Controller and contact
Tanya Ko Art. For questions about your personal data, contact tanya.ko.arts@gmail.com. Full operator details are still to be completed in the Legal notice.
Hosting and access logs
This website is hosted by STRATO GmbH in Germany. When you visit, technical access data such as your IP address, request time, requested page, browser information and referrer may be processed to deliver the website, troubleshoot errors and protect it against attacks. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in operating a secure, reliable website. STRATO describes its processing in its privacy information.
Contact form and email
If you contact me, I use your name, email address, message and any other details you provide to respond to your enquiry. SureForms stores form submissions in this website’s WordPress database. Notifications are sent through STRATO SMTP using SureMail to tanya.ko.arts@gmail.com. SureMail delivery logs can contain recipients, subject lines, message contents, technical headers, delivery times and status information for troubleshooting.
The receiving email inbox uses Gmail, a Google service. Your message is therefore also processed by Google and may be processed outside the European Economic Area, including in the USA. Please see Google’s privacy policy and its international data-transfer information. Only include information that is relevant to your enquiry.
The legal basis for enquiries concerning a possible contract is Article 6(1)(b) GDPR; for other enquiries it is Article 6(1)(f) GDPR, based on the interest in responding to messages. Providing your details is voluntary, but I need an email address and sufficient information to answer. Enquiries, email copies and delivery logs are retained only for as long as needed for their purpose or applicable legal obligations. There is no automated decision-making or profiling in the handling of your enquiry.
Website security
Wordfence is used to detect and prevent unauthorised access. Security-related events, including IP addresses and request details, are processed for this purpose. The current Live Traffic setting records security events rather than all page visits, with a maximum retention setting of 30 days. The Wordfence Security Network is enabled, so information about attacks may be transmitted to Defiant Inc. in the USA. Further information, including the provider’s transfer safeguards, is available in the Wordfence privacy policy. The legal basis is Article 6(1)(f) GDPR, based on the interest in protecting the website and its users.
Language, fonts and browser storage
TranslatePress provides the English and German versions of this website. Translations are stored in this website’s database. The fonts used by Astra and Elementor are hosted locally on tanyakoart.com, so the website does not need to retrieve these fonts from Google’s font servers.
Cookies and other browser storage are assessed separately from general personal-data processing. Under German law, storage or access that is strictly necessary to provide an explicitly requested service does not require consent under Section 25(2) TDDDG. A complete inventory of the cookies and browser storage used by this website is still being checked; individual names, purposes and durations will be added once verified. This page does not assert that the website is cookie-free.
Social-media links
The Instagram, TikTok and YouTube icons are ordinary links. If you follow one, you leave this website and the respective provider processes your data under its own privacy policy. The icons do not embed a social-media feed or video player on this website.
Your rights
Subject to the applicable conditions, you have the right to access your personal data, request correction or erasure, restrict processing and receive data in a portable format. You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, email tanya.ko.arts@gmail.com. You may also lodge a complaint with a data-protection supervisory authority, particularly in the EU country of your habitual residence, workplace or the alleged infringement. A directory of German supervisory authorities is available from the Hessian data-protection authority.
Last updated: 18 October 2026. This information describes the current portfolio and contact functions; it will be reviewed before an online shop opens.