Privacy.

Controller

Email: info@m-ploetz-art.com

Hosting and encrypted transmission

This privately operated artist website is hosted on a VPS provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO provides the technical infrastructure and may process connection and operational data as a processor. Further information: STRATO Data Processing Agreement. Public access uses encrypted HTTPS transmission.

Visiting the website

Delivering the pages requires connection data, including IP address, time, requested address and transmitted browser and connection information. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in presenting the artist’s estate safely and reliably. No separate visitor access log is maintained. Technical error events may be processed for diagnosis and security only insofar and for as long as necessary for those purposes.

Contact by form or email

We process your name, email address, optional institution and work reference, and message to handle your enquiry. Required fields allow us to identify and answer your enquiry; the form cannot be submitted without them. Using the form is voluntary. You may contact us directly by email instead.

The legal basis is Article 6(1)(f) GDPR, or Article 6(1)(b) for enquiries relating to a contract. Our legitimate interest is communicating with interested visitors, galleries and institutions. Form submissions are stored on our own server and removed from the active form inbox within 90 days. Email correspondence is retained only for as long as needed to handle the matter or meet statutory retention duties. Protected backups are used only for recovery; retention rules are reapplied following restoration.

Abuse prevention

The form uses a short-lived signed form token, a field not intended for human completion, a brief minimum completion time and submission limits. A cryptographically derived value of the IP address or shortened IPv6 network, together with the submission time, is retained for no more than 24 hours to limit repeated requests. The IP address itself is not stored in plain text in the form inbox for this purpose. Checksums of used form tokens prevent repeated submissions. The legal basis is Article 6(1)(f) GDPR: maintaining availability and preventing unwanted messages. No external CAPTCHA service is embedded.

Local content, cookies and external links

Fonts, images, music and the catalogue are served locally. This website uses no analytics or advertising cookies, no tracking services and no embedded social networks. Instagram and other external services are provided as links only. Following a link opens the external service, whose own privacy information then applies.

Recipients and transfers

Enquiries are accessible to the estate administration and, where technically necessary, the hosting or email provider within the scope of its services. No data is shared for advertising purposes. The website itself does not transfer analytics or form data to third-country services.

Your rights

Where the legal requirements are met, you have rights of access, rectification, erasure, restriction and data portability under Articles 15–20 GDPR. Where processing is based on consent, you may withdraw it at any time with effect for the future. Please contact the controller above to exercise your rights. There is no automated decision producing legal or similarly significant effects.

Right to object

You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f), in accordance with Article 21 GDPR.

Right to complain

You may complain to a supervisory authority, particularly in your place of residence, work or an alleged infringement. For Lower Saxony: The State Commissioner for Data Protection of Lower Saxony.

Last updated: 21 October 2026.