1. Controller
The controller for data processing on this website is:
LytraG-System, owner: Amadou Ly
Ottostraße 5a, 47198 Duisburg, Germany
E-mail: info@lytrag.com
Telephone: +49 176 24791472
2. Principles
We process personal data only where this is necessary to provide this website, to perform a contract or on the basis of your consent. Personal data means any information that can identify you personally. Depending on the purpose, the legal basis is Art. 6 (1) (a), (b), (c) or (f) GDPR.
3. Hosting and shop system
This website runs on the Shopify platform. For customers in the European Economic Area the provider is Shopify International Limited, Dublin, Ireland. Shopify processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. This may involve transfers to third countries, which are based on the European Commission’s standard contractual clauses.
4. Server log files
When you access the website, data transmitted by your browser is collected automatically: IP address, date and time of access, page requested, referrer, browser type and operating system. This processing serves the secure and stable operation of the site. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR.
5. Cookies and consent
We use technically necessary cookies so that the shopping cart and the checkout work. These are set without consent on the basis of Section 25 (2) TDDDG. All other cookies, in particular for statistics and marketing, are set only with your consent via the cookie banner. You can withdraw your consent at any time with effect for the future by changing your selection in the banner.
6. Orders and performance of the contract
To process an order we handle your name, address, e-mail address, where applicable your telephone number, and the order and payment data. We need this data to perform the contract under Art. 6 (1) (b) GDPR. For art transactions of 10,000 euros and above, German money laundering law requires us to establish and document your identity. The legal basis is Art. 6 (1) (c) GDPR.
7. Payment service providers
Depending on the payment method chosen, we pass the data required for processing to the relevant payment service provider, for example Shopify Payments or PayPal. These providers are independently responsible for processing within the payment transaction. The legal basis is Art. 6 (1) (b) GDPR.
8. Shipping
For delivery we pass your name and delivery address to the shipping company engaged, usually DHL. For fine art transports and for shipments outside the European Union, customs authorities may also receive the data. The legal basis is Art. 6 (1) (b) and (c) GDPR.
9. Contacting us
If you write to us by e-mail or via a form, we process your details in order to handle the enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise our legitimate interest under Art. 6 (1) (f) GDPR.
10. Newsletter
For the newsletter we use a sign-up procedure with e-mail confirmation. We store your e-mail address and the time of sign-up and confirmation. The legal basis is your consent under Art. 6 (1) (a) GDPR. You can unsubscribe at any time via the link in the newsletter or by e-mailing us.
11. Reach measurement and advertising
If you have consented in the cookie banner, we use services that measure your behaviour on this website and allow us to display advertising:
- Meta pixel by Meta Platforms Ireland Limited, Dublin, Ireland, for advertising on Facebook and Instagram.
- TikTok pixel by TikTok Technology Limited, Dublin, Ireland, for advertising on TikTok and for the TikTok shop connection.
- Google services by Google Ireland Limited, Dublin, Ireland, for listing our catalogue on Google and YouTube and for measuring advertising performance.
Data may also be transferred to the USA. Such transfers are based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework or on the standard contractual clauses. The legal basis is your consent under Art. 6 (1) (a) GDPR. You may withdraw your consent at any time.
12. Customer account
You can create a customer account in order to view your orders. We process the data stored there on the basis of Art. 6 (1) (b) GDPR. You can have your account deleted at any time.
13. Storage period
We delete personal data as soon as the purpose of processing no longer applies. Statutory retention periods under commercial and tax law remain unaffected, in particular those under the German Commercial Code and the Fiscal Code. Records under money laundering law are kept for the period prescribed there.
14. Your rights
You have the right at any time to obtain free information about the personal data we process, its origin and recipients, and the purpose of processing. You also have the right to rectification, erasure, restriction of processing and data portability, and a right to object to processing based on a legitimate interest. You may withdraw consent at any time with effect for the future. Please contact info@lytrag.com.
15. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.
16. Changes
We update this privacy policy when the legal situation or our processing activities change.
Version: 23 August 2026. This is a translation for your convenience. The German version is the legally binding one.