Privacy Policy
Last updated: 2026
This English Privacy Policy is a translation of the German Datenschutzerklärung. It explains how personal data is processed when you visit designwindmill.com, including the blog at /blog/. It applies to the current technical configuration of the website.
1. Controller
Valentyna Chukhlyebova
Design Windmill
Finkenweg 36
53229 Bonn
Germany
Phone: +49 228 286286370
Email: info@designwindmill.com
2. Website delivery and server log files
When you access the website, the web server processes connection data that is technically required. This may include a shortened IP address, the date and time of access, the requested file or page, the previously visited page, browser type and version, operating system, amount of data transferred and the HTTP status code.
Complete IP addresses are not logged. For IPv4 addresses, the final two number blocks, also called octets, are replaced with zeros before the entry is stored in the server log. For example, 192.168.178.111 is stored only as 192.168.0.0. The complete IP address is therefore not present in the server log files.
This processing is necessary to deliver the website, maintain its stability and security, identify technical errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR. My legitimate interests are the secure, reliable and functional operation of the website.
The website and blog are operated on a server managed by me. Where technical service providers are used for server or data-centre infrastructure, they may have access to connection data to the extent necessary. Where they process data on my behalf, this is governed by a contract under Article 28 GDPR.
The remaining server log data is deleted when it is no longer required for these purposes. If a specific security incident occurs, relevant data may be retained until the incident has been fully investigated and legal claims have been established, exercised or defended. Statutory retention duties remain unaffected.
3. Cookies and local storage
The static pages of this website do not use analytics, advertising or tracking cookies and do not store data in your browser's Local Storage or Session Storage.
The blog is operated with the ProcessWire content management system. Where ProcessWire sets a session cookie for a technically necessary session or security function, it contains only a random session identifier. It is not used for advertising or cross-site tracking and is generally deleted at the end of the browser session.
The storage of or access to information that is strictly necessary is based on section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act, or TDDDG. Where personal data is processed, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and functional operation of the blog.
4. Contact by email
If you contact me by email, I process the information you send, for example your email address, name, message and any other information you provide voluntarily. The purpose is to handle and answer your enquiry.
If your enquiry concerns a contract or steps taken before entering into a contract, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR. My legitimate interest is the proper handling of your message. Where processing is required by law, Article 6(1)(c) GDPR also applies.
The information is deleted once the enquiry has been fully dealt with and there are no statutory retention duties or legitimate reasons for further storage. Email and technical service providers may be used as processors.
Providing your information is voluntary. Without a means of contacting you, I may not be able to respond.
5. External links and product platforms
The website contains links to external services, including Amazon, Zazzle, TeePublic, Redbubble, Displate, Pinterest and various stock agencies. These are ordinary external links, not embedded social media plug-ins. A connection to the relevant provider is generally established only after you click a link. From that point, the external provider processes data under its own responsibility. This may include your IP address, time of access, browser information and the requested destination page.
The privacy policies of the external providers apply to their processing. Some providers may also process data outside the European Economic Area. I have no control over the nature, scope or duration of that processing.
6. Externally loaded media in the blog
Individual blog posts may include product images that are loaded directly from servers or content delivery networks operated by external product platforms. In that case, your browser connects to the relevant provider when the post is opened. The provider receives the connection data required for delivery, particularly your IP address and information about the requested file.
The purpose is to illustrate the products discussed in the post. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the clear and visual presentation of my content. Where technically possible, images are hosted locally to avoid additional connections to third parties.
7. No audience measurement or automated decisions
The current website does not use services such as Google Analytics, advertising pixels or embedded social media plug-ins. No profiling or automated decision-making within the meaning of Article 22 GDPR takes place.
8. Recipients and disclosure of data
Personal data is disclosed only where this is necessary to operate the website, deal with an enquiry, comply with legal duties, or establish, exercise or defend legal claims. Possible recipients include server, data-centre and email service providers, legal and tax advisers, and competent public authorities.
9. Your rights
Subject to the applicable legal requirements, you have the following rights in particular:
- Access to your personal data under Article 15 GDPR
- Rectification of inaccurate data under Article 16 GDPR
- Erasure of your data under Article 17 GDPR
- Restriction of processing under Article 18 GDPR
- Data portability under Article 20 GDPR
- Objection to processing based on Article 6(1)(e) or (f) GDPR under Article 21 GDPR
- Withdrawal of consent at any time with effect for the future under Article 7(3) GDPR
To exercise your rights, email info@designwindmill.com. Under Article 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority.
10. Competent data protection authority
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
Complaints: information about lodging a complaint
11. Data security
The website is transmitted over an encrypted HTTPS connection. Appropriate technical and organisational measures are also used to protect personal data against loss, manipulation and unauthorised access. However, completely risk-free transmission over the internet cannot be guaranteed.
12. Changes to this Privacy Policy
This Privacy Policy will be updated if the website, the services used or the legal requirements change. The current version is always available on this page.
Legal sources: General Data Protection Regulation and section 25 TDDDG.