Shir Koren Projects

Privacy

This privacy policy explains what personal data is processed when you visit this website and why. In short: this website uses no cookies, no analytics, no tracking and no advertising. Fonts are hosted on this website itself; no data is sent to Google or other font services.

1. Controller

Shir Koren, Shir Koren Projects
Bevernstraße 4, 10997 Berlin, Germany
Email: info@shirkoren.com

2. Hosting and server log files

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). When you visit the website, Cloudflare automatically processes technical data that your browser transmits, such as your IP address, date and time of access, the page requested, browser type and operating system. This is necessary to deliver the website securely and to protect it against attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient operation of the website).

Cloudflare may process data in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which provides an adequacy decision of the European Commission (Art. 45 GDPR). In addition, we have concluded a data processing agreement with Cloudflare. More information: cloudflare.com/privacypolicy.

3. Contact by email

If you contact us by email, we process your email address, your name if given, and the content of your message in order to reply. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). Emails to addresses at shirkoren.com are forwarded via Cloudflare Email Routing to a mailbox provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We delete your data once it is no longer needed, unless statutory retention obligations apply.

4. Exhibition invitations (newsletter)

If you sign up for exhibition invitations, we process your first name and email address to send you invitations to our exhibitions. Sign-up uses the double opt-in procedure: you receive an email and must confirm your address before you are added. We store the time of sign-up and confirmation to document your consent. The legal basis is your consent, Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the unsubscribe link in every email or by writing to info@shirkoren.com.

The invitations are sent via Brevo, a service of Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France. Your data is stored on Brevo’s servers in the EU. We have concluded a data processing agreement with Brevo. Brevo may record whether an email was opened and which links were clicked, in order to evaluate our mailings. More information: brevo.com/legal/privacypolicy.

5. Links to Instagram and other websites

This website contains simple links to Instagram and to artists’ websites. No data is transmitted to these services when you load this website. Data is only processed by the respective provider if you click a link and visit their site; their privacy policies apply there.

6. Your rights

You have the right to:

  • access the personal data we hold about you (Art. 15 GDPR)
  • have incorrect data corrected (Art. 16 GDPR)
  • have your data deleted (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

To exercise these rights, write to info@shirkoren.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

7. Changes

We may update this privacy policy when the website changes. The current version always applies.

Last updated: October 2026