Skip to main content

Privacy Policy

This is a courtesy translation. The German version is legally binding.

1. Privacy at a glance

General notes

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

2. Data controller

CesaraBerlin
Suzana Radtke
Alt-Biesdorf 61
12683 Berlin, Germany
E-mail: hallo@cesaraberlin.com

The data controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

3. Data collection on this website

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 (1)(f) GDPR. Server logs are retained only for as long as is necessary for the secure operation of the website and are deleted thereafter.

3a. Contacting us by e-mail

If you contact us by e-mail, we process your e-mail address and the information you provide solely in order to handle your enquiry. The legal basis is Art. 6 (1)(b) GDPR where your enquiry relates to the initiation or performance of a contract, and otherwise our legitimate interest in responding to enquiries (Art. 6 (1)(f) GDPR).

The recipient is the provider of our e-mail mailbox, which processes the data on our instructions on the basis of a data processing agreement under Art. 28 GDPR. We delete correspondence as soon as it is no longer required for processing and no statutory retention obligations apply.

4. Hosting

This website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). The servers are located in Germany (Falkenstein and Nuremberg data centres). The personal data collected on this website is stored on the provider's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

The use of the host is in the interest of secure, fast and efficient provision of our online offer by a professional provider (Art. 6 (1)(f) GDPR). A data processing agreement under Art. 28 GDPR has been concluded with the hosting provider. Compliance with the technical and organisational measures pursuant to Art. 32 GDPR is regularly verified by external audits.

5. External links to Etsy, kasuwa, Instagram, TikTok, YouTube and Pinterest

This website contains links to external platforms, in particular to our shops on Etsy and kasuwa as well as to Instagram, TikTok, YouTube and Pinterest. We do not embed any content, buttons, trust seals or tracking pixels from these platforms - no data is transferred to the platforms when you simply visit this website.

Only when you click on an external link do you leave this website. The privacy policies of the respective provider then apply - for the Etsy shop Etsy Ireland UC (Dublin, Ireland), which according to Etsy is the controller for users outside North and South America, kasuwa GmbH (Karlsruhe, Germany) for the kasuwa shop, Meta Platforms Ireland Ltd. (Ireland) for Instagram, TikTok Technology Limited (Ireland) for TikTok, Google Ireland Limited (Ireland) for YouTube and Pinterest Europe Ltd. (Ireland) for Pinterest. We have no influence on the data protection practices of these external providers.

6. Data processing for orders via our sales platforms

You cannot place an order on this website itself - there is no shopping cart and no checkout here. Purchases are concluded exclusively via the sales platforms Etsy and kasuwa.de. In both cases the controller for the processing of your order data is CesaraBerlin (Suzana Radtke, contact see point 2).

The legal basis for the processing is the performance of the purchase contract (Art. 6 (1)(b) GDPR); for the subsequent retention it is compliance with a legal obligation (Art. 6 (1)(c) GDPR). Order data is stored for as long as necessary for contract processing and for possible warranty claims; thereafter only for as long as retention obligations under commercial and tax law apply (§ 147 AO, § 257 HGB, § 14b UStG). Your data subject rights (point 10) also apply to this processing.

6a. Orders via Etsy (digital downloads and print-on-demand)

Via Etsy we sell digital products for instant download as well as physical products manufactured using print-on-demand. Etsy provides the platform and handles payment via Etsy Payments; Etsy's processing in this respect is governed by Etsy's own privacy policy, for which Etsy is the controller. From Etsy we receive the order data required to perform the contract - in particular name, order number, items ordered and, for physical products, the delivery address. We do not receive full payment details.

To fulfil the purchase contract for physical products (print-on-demand), we pass on the data required for production and shipping - in particular name and delivery address - to our print and shipping service providers:

  • Gelato ASA, Oslo, Norway (EEA)
  • Printify, Inc., San Francisco, USA

These service providers process the data solely on our instructions to carry out the order (processing on behalf, Art. 28 GDPR).

The transfer to Printify, Inc. involves a transfer of data to the USA (third country). This transfer takes place on the basis of appropriate safeguards under Art. 44 et seq. GDPR - based on an adequacy decision (EU-US Data Privacy Framework) where the provider is certified, otherwise on the basis of standard contractual clauses (Art. 46 (2) GDPR). A copy of the safeguards can be requested from us.

For buyers outside North and South America, Etsy states that Etsy Ireland UC (Dublin, Ireland) is the controller. It transfers data within the Etsy group of companies to Etsy, Inc. in the USA as well; Etsy bases this transfer on standard contractual clauses. We have no influence on this; Etsy's own privacy policy is decisive in this respect.

6b. Orders via kasuwa.de (digital products only)

No third-country element: The print-on-demand service providers named in 6a and the transfer to the USA described there do not apply to kasuwa. Via kasuwa we sell digital products only; no physical goods are offered there. The platform is operated by kasuwa GmbH, Wieselweg 46, 76228 Karlsruhe (Germany); delivery is to Germany, Austria and Switzerland only.

kasuwa GmbH provides the technical platform and transmits your order and contact data to us. For the operation of the platform and your customer account there, kasuwa GmbH is itself the controller; kasuwa's privacy policy applies in that respect.

Key difference from Etsy: kasuwa does not process payments but acts solely as an intermediary. The purchase contract and the payment are concluded directly between you and CesaraBerlin. In doing so we process your name, your address, your e-mail address, the order data and the payment data of the payment method used (advance payment/bank transfer or PayPal). Besides kasuwa GmbH, recipients are PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) where PayPal is used, the account-holding credit institution where a bank transfer is used, and - within the scope of statutory obligations - our tax adviser and the tax authorities. No disclosure for advertising purposes takes place.

We make the purchased file available to you after receipt of payment - via the platform or by e-mail to the address you provided during the ordering process. Unlike the Etsy instant download, provision therefore does not take place upon conclusion of the contract. Until then we process your e-mail address for this purpose.

No third-country transfer: For this sales channel we do not transfer any personal data to a third country outside the EU/EEA.

Providing your name, address, e-mail address and payment data is necessary for concluding and performing the contract; without this information we cannot process the order.

7. Cookies, local storage and web analytics

Cookies and local storage

This website sets no cookies and stores no data on your device - neither in localStorage nor in IndexedDB or sessionStorage. The only read access to local storage concerns the Umami opt-out flag described in the following section.

Web analytics with Umami

We use Umami, a privacy-friendly open-source web analytics software, for statistical evaluation of website usage (e.g. page views, referrers, approximate region). The Umami instance is self-hosted on servers operated by Ilik & Gökberk GbR (data processor under Art. 28 GDPR).

Umami does not set cookies and does not create user profiles. IP addresses are processed in anonymised form only and are not stored. The data remain on a server hosted in Germany (Hetzner, Nuremberg/Falkenstein location) and are not passed on to third parties.

The legal basis is our legitimate interest in a statistical analysis of user behaviour for improving our online offering (Art. 6 (1)(f) GDPR).

The following is transmitted on each page view: the address requested, the page title, the referrer, the hostname, the language reported by your browser and the screen resolution. No identifier is assigned that would recognise you across visits.

Note on § 25 TDDDG (German Telecommunications Digital Services Data Protection Act): Umami stores nothing on your device - no cookies, no entries in localStorage, IndexedDB or sessionStorage. There is a single read access: the script checks whether the value umami.disabled is set in localStorage, which permanently switches the counting off. This access serves solely your objection and is strictly necessary in order to provide the service you requested (§ 25 (2) no. 2 TDDDG); no consent requirement under § 25 (1) TDDDG arises from it.

8. Right to object (Art. 21 GDPR)

You have the right to object at any time to processing of your data based on our legitimate interest (Art. 6 (1)(f) GDPR). This applies in particular to the web analytics with Umami described in Section 7 and to the server log collection described in Section 3.

An objection is informal and can be sent to datenschutz@cesaraberlin.com. After receipt of an objection, your data will no longer be processed for those purposes unless there are compelling legitimate grounds for the processing.

9. Fonts

This website uses locally hosted fonts via @fontsource. There is NO connection to Google Fonts or external CDNs. As a result, no personal data is transmitted to third parties.

10. Your rights

You have the right at any time to:

  • Receive information about your data stored with us (Art. 15 GDPR)
  • Request correction of inaccurate data (Art. 16 GDPR)
  • Request deletion of your data (Art. 17 GDPR)
  • Request restriction of processing (Art. 18 GDPR)
  • Request data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

11. Contact for privacy enquiries

For questions about data protection, please contact:
E-mail: datenschutz@cesaraberlin.com

As of: 5 August 2026

Back to homepage