Privacy Policy

This website is largely a static website without user accounts, without a comment function and without a contact form. We process as little personal data as possible. Purchasing works via PayPal involves additional data; see the sections “Payment processing via PayPal” and “Order processing and confirmation emails”. Below we explain which data is collected when you visit this website and how we handle it.

1. Controller

The controller for data processing on this website is:

HAUS HOPPE – Galerie für Bildende Kunst
Olaf Hoppe
Zum Breitling 12
23974 Boiensdorf OT Stove
GERMANY

Phone: +49 (0) 38427 / 64315
Email and further contact details can be found in the legal notice.

2. Hosting (Cloudflare Pages)

This website is hosted as a static website on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”).

When you access this website, Cloudflare, as hosting and content delivery provider, processes technically necessary connection data (see “Server log files”) in order to deliver the website securely and efficiently and to defend against attacks. The legal basis is Art. 6 (1) (f) GDPR; we have a legitimate interest in the secure and efficient provision of our website.

Processing may also take place on servers outside the European Union (including in the USA). The basis for the processing is a data processing addendum with Cloudflare; the transfer of data to third countries is based on the European Commission’s standard contractual clauses. Further information can be found in Cloudflare’s privacy policy.

3. Server log files

When the website is accessed, information that your browser transmits and that is technically necessary for delivery is automatically collected:

  • page or file accessed
  • date and time of access
  • amount of data transferred
  • browser type and version
  • operating system used
  • referrer URL
  • IP address

This data is not merged with other data sources and is used exclusively for the secure and stable operation of the website. The legal basis is Art. 6 (1) (f) GDPR.

4. No analytics cookies, no tracking

This website does not set its own analytics cookies and does not use any analysis, tracking or advertising tools. Your browsing behaviour is not evaluated statistically, and no profiling takes place.

Technically necessary protection mechanisms of the hosting provider Cloudflare (for example to defend against bots and attacks) and of the payment service PayPal (see “Payment processing via PayPal”) may in individual cases use technically necessary cookies. These serve security or payment processing and not the analysis of your behaviour.

5. Payment processing via PayPal

For the purchase of works via this website we use the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (“PayPal”).

On the detail pages of the woodcuts, the PayPal JavaScript SDK is loaded from PayPal’s servers in order to display the payment buttons. Your IP address may be transmitted to PayPal and PayPal may set technically necessary cookies. When you complete a purchase via PayPal, the data required for payment processing (including name, email address, shipping and billing address as well as order and payment data) is transmitted to PayPal. Your shipping address is collected by PayPal and transmitted to us for the execution of the purchase.

The legal basis is Art. 6 (1) (b) GDPR (performance of the contract of sale or pre-contractual measures). PayPal’s privacy policy applies in addition.

6. Order processing and confirmation emails

To process your order we process the data arising in the course of the purchase (name, email address, shipping address, ordered work and order and payment reference). To send the acknowledgement of receipt and further order-related emails we use the service provider Resend (Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA). Sending is processed for us in the Europe region (Ireland); the message contents are therefore processed within the EU. Your email address and the content of the respective message are transmitted to Resend.

The legal basis is Art. 6 (1) (b) GDPR (performance of the contract) as well as our legitimate interest in reliable communication in connection with the order (Art. 6 (1) (f) GDPR). Insofar as access from a third country (USA) cannot be excluded in individual cases, it is covered by appropriate safeguards (the European Commission’s standard contractual clauses). We store order data for as long as this is necessary for the execution of the contract and statutory retention periods apply.

7. Contacting us

If you contact us by email, your details will be stored for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

8. Embedded content (YouTube, Google Maps)

YouTube: On individual sub-pages (in particular in the “Videos” section) videos from YouTube are embedded. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These videos are not loaded automatically: when you open a page you initially only see a preview image stored locally on our server, together with a play button. No connection to YouTube is established until you actively start a video, at which point a connection to Google/YouTube servers is established, transmitting your IP address, among other things, and the provider may set cookies. The transfer is based on your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time with effect for the future by not starting the video. Privacy: policies.google.com/privacy.

Google Maps: On the contact page we embed a Google Maps map (Google Ireland Limited, address as above) to make it easier for you to find us. When the map loads, a connection to Google servers is established and your IP address is transmitted; cookies may be set. The legal basis is our legitimate interest in an easy presentation of directions (Art. 6 (1) (f) GDPR). Further information: Google’s privacy policy.

9. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in the browser’s address bar.

10. Your rights

Within the framework of the statutory provisions you have the right at any time to: information about your stored personal data (Art. 15 GDPR); rectification of incorrect data (Art. 16 GDPR); erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR); data portability (Art. 20 GDPR); objection to processing (Art. 21 GDPR); and withdrawal of a given consent with effect for the future (Art. 7 (3) GDPR).

Please contact the details given under “Controller” or in the legal notice. You also have the right to lodge a complaint with a data protection supervisory authority.

Last updated: August 2026