Legal

Privacy Policy

Last updated: 1 September 2026

LilyOl ("we", "us", "our") is the creative practice of Lilian Nira dos Anjos de Oliveira, based in Essen, Germany.

We respect your privacy and are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.

This Privacy Policy explains what personal data we collect through lilyol.art, why we collect it, how it is used, and what rights you have.

1. Data Controller

The data controller responsible for the processing of personal data through this website is:

Lilian Nira dos Anjos de Oliveira
Reckhammerweg 12
45141 Essen
Germany

Email: contact@lilyol.art

For further legal information, please see our Impressum.

2. Personal Data We Collect

We only collect personal data that is necessary for the purposes described below.

Depending on how you use the website, this may include:

  • Email address, when you subscribe to our newsletter
  • Name, email address and any information you voluntarily provide when contacting us
  • Technical information generated when you visit the website, such as IP address, browser type, device information and server logs
  • Website usage information collected through Google Analytics, where you have provided the required consent

We do not intentionally collect sensitive personal data through this website.

3. Contact

If you contact us by email or through a contact form, we process the information you provide in order to respond to your enquiry.

The legal basis for this processing is Article 6(1)(b) GDPR where your enquiry relates to taking steps at your request prior to entering into a potential agreement, or Article 6(1)(f) GDPR where processing is based on our legitimate interest in responding to general enquiries.

We retain correspondence only for as long as necessary to handle your enquiry and any resulting relationship, unless a longer retention period is required by law.

4. Newsletter

If you subscribe to the LilyOl newsletter, we collect your email address solely to send you communications such as:

  • new artwork and collections;
  • studio updates;
  • occasional behind-the-scenes content;
  • other news related to LilyOl.

We do not require your name or other personal information to subscribe.

Newsletter subscriptions are processed using Brevo (Sendinblue SAS, France).

The legal basis for sending the newsletter is your consent under Article 6(1)(a) GDPR.

You can withdraw your consent at any time by using the unsubscribe link included in each newsletter. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Double opt-in: Newsletter subscriptions are intended to use a double opt-in confirmation process. This process is currently being configured in Brevo.

5. Hosting

This website is hosted by Hostinger.

When you visit the website, technical information may be processed by the hosting provider as part of providing, securing and maintaining the website. This may include IP addresses, access times, browser information and server logs.

Processing is based on our legitimate interest in operating a secure and reliable website under Article 6(1)(f) GDPR.

6. Google Analytics

We use Google Analytics, a web analytics service provided by Google, to understand how visitors interact with our website and to improve its content and user experience.

Google Analytics is only activated if you provide consent for the Analytics category through our cookie consent mechanism.

Depending on your settings, Google Analytics may process information such as:

  • approximate location;
  • device and browser information;
  • pages visited;
  • interactions with the website;
  • technical identifiers and online identifiers.

The legal basis for this processing is your consent under Article 6(1)(a) GDPR.

You can change or withdraw your cookie consent at any time through the cookie settings available on the website.

7. Cookies

We use cookies and similar technologies to operate the website and, where permitted, to understand website usage and support future marketing activities.

Cookies are divided into the following categories:

Necessary cookies
These are required for the website to function properly and cannot be disabled through the cookie consent mechanism.

Analytics cookies
These are used to understand how visitors use the website, including through Google Analytics. They are only activated with your consent.

Marketing cookies
Marketing technologies may be used in the future for advertising, remarketing and measuring advertising effectiveness, including services such as Google Ads, Meta and TikTok.

These technologies will only be activated where you have provided the required consent.

You can manage your preferences through the cookie settings on the website.

8. Third-Party Services

We use selected third-party providers to operate and improve the website, including:

  • Hostinger — website hosting
  • Brevo — newsletter management
  • Google Analytics — website analytics

These providers may process personal data on our behalf or as independent data controllers, depending on the service and processing involved.

Where personal data is transferred outside the European Economic Area, appropriate safeguards will be applied in accordance with applicable data protection law.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Newsletter data is retained until you unsubscribe or withdraw your consent.

Contact correspondence is retained only as long as reasonably necessary to handle the enquiry and any resulting relationship.

Technical and analytics data is retained according to the relevant service provider's applicable retention settings and our consent configuration.

10. Your Rights

Under the GDPR, you may have the following rights:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object to certain processing
  • Right to withdraw consent at any time where processing is based on consent

You also have the right to lodge a complaint with a competent data protection supervisory authority.

For Germany, you can contact the relevant supervisory authority responsible for your place of residence or the responsible authority for the data controller.

To exercise your rights, please contact us at: contact@lilyol.art

11. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

However, no transmission or storage system can be guaranteed to be completely secure.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the website, the services we use or applicable legal requirements.

The latest version will always be published on this page, together with the date of the most recent update.

LilyOl
Creating belonging through art.