Privacy notice

As of: 22 October 2026

1. Controller

Richard Parr, trading as “Mie Gallery”
12773 Caswell Avenue, #104, Los Angeles, CA 90066, USA
Email: info@miegallery.com · Phone: +1 310 435 7452

EU representative (Art. 27 GDPR)
Richard Parr, trading as “Mie Gallery”, has appointed the following representative in the European Union under Art. 27 of the General Data Protection Regulation (GDPR):

Cloudkasten GmbH
Seestr. 20 G
50374 Erftstadt, Germany
Email: shopify-9576022094@rep4.eu
Verify the appointment: https://rep4.eu/verify/bd3b3b4d-2e93-4e93-afad-a51f7607087f/

Data subjects resident in the EU can contact our EU representative on all questions about the processing of their personal data and about exercising their rights under the GDPR.

2. Overview

This notice applies to our website for customers in Germany, miegallery.com/de-de (German) and miegallery.com/en-de (English). We process personal data only as far as necessary to run the website, process your order, answer your enquiries, or on the basis of your consent.

We are based in the USA. Your data is therefore processed in the USA. The USA does not have a level of data protection comparable to the EU. The GDPR nevertheless applies to our processing of your data, because this offer is directed at customers in Germany.

3. Hosting and shop system

Our website runs on the Shopify platform. Our contracting party is Shopify Inc., 151 O'Connor Street, Ottawa, Ontario, Canada. Shopify processes the data on our behalf (Art. 28 GDPR). If you use Shop Pay, Shopify processes your data to that extent as a controller in its own right. When you visit the website, technically necessary data is processed, such as IP address, date and time of access, pages visited, browser and operating system. The legal basis is our legitimate interest in a secure and functioning service (Art. 6(1)(f) GDPR).

4. Cookies and consent

We use technically necessary cookies, for example for the cart and the language setting, without consent (§ 25(2) no. 2 TDDDG). We use all other cookies and similar technologies, in particular for statistics and advertising, only with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You give it through our cookie banner. You can withdraw your consent at any time with effect for the future through the “Cookie preferences” link at the bottom of every page.

5. Orders and payment

When you order, we process the details from checkout: name, delivery and billing address, email address, phone number, the prints ordered and the payment information. The legal basis is the performance of your order (Art. 6(1)(b) GDPR). Providing this data is necessary for the order; without it we cannot carry out your order.

Payment is processed through Shopify Payments. Your payment data (e.g. card details) is processed by Shopify and the payment service providers Shopify uses; we do not receive full card details. Technical data such as the IP address may be checked for fraud prevention (Art. 6(1)(f) GDPR). If you use Apple Pay, Google Pay or Shop Pay, the privacy terms of those providers also apply.

We keep the order data as long as necessary for the order and a possible return, and beyond that only where statutory retention obligations apply.

6. Shipping and customs clearance

For delivery, we pass your name, delivery address, email address and phone number to the carrier we use: United Parcel Service (UPS) or the United States Postal Service (USPS), which hands the parcel over to Deutsche Post or DHL in Germany. The legal basis is the performance of your order (Art. 6(1)(b) GDPR) and our legitimate interest in delivery (Art. 6(1)(f) GDPR).

Because your order is imported from the USA, the shipping documents contain the details needed for the customs declaration (name and address of the recipient, description and value of the goods). These are transmitted to the customs authorities through the carrier (Art. 6(1)(b) and (c) GDPR).

7. Customer account

If you create a customer account, we store your details and orders so that you can view them. The legal basis is Art. 6(1)(b) GDPR. You can have your account deleted at any time by emailing info@miegallery.com.

8. Contact by email or form

When you write to us, we process your details to answer your enquiry (Art. 6(1)(f) GDPR; for enquiries about an order, also Art. 6(1)(b) GDPR). To protect against spam, Shopify uses a captcha service on forms (Google reCAPTCHA or hCaptcha). Technical data such as the IP address is transmitted to the provider (Art. 6(1)(f) GDPR).

Withdrawal through our online form. If you withdraw from your contract using the “Withdraw from contract” function, we process your name, your email address, your order number, the related order data (items ordered and address) and, if given, your reason for withdrawal and the time of receipt, in order to process the withdrawal and acknowledge its receipt (Art. 6(1)(b) and (c) GDPR in conjunction with § 356a BGB). For this function we use the “EU Widerrufsbutton” app of Visionz GmbH, Richthofenstr. 29, 31137 Hildesheim, Germany, which processes the data on our behalf (Art. 28 GDPR). Visionz uses further service providers for this: Fly.io, Inc. for hosting, and Brevo SAS (France) and, as a fallback, Twilio SendGrid (USA) for sending email. Data may be transferred to the USA in the process.

9. Newsletter

If you sign up for our newsletter, we use your email address to send you news about our prints. The legal basis is your consent (Art. 6(1)(a) GDPR). After signing up you receive an email asking you to confirm your sign-up (double opt-in). We send you the newsletter only after you confirm. You can unsubscribe at any time through the unsubscribe link in every email.

10. Statistics and advertising (only with consent)

Shopify analytics. Shopify records for us how the website is used, for example the pages visited and where visits come from.

Google Analytics and Google Ads. We use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. They measure the use of the website and the success of advertising. Data may be transferred to Google LLC in the USA in the process. Google LLC is certified under the EU-US Data Privacy Framework.

Meta pixel. We use the pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. It measures the success of our advertising on Facebook and Instagram. We are jointly responsible with Meta for collecting the data on our website (Art. 26 GDPR). Data may be transferred to Meta Platforms, Inc. in the USA in the process. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework.

These services are loaded only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Wishlist. With the “Add to wishlist” function you can save prints for later. For this we use the “Wishlist by Square” app of Square Apps, Beaverton, Oregon, USA. The saved prints are stored in your browser and, if you are signed in, in your customer account; technical data such as the IP address is transmitted to the provider in the USA. Storage takes place only if you use the function yourself (§ 25(2) no. 2 TDDDG). The legal basis is our legitimate interest in a convenient wishlist function (Art. 6(1)(f) GDPR).

11. Links to social networks

Our website contains links to Instagram, Facebook, Pinterest, TikTok, X (Twitter) and YouTube. These are simple links. Data is transferred only when you click a link and open the network.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to withdraw consent you have given at any time with effect for the future (Art. 7(3)). To do so, write to us at info@miegallery.com or to our representative in the EU.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).