see section 7); the website itself is not hosted there.
4. SSL/TLS encryption
This site uses SSL/TLS encryption, recognisable by "https://" and the padlock icon in your browser's address bar.
5. Cookies and consent
Technically necessary cookies – for example to store your cookie choices or your language setting – are set on the basis of § 25 (2) TDDDG and Art. 6 (1)(f) GDPR.All other cookies and similar technologies are only used with your consent (§ 25 (1) TDDDG, Art. 6 (1)(a) GDPR), which is obtained via the cookie banner (Finsweet Cookie Consent). It runs directly on this website; your choice is stored in a cookie in your browser and is not transmitted to third parties. You can change or withdraw it at any time via the "Cookie settings" link in the footer. You can also delete or block cookies in your browser.
6. Analytics with Google Analytics
With your consent, I use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how this website is used. Usage data (e.g. pages visited, time on page, device type, approximate location) is collected using cookies; IP addresses are shortened. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6 (1)(a) GDPR. You can withdraw your consent at any time via the cookie settings. Google Analytics is not loaded without your consent. The data is deleted after 14 months. A data processing agreement is in place with Google.
7. Contact and enquiries
When you email me – for example via the "Enquire" button, to try a painting at home or to book a studio visit – I process the information you provide (name, email address, content of your message and, if applicable, address and phone number) in order to answer your enquiry and, where relevant, make you an offer. The legal basis is Art. 6 (1)(b) GDPR, or Art. 6 (1)(f) GDPR for general enquiries.My emails are stored with ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany; a data processing agreement is in place. Enquiries that do not lead to a purchase are deleted after two years at the latest, unless you ask me to delete them sooner.
8. Purchase and order processing
If a purchase is made, I process the data needed to fulfil the contract: name, billing and delivery address, email address, phone number if applicable, and payment details (Art. 6 (1)(b) GDPR).
- Shipping: To deliver your painting, I pass your name and delivery address to the shipping company used – depending on the destination e.g. DHL, DPD, GLS or, especially for international shipments, FedEx; your email address or phone number only with your consent or where needed for delivery (e.g. delivery notification). For shipments outside the EU, the carrier transmits the data required for customs clearance to the authorities of the destination country (Art. 49 (1)(b) GDPR).
- Payment via PayPal: If you pay with PayPal, your payment data is transferred to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal's privacy policy applies.
- Bank transfer: If you pay by bank transfer, I see the details your bank transmits (name, IBAN, payment reference).
- Retention: Invoices and tax-relevant records are kept for the statutory periods (§ 147 AO, § 257 HGB – up to 10 years) (Art. 6 (1)(c) GDPR).
9. Newsletter
If you sign up for my newsletter, I process your name and email address to send you occasional news about new paintings, exhibitions and prints. The legal basis is your consent (Art. 6 (1)(a) GDPR). After signing up, you will receive an email asking you to confirm your subscription (double opt-in); the time of sign-up and confirmation and your IP address are stored as proof.
For sign-up and sending, I use MailerLite (UAB "MailerLite", J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania). Your data is stored on MailerLite servers in the EU; a data processing agreement is in place. MailerLite can evaluate whether a newsletter was opened and which links were clicked; this helps me improve the newsletter.[Only if Mailchimp is also used:] I also use Mailchimp (The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA) for sending. Data is transferred to the USA in the process; Mailchimp is certified under the EU-US Data Privacy Framework, and standard contractual clauses also apply.
You can unsubscribe at any time via the link in every email or by writing to
hello@krausekai.de. Your data will then be removed from the mailing list.
10. Fonts and external scripts
The fonts on this website are hosted locally; no connection to Google or other font providers is established when you visit the site.
11. Links to Instagram and other sites
This website links to my Instagram profile, duk Galerie and press articles. These are plain links – data is only transmitted to the respective provider once you click them. Instagram is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland; its privacy policy applies.
12. Your rights
You have the right at any time to
- access the data stored about you (Art. 15 GDPR),
- rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18),
- data portability (Art. 20),
- withdraw your consent with effect for the future (Art. 7 (3)).
Right to object (Art. 21 GDPR): Where I process data on the basis of my legitimate interest, you may object at any time on grounds relating to your particular situation.
An informal email to
hello@krausekai.de is sufficient.You also have the right to lodge a complaint with a data protection supervisory authority, for example the one responsible for me: Landesbeauftragter für den Datenschutz Sachsen-Anhalt, Magdeburg – datenschutz.sachsen-anhalt.de.
13. Changes
I will update this privacy policy if the website or the legal situation changes. The version published here applies.
