Privacy Policy
Last updated: 1 October 2026
1. Data Controller
The controller of your personal data is:
Najra.Art
Hirschgraben 18 51145 Koeln
Email: message@najra.art
2. What Data We Collect
We collect the following categories of personal data:
- Contact details – name, email address (via contact form, newsletter)
- Technical data – IP address, browser type, operating system (automatically, for security and statistical purposes)
- Form data – message content, subject of inquiry
- Newsletter data – email address, subscription date, activity status
3. Purposes and Legal Bases for Processing
| Purpose | Data | Legal Basis |
|---|---|---|
| Handling contact form inquiries | Name, email, message content | Legitimate interest (Art. 6(1)(f) GDPR) |
| Sending newsletters | Email address | Consent (Art. 6(1)(a) GDPR) |
| Spam protection | IP address, form data | Legitimate interest (Art. 6(1)(f) GDPR) |
| Website security | IP address, user agent | Legitimate interest (Art. 6(1)(f) GDPR) |
| Cookie consent management | Consent data, IP address | Legal obligation (Art. 6(1)(c) GDPR) |
4. Recipients of Data
Your data may be shared with the following entities:
- Brevo (Sendinblue SAS, France, EU) – sending transactional and newsletter emails. Brevo Privacy Policy.
- Kinsta (Kinsta Inc., USA) – website hosting. Kinsta Privacy Policy.
- ShortPixel (ShortPixel, USA) – image optimization via CDN. ShortPixel Privacy Policy.
- ActiveLayer (ActiveLayer, USA) – spam protection for forms. ActiveLayer Privacy Policy.
5. Transfers to Third Countries
Some of the above-mentioned service providers are based in the United States (Kinsta, ShortPixel, ActiveLayer). Transfers of data to these entities are carried out on the basis of Standard Contractual Clauses (SCC) approved by the European Commission, which ensure an adequate level of data protection.
6. Data Retention Periods
- Contact form data – up to 1 year from the last contact
- Newsletter data – until consent is withdrawn
- Anti-spam data (ActiveLayer) – up to 30 days
- Cookie data – as set in the cookie banner (max. 12 months)
- Server logs (Kinsta) – up to 30 days
7. Your Rights
You have the right to:
- Access your personal data
- Rectify (correct) your data
- Erasure of your data („right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal)
- Lodge a complaint with a supervisory authority (in Germany: BfDI or the competent Landesdatenschutzbeauftragter)
8. Cookies
Our website uses cookies. Detailed information about the types of cookies and how to manage them can be found in our cookie banner and in your browser settings. You can change your cookie preferences at any time. Please also note that analysing traffic and how the Website is used (e.g. Google Analytics), tailoring content to the user’s preferences.
9. Data Security
We use technical and organizational measures to protect your data against unauthorized access, loss, or alteration. These include SSL/TLS encryption, firewalls, regular updates, and access controls.
10. Contact
For matters relating to data protection, you can contact us at:
message@najra.art
11. Changes to This Privacy Policy
We reserve the right to change this privacy policy. We will inform you of any material changes via the website or by mail. The date of the last update is always indicated at the beginning of the document.