Privacy Policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

• Niklas Lamp und Ole von Puttkamer GbR
• Represented by the partners Niklas Lamp and Ole von Puttkamer
• Laemmersieth 18e, 22305 Hamburg, Germany
• Email: contact@umo.studio
• Phone: +49 1520 1359516

We process personal data only to the extent necessary to operate this website and to fulfil our contracts with you:

• Orders: name, address, email address, order contents and payment status, to process and deliver your order (Art. 6(1)(b) GDPR).
• Customer account: email address and password (stored only as a cryptographic hash), to let you view orders and save your details (Art. 6(1)(b) GDPR).
• Custom inquiries: the details you enter in the inquiry form, including any files you upload (logos, drawings, reference photos), to prepare a quote and communicate with you (Art. 6(1)(b) GDPR). Uploaded files are stored for 90 days and then deleted.
• Auctions: your bids and, where required, a PayPal payment authorisation, to run the auction and settle it with the winner (Art. 6(1)(b) GDPR).
• Reviews: your name (or chosen display name) and review text, published with your consent (Art. 6(1)(a) GDPR).
• B2B applications: company name, contact person, VAT ID and business details, to verify and manage your wholesale account (Art. 6(1)(b) GDPR).
• Email communication: if you contact us, we process your email address and message to respond (Art. 6(1)(f) GDPR).
• Server logs: IP address, browser type and access times, technically required to deliver the site and to detect abuse (Art. 6(1)(f) GDPR).

Payments are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. When you pay, PayPal receives the data required to execute the payment. PayPal may transfer data to PayPal Inc. in the USA; such transfers are covered by the EU-US Data Privacy Framework and standard contractual clauses. Details: https://www.paypal.com/privacy.

To deliver your order we pass your name and delivery address to the commissioned carrier (usually DHL/Deutsche Post). For shipping notifications we may also forward the email address you provided, so the carrier can inform you about the delivery status. The carrier uses this data solely for delivery purposes. Legal basis: Art. 6(1)(b) GDPR. You can object to the forwarding of your email address at any time via contact@umo.studio.

We use only technically necessary cookies and storage entries — for example for your shopping cart, your login session, your language preference and your cookie consent. We do not use advertising or tracking cookies. Details are set out in our cookie notice.

This website is hosted and operated with the help of technical service providers (hosting, database and email delivery) who process data on our behalf under data processing agreements (Art. 28 GDPR). Data is processed within the EU/EEA wherever possible.

We store order and invoice data for the retention periods required by German commercial and tax law (up to 10 years). Custom inquiry files are deleted after 90 days. Other data is deleted as soon as the purpose for processing no longer applies and no legal retention obligation prevents deletion.

You have the right at any time to:

• Access your stored personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise these rights, contact contact@umo.studio. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).

This website uses TLS encryption (https). Access to personal data in our systems is restricted to authorised persons and protected by technical and organisational measures.

We may update this privacy policy when our processes or legal requirements change. The current version is always available on this page.