Privacy Policy

1. Data Controller

The data controller is OM Gallery. Contact information can be found in the legal notice.

2. Collection and Storage of Personal Data

We collect the following data: name, email address, payment information, IP address, and media uploaded by you. This data is used to provide our services, process payments, and improve our platform.

3. Use of Cookies

We set technically necessary cookies for login, language settings and to store your cookie choice. Cookies for statistics and marketing are only set with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw or change your consent at any time with effect for the future via the "Cookie settings" link at the bottom of every page.

3.1 Web analytics with Matomo

With your consent ("Statistics" category) we use the open-source software Matomo to analyze how our website is used, for example which pages are viewed and where visitors come from. Matomo runs on our own server (analytics.crispy-web.com); the data is not passed on to third parties. Processed data includes the IP address, pages viewed, date and time, browser, operating system and referring page. Matomo sets the cookies _pk_id (up to 13 months) and _pk_ses (30 minutes). The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. If you withdraw consent, we delete these cookies in your browser and collect no further data.

3.2 Meta Pixel

With your consent ("Marketing" category) we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. It lets us measure whether ads on Facebook and Instagram lead to visits and sign-ups on our website and show ads more precisely. Data such as the IP address, browser data, pages viewed and events like a completed registration are transmitted to Meta; the pixel sets the cookie _fbp (up to 90 days). We and Meta are joint controllers for collecting and transmitting the data (Art. 26 GDPR); Meta is responsible for further processing. Meta may transfer data to the USA; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you can withdraw at any time via "Cookie settings". More information: https://www.facebook.com/privacy/policy/

4. Sharing of Data

We do not share your data with third parties except: (a) for payment processing with payment service providers, (b) when legally required, or (c) with your explicit consent. We use trusted third-party providers for hosting and payment processing.

5. Data Security

We implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse. Data transmissions are encrypted via HTTPS.

6. Your Rights

You have the right to access, rectification, deletion, restriction of processing, and data portability. You can withdraw your consent at any time. To exercise your rights, please contact us using the contact information in the legal notice.

7. Data Retention

Your data is stored as long as you have an active account. After cancellation of your subscription, your data will be deleted after 90 days. For trial accounts, deletion occurs 30 days after expiration.

8. Children

Our services are not directed at persons under 16 years of age. We do not knowingly collect data from children under 16. If you discover that your child has provided us with data, please contact us.

9. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy. We will notify you of material changes via email.

10. Contact

For questions about privacy, you can reach us using the contact information in the legal notice.