Privacy Policy

Last updated: 25 October 2026

This Privacy Policy explains how AnatomyBase.com collects, uses, and protects personal data when you visit this website or buy a digital product.

1. Controller

The controller responsible for personal data processed through AnatomyBase.com is Kunstolymp.de, Herbert Blum, Am Dachspfad 7, 61169 Friedberg, Germany. Email: vertrieb@kunstolymp.de.

2. Data we process

Depending on how you use the site, we may process order information such as your name, email address, billing address, purchased items, payment status, and order history; messages you send by email; and technical data automatically transmitted to operate the site, including IP address, browser and device information, request data, and security logs.

Payments are processed by Stripe. We do not receive or store full payment-card numbers. Stripe may process payment and fraud-prevention data under its own privacy information.

3. Purposes and legal bases

We process data to provide the website and digital downloads, confirm and manage orders, respond to support requests, prevent fraud and misuse, protect the site, and meet accounting and tax obligations. Under the GDPR, the relevant legal bases are performance of a contract (Art. 6(1)(b)), compliance with legal obligations (Art. 6(1)(c)), and our legitimate interests in secure, reliable operation and fraud prevention (Art. 6(1)(f)). We use consent where it is required, for example for optional marketing or non-essential technologies.

4. Cookies, fonts, and analytics

The website uses essential technologies to deliver and secure the service. It does not operate Google Analytics, a newsletter system or a marketing mailing list. Google Fonts may transmit technical data such as IP address to Google when pages load.

Optional Meta advertising measurement

Only after you choose “Accept optional measurement”, we use Meta Pixel (ID 2282186535683903) to measure visits to our general storefront, checkout starts and confirmed purchases of the complete collection. Meta Platforms Ireland Limited and, where applicable, Meta Platforms Inc. receive technical browser/network data, cookie or click identifiers and these events. Purchase events contain a generic collection identifier, USD 49.90 and a pseudonymous event identifier. We do not add names, email addresses, private download links or detailed anatomy browsing topics to these events. Automatic event collection and advanced matching are not enabled by our integration.

You can reject this optional measurement and still use the shop. Use “Privacy choices” to withdraw consent at any time; withdrawal stops future measurement and removes our Meta browser cookies where accessible. It does not undo processing already performed. The consent preference is stored for up to 180 days; Meta identifiers may persist under Meta’s own cookie settings. A short-lived, essential HttpOnly cookie keeps your paid download continuation available for five minutes. Global Privacy Control is honoured. Consent is the basis for optional advertising measurement; any required international-transfer safeguards and Meta’s data processing terms apply.

See Meta’s Privacy Policy and Meta’s cookie information.

5. Recipients and international transfers

We share personal data only where necessary with service providers that help operate the shop, such as our hosting provider, Stripe for payments, and email providers for support and order communication. We do not sell personal data. Some providers may process data outside the European Economic Area. Where applicable, transfers are made subject to appropriate safeguards required by data-protection law, such as an adequacy decision or standard contractual clauses.

6. Retention

We keep order and customer data only for as long as needed to provide downloads, resolve support matters, protect against fraud, and meet legal accounting and tax retention obligations. Technical logs are retained for a limited period appropriate to security and operations. Data is then deleted or anonymised unless a longer period is legally required.

7. Your rights

Subject to the GDPR and applicable law, you may request access, correction, deletion, restriction of processing, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing already carried out. To exercise a right, email vertrieb@kunstolymp.de. You may also complain to your local supervisory authority. The competent authority for the controller is the Hessian Commissioner for Data Protection and Freedom of Information.