1. Controller

The controller responsible for data processing on this website according to the EU General Data Protection Regulation (GDPR) is:

Joris Machholz
Falkenweg 24
58579 Schalksmühle
Germany
E-mail: joris.machholz@gmail.com
Website: www.jorismachholz.com

​

2. General Information on Data Processing

This website is built and operated using Wix.com Ltd.
Wix provides hosting, infrastructure, analytics tools, e-commerce functions, contact forms, payment processing, and security services.

Wix.com Ltd.
40 Namal Tel Aviv St., Tel Aviv 6350671, Israel
Privacy Policy: https://www.wix.com/about/privacy

Wix stores personal data on servers in:

• Israel (adequate protection level under EU law)

• European Union

• United States (via Standard Contractual Clauses – SCC)

Wix uses various sub-processors such as AWS, Google Cloud, Meta, and Stripe.

​

3. Server Log Files (Automatically Collected)

When you visit this website, Wix automatically collects:

• IP address

• Date and time of access

• Browser type and version

• Device information

• Operating system

• Referrer URL

• Visited pages

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation)
Storage period: up to 90 days (Wix standard)

​

4. Cookies & Consent Management

This website uses a cookie banner to obtain your consent for:

• Essential cookies

• Analytics

• Marketing/Personalization

Non-essential cookies are only activated after consent.

A full list of Wix cookies is available here:
https://support.wix.com/en/article/cookies-and-your-wix-site

Legal basis: Art. 6(1)(a) GDPR (consent)

You can adjust your cookie preferences at any time via the banner.

​

5. Analytics Tools

5.1 Google Analytics (GA4)

Provider: Google Ireland Ltd.
Data may be transferred to the USA (SCC in place).

Collected data includes:

• Page views

• User behavior

• Device & browser information

• Approximate location

• IP address (anonymized)

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner)

5.2 Wix Analytics / WebStat

Integrated statistics tools provided by Wix.

Collected data:

• Visitor numbers

• Session metrics

• Page performance

• Entry & exit pages

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving website performance)

5.3 TWIPLA (formerly Visitor Analytics)

Provider: Visitor Analytics GmbH
TWIPLA offers privacy-friendly, cookie-less visitor analytics.

Collected data may include:

• Device information

• Pages visited

• Interactions

• Basic location information (non-precise)

TWIPLA does not use cookies.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

​

6. Contact Form

When contacting me via the contact form, the following data is processed:

• Name

• E-mail address

• Message content

• Optional additional information

Purpose: responding to your inquiry
Legal basis:

• Art. 6(1)(b) GDPR (pre-contractual steps)

• Art. 6(1)(f) GDPR (legitimate interest in communication)

Storage: data is deleted after 6 months unless statutory retention periods apply.

​

7. Online Shop & Payments

For purchases in the Fine-Art Print Shop, the following data is processed:

• Name

• E-mail

• Shipping address

• Billing information

• Order details

• Payment information

Payments are processed by third-party providers:

• Wix Payments

• Stripe

• PayPal

• Klarna (if enabled)

• Credit card providers

Each provider processes personal data under its own privacy policy.

Legal basis: Art. 6(1)(b) GDPR (contract performance)

Storage:
Commercial and tax laws require retention for 6–10 years.

​

8. Donations

If you make a donation, the payment provider processes:

• Name

• Payment details

• Donation amount

• E-mail address

Legal basis: Art. 6(1)(b) GDPR (execution of a financial transaction)

​

9. Digital Products (Downloads)

Digital products — such as gift cards or downloadable files — are provided immediately after payment.

Consent requirement:
By purchasing a digital product, you agree that:

• The download may begin immediately

• The right of withdrawal expires at the moment of download
  (Art. 356(5) GDPR)

​

10. Instagram Icon / Social Media Links

This website contains a link to my Instagram profile.
No data is transferred to Instagram until you click the link.

When accessing Instagram, Meta Platforms Ireland Ltd. processes your data under its privacy policy:
https://help.instagram.com/519522125107875

Legal basis: Art. 6(1)(f) GDPR

​

11. External Links (Blog)

Blog posts and pages may contain links to external websites.
Once you leave my site, the respective providers’ privacy policies apply.

I am not responsible for third-party content or data processing.

​

12. International Data Transfers

Your data may be processed in:

• Israel (adequacy decision)

• USA (Standard Contractual Clauses – SCC)

• Other countries depending on Wix’s sub-processors

Appropriate safeguards include encryption and contractual protections.

​

13. Your Rights Under GDPR

You have the following rights:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Right to withdraw consent at any time

You may lodge a complaint with your local supervisory authority.

A list is available at:
https://www.bfdi.bund.de/

​

14. Changes to This Privacy Policy

I reserve the right to update this Privacy Policy to comply with legal requirements or adapt it to changes on the website.
The latest version is always available on this page.

​

15. Contact

If you have any questions about data protection, please contact:

Joris Machholz
E-mail: joris.machholz@gmail.com