Privacy policy

Last updated: November 4, 2025

RAMBRANDT operates this shop and website, including all related information, content, features, tools, products, and services, to provide you with a personalized shopping experience (the “Services”). RAMBRANDT is powered by Shopify, which enables us to deliver these Services. This Privacy Policy explains how we collect, use, and share personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and sharing of your personal data.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you confirm that you have read this Privacy Policy and agree to the collection, use, and sharing of your data as described herein.

What personal data do we collect or process?

When we refer to “personal data,” we mean information that identifies you or can reasonably be linked to you. Personal data does not include anonymous or aggregated data that cannot identify you. Depending on how you interact with the Services, where you live, and what the applicable law allows, we may collect or process the following categories of personal data, including any inferences drawn from them:

  • Contact information including name, mailing address, billing address, shipping address, phone number, and email address.
  • Financial information including credit or debit card numbers, payment card details, financial account numbers, transaction details, payment methods, payment confirmations, and other payment data.
  • Account information including username, password, security questions, configurations, and settings.
  • Transaction information including items you view, add to cart, wishlist, purchase, return, exchange, or cancel, as well as your transaction history.
  • Communications with us including information you provide when contacting us, such as customer support inquiries.
  • Device information including data about your device, browser, or network connection, IP address, and other unique identifiers.
  • Usage information including data on how and when you interact with our Services or browse them.

Sources of personal data

We may collect personal data from the following sources:

  • Directly from you — for example, when you create an account, use the Services, communicate with us, or otherwise provide your data.
  • Automatically through the Services — for example, through your device, when you visit our website, or through cookies and similar technologies.
  • From our service providers — for example, when we engage them to perform certain services and they collect or process data on our behalf.
  • From our partners or other third parties

How do we use your personal data?

Depending on how you interact with us or which Services you use, we may use personal data for the following purposes:

  • To provide, customize, and improve the Services. This includes fulfilling contracts, processing payments, completing orders, storing preferences, sending account notifications, managing accounts, arranging shipping, processing returns or exchanges, enabling reviews, and personalizing your shopping experience through product recommendations.
  • Marketing and advertising. We use your data to send marketing communications by email, SMS, or post, and to show you online ads for products or services, including based on your past browsing or purchase behavior.
  • Security and fraud prevention. We use personal data to authenticate your account, provide secure transactions, detect and prevent fraudulent or illegal activity, and protect the safety of our users and Services.
  • Communication with you. We use your information to provide customer support, respond to inquiries, and maintain our business relationship.
  • Legal compliance. We use personal data to comply with legal obligations, respond to lawful requests, investigate disputes, or enforce our policies.

How do we share personal data?

Under certain circumstances, we may share your personal data for legitimate purposes as described in this Privacy Policy, including:

  • With service providers and third parties acting on our behalf (e.g., IT management, payment processing, analytics, customer support, fulfillment, and shipping).
  • With business and marketing partners who help provide marketing services or display ads to you. For example, Shopify may help facilitate personalized advertising across merchants and websites based on your online activities. These partners use your data according to their own privacy policies.
  • When you request or consent to data sharing, such as for product deliveries or when using social media integrations.
  • Within our corporate group or affiliates.
  • In connection with business transactions (e.g., mergers or bankruptcies), to comply with legal obligations, or to protect our rights and users.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal data about your use of the Services to provide and improve them. Your submitted data may be shared with Shopify and third parties in other countries. We also use advanced Shopify features that analyze data across merchants to enhance our business. In these cases, Shopify is the data controller for such processing. For more details, see the Shopify Consumer Privacy Policy. You may exercise your data rights via the Shopify Privacy Portal.

Third-party websites and links

The Services may link to third-party websites. We are not responsible for their privacy or security practices. Review their privacy policies before sharing data. Publicly shared information (e.g., on social media) may be visible to others without limitation.

Children’s data

The Services are not intended for children, and we do not knowingly collect data from minors. If you believe a child has shared personal data with us, please contact us using the information below to request deletion. To our knowledge, we do not “sell” or “share” personal data of anyone under 16 years of age.

Data security and retention

No system is completely secure, and transmissions may carry risk. Please avoid sending sensitive information through insecure channels. We retain your personal data only as long as needed to manage your account, fulfill legal obligations, or resolve disputes.

Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal data. These rights are not absolute and may be subject to conditions or legal limits.

  • Right of access. You may request a copy of the personal data we hold about you.
  • Right to deletion. You may request deletion of your personal data.
  • Right to correction. You may request correction of inaccurate personal data.
  • Right to data portability. You may request that we transfer your data to you or another party.
  • Manage communication preferences. You may opt out of promotional emails at any time using the unsubscribe link, though we may still send non-promotional messages such as order updates.

If you reside in the United Kingdom or European Economic Area, you may have additional rights, subject to local law:

  • Right to object and restrict processing. You may request that we stop or limit processing your personal data for certain purposes.
  • Withdrawal of consent. Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

You may exercise these rights through the Services or by contacting us using the details below. Learn more about Shopify’s data use and your rights at https://privacy.shopify.com/en.

Exercising your rights will not disadvantage you. We may need to verify your identity before processing requests. You may authorize an agent to act on your behalf, provided proof of authorization is supplied. We will respond in accordance with applicable law.

Complaints

If you have complaints about how we handle your data, contact us using the information below. Depending on your location, you may also have the right to appeal or file a complaint with your local data protection authority. For the European Economic Area, you can find a list of supervisory authorities here.

International transfers

We may transfer, store, or process your personal data outside your country of residence. When doing so, we rely on recognized transfer mechanisms such as the EU Standard Contractual Clauses or UK-approved equivalents unless the destination country ensures adequate protection.

Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Updates will be posted here with an updated “Last Updated” date and, if required, appropriate notice.

Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us by phone at , by email at info@rambrandt.art, or by mail at Wolfener Str. 32-34, Tor 1 Aufgang K, Berlin, 12681, DE. We are the data controller for your personal information as defined by applicable law.