Data protection
Privacy notice
Last updated: 31 August 2026
1. Controller
Prof. Dr.-Ing. Simon Stock · Stock/Art
Tannenweg 2c
83083 Riedering
Germany
info@stock-art.eu
2. Hosting and server logs
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When the website is accessed, the IP address, time, requested resource, referrer, browser and operating system in particular are processed in server logs. This is necessary to provide the website securely and reliably, detect attacks and investigate technical errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this service. Server logs are deleted after seven days unless continued storage is exceptionally required to investigate a specific security incident. STRATO processes the data under a data-processing agreement pursuant to Article 28 GDPR.
3. Contact form and email
We process the type of enquiry, name, email address, organisation and selected artwork where applicable, message and technical delivery data to answer enquiries about works, exhibitions, galleries, collaborations, press and general matters. Article 6(1)(b) GDPR is the legal basis for pre-contractual enquiries; other communication is processed under Article 6(1)(f) GDPR based on our legitimate interest in answering genuine enquiries. The website does not store form content in its own database. It is transmitted in encrypted form to info@stock-art.eu through the email service provided by STRATO GmbH. STRATO processes the delivery data as a processor. Pure contact enquiries are deleted six months after final completion. If a contract results or statutory retention duties apply, the relevant records are retained only for the prescribed period.
The required fields are necessary so that we can assign and answer the enquiry. The form cannot be submitted without this information. To protect against automated misuse, we use a simple self-hosted arithmetic question, an invisible honeypot field and a global submission limit. The limit stores timestamps only for a 15-minute window and does not store IP addresses or other user identifiers. No cookies are set, no external CAPTCHA provider is embedded and no data is transferred to third parties for this purpose. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is protecting the form and our email infrastructure. There is no statutory obligation to contact us through the form; a direct email may be used instead.
4. Local preferences, cookies and external content
The colour-scheme selection is stored solely as a functional preference in your browser’s local storage. We currently use no analytics, marketing or tracking services, no non-essential cookies and no externally embedded media. A consent banner is therefore not currently planned.
5. Recipients and international transfers
Data is received only by STRATO GmbH, which provides hosting and email delivery, and by the persons responsible for the respective enquiry. No transfer to countries outside the European Union or European Economic Area is intended.
6. Security
The website is provided exclusively over an encrypted HTTPS connection. Contact-form messages are transferred to the STRATO mailbox over an encrypted SMTP connection. Despite appropriate technical and organisational measures, internet data transmission cannot be entirely free of risk.
7. Your rights
Subject to the GDPR, you have rights including access, rectification, erasure, restriction, portability and objection. Consent may be withdrawn for the future. You may also lodge a complaint with a data-protection authority; in Bavaria this is generally the Bavarian State Office for Data Protection Supervision.
Contact for privacy requests: info@stock-art.eu
8. Automated decisions
No automated decision-making, including profiling, takes place.