Privacy Policy & Imprint

1. Controller and Contact

The controller responsible for data processing on this website (Art. 4 No. 7 GDPR) is:

Night Embroidery GbR represented by Itamar Yehiel and Shir Koren Bevernstr. 4, 10997 Berlin, Germany Email: itamar.y.art@gmail.com Phone: Itamar +49 163 7037386 · Shir +49 163 7037421 Website: www.itamar-y.art

If you have any questions about this policy or wish to exercise your data protection rights, please contact us using the details above.

2. Overview

We take the protection of your personal data seriously and process it only in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications-Telemedia Data Protection Act (TTDSG). This policy explains what data we collect when you visit itamar-y.art, why, on what legal basis, and what rights you have.

3. Hosting

This website is hosted by Wix.com Ltd. ("Wix"), 40 Namal Tel Aviv St., Tel Aviv, Israel. Wix processes technical data (such as IP address, browser type, and access times, stored in server log files) on our behalf as a processor, in order to deliver, secure, and maintain the site.

Israel is recognized by the European Commission as providing an adequate level of data protection (Art. 45 GDPR), so this transfer does not require additional safeguards. Details of Wix's own data practices are available at wix.com/about/privacy.

4. Data We Collect and Why

a) Visiting the website When you browse itamar-y.art, our hosting provider automatically collects technical log data (IP address, date and time of access, pages viewed, referring page, browser and device type) to operate the site securely and to detect and prevent misuse. Legal basis: our legitimate interest in the secure and reliable operation of our website (Art. 6(1)(f) GDPR).

b) Contact form If you use our contact form, we process the information you provide (name, email address, message, and any other details you choose to share) in order to respond to your inquiry. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) or Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries) if no contract is intended.

c) Newsletter If you sign up for our newsletter, we collect your name and email address and use Wix's built-in email marketing tools to send you occasional updates about exhibitions, new work, and studio news (as described on the signup form, typically 1–4 times a year). We process this data on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by clicking the unsubscribe link in any newsletter or by contacting us directly. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

d) Collector Space account If you register for our Collector Space, we collect your first and last name, email address, password (stored securely, encrypted, by Wix), and the catalog number of the artwork you own, in order to verify your status as a collector and grant you access to the members' area. Legal basis: Art. 6(1)(b) GDPR (performance of a contract, i.e. providing you access to the Collector Space).

e) Google reCAPTCHA We use Google reCAPTCHA on the Collector Space signup form to protect against automated abuse (spam and bot submissions). reCAPTCHA is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (and Google LLC in the US for backend processing). This may involve transmitting your IP address and other data required for the service to Google. Legal basis: our legitimate interest in protecting our website from automated abuse (Art. 6(1)(f) GDPR). Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as providing an adequate level of protection for this transfer. More information: policies.google.com/privacy.

f) Analytics We use Google Analytics to understand how visitors use our website (e.g. which pages are viewed, how long visitors stay), provided by Google Ireland Limited / Google LLC. This is only activated if you consent via our cookie banner (see Section 6). Legal basis: your consent (Art. 6(1)(a) GDPR, in conjunction with § 25 TTDSG). You can withdraw your consent at any time via the cookie settings available on our website. Google LLC is certified under the EU-U.S. Data Privacy Framework for this transfer.

5. Orders and Sales

If you purchase an artwork, we process the data necessary to fulfill the sale — your name, address, email, phone number, and payment/delivery details — in order to perform the contract, arrange shipping, and comply with our legal obligations (e.g. German commercial and tax record-keeping requirements, typically 6–10 years). Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (legal obligation).

6. Cookies

Our website uses cookies, including a cookie consent banner that lets you choose which categories of cookies to accept. Strictly necessary cookies (required for the site to function, e.g. remembering your Collector Space login) are used on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and § 25(2) TTDSG, and cannot be disabled. Optional cookies (such as analytics) are only set if you actively consent via the banner, and you can change or withdraw your choice at any time through the cookie settings on our site.

7. Recipients of Data

We do not sell your personal data. We share data only with:

• service providers who process data on our behalf under a data processing agreement (Wix, Google, as described above);

• shipping and logistics providers, where necessary to deliver an artwork you purchased;

• tax and legal advisors, where necessary to comply with our legal obligations;

• public authorities, where we are legally required to disclose information (e.g. tax authorities, courts).

8. International Transfers

Where data is transferred to providers outside the European Economic Area (such as Google LLC in the United States), we rely on the EU-U.S. Data Privacy Framework or, where that does not apply, the European Commission's Standard Contractual Clauses (Art. 46 GDPR), to ensure an adequate level of protection.

9. Retention

We retain personal data only for as long as necessary for the purposes described above, or as required by law. Contact form inquiries are generally deleted after the inquiry is resolved, unless a contract results. Newsletter data is retained until you unsubscribe. Sales and invoicing records are retained for the statutory periods required under German commercial and tax law (§ 257 HGB, § 147 AO).

10. Your Rights

If you are located in the EEA, you have the right to:

• access the personal data we hold about you (Art. 15 GDPR);

• rectify inaccurate data (Art. 16 GDPR);

• erase your data ("right to be forgotten"), subject to our legal retention obligations (Art. 17 GDPR);

• restrict processing in certain circumstances (Art. 18 GDPR);

• data portability, receiving your data in a structured, machine-readable format (Art. 20 GDPR);

• object to processing based on legitimate interest, including direct marketing (Art. 21 GDPR);

• withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3) GDPR);

• lodge a complaint with a supervisory authority. In Berlin, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Friedrichstr. 219, 10969 Berlin, mailbox@datenschutz-berlin.de).

To exercise any of these rights, contact us at itamar.y.art@gmail.com.

11. Children

Our website and services are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The version published on this page at the time of your visit applies.

Last updated: September 2026

Imprint (Impressum, § 5 TMG)

Night Embroidery GbR (business name registered with the Finanzamt)

Represented by the partners: Itamar Yehiel, Bevernstr. 4, 10997 Berlin, Germany Shir Koren, Bevernstr. 4, 10997 Berlin, Germany

Contact: Phone: Itamar +49 163 7037386 · Shir +49 163 7037421 Email: itamar.y.art@gmail.com Web: www.itamar-y.art

Tax number: 14/601/04312 VAT ID (§ 27a UStG): DE360628278

Person responsible for content according to § 55(2) RStV: Shir Koren, Bevernstr. 4, 10997 Berlin, Germany

Disclaimer

Liability for content: The content of our pages was created with great care. However, we cannot guarantee the accuracy, completeness, or timeliness of the content.

Liability for links: Our site contains links to external third-party websites over whose content we have no influence. We therefore cannot assume any liability for this external content. The respective provider or operator of the linked pages is responsible for their content. Linked pages were checked for legal violations at the time of linking; no such violations were apparent at that time.

Copyright: Content and works created by us on these pages are subject to German copyright law. Reproduction, editing, distribution, or any form of commercial use beyond the scope of copyright law requires our prior written consent. Downloads and copies of this site are permitted for private, non-commercial use only.