Effective date: 15 July 2026
Controller: Chimene Gaspar, Chimene Graphics, Kurler Str. 256, 44329 Dortmund, Germany.
Email: hello[at]chimene-graphics dot com
This privacy policy explains what personal data is processed when you visit https://chimene-graphics.com/ or contact me about my web design and maintenance services, and what rights you have. The short version: this website collects no personal data unless you choose to send it to me through the contact form or by email.
1. Contact form and email enquiries
When you contact me through the form on this website, I receive only the data you enter: your first and last name, email address, your website URL (optional), the service you are interested in, the design you have chosen (optional), your message, and your confirmation that you have read this privacy policy. The form contains an invisible anti-spam field that processes no personal data.
Form submissions are not stored in the website’s database. They are delivered directly to my email inbox, where I process them to answer your enquiry and to take steps prior to entering into a contract (Art. 6(1)(b) GDPR).
Enquiry correspondence that does not lead to a project is deleted after 12 months. Where a project follows, project-related records are retained as required by German commercial and tax law, for up to ten years (§ 257 HGB, § 147 AO; Art. 6(1)(c) GDPR).
2. Server logs
My hosting provider, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, automatically records technical access data in server logs: IP address, date and time of access, requested page, browser type and operating system, and the referring URL. This processing serves the security, stability and error analysis of the website (Art. 6(1)(f) GDPR). Log files are deleted after 6 months. A data processing agreement in accordance with Art. 28 GDPR is in place with the hosting provider.
3. Cookies and consent management
This website sets one functional cookie of its own: pll_language, which remembers the language you have chosen (Art. 6(1)(f) GDPR).
To manage cookie preferences, this website uses the consent tool CookieYes, provided by CookieYes Limited, 3 Warren Yard, Warren Park, Milton Keynes MK12 5NW, United Kingdom. The banner lets you accept or refuse non-essential cookies before they are set. CookieYes stores your choice in a consent cookie (cookieyes-consent, kept for about one year) and keeps a record of your consent, which I am legally required to be able to demonstrate (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). To display the banner, your browser loads a script from CookieYes servers. Details can be found in CookieYes’s privacy policy.
You can change or withdraw your cookie choices at any time via the banner settings, and delete or block cookies in your browser; if you block the language cookie, your language choice will not be remembered between visits.
4. No analytics, no marketing
I do not use analytics or tracking tools. I do not send newsletters or marketing emails, do not share your data with third parties for marketing purposes, and do not sell or rent personal data. No automated decision-making or profiling takes place.
5. Fonts
The fonts used on this website are hosted on my own server. No connection to third-party font services is established when you visit this website.
6. External links, social profiles and share buttons
This website links to external platforms, including Instagram, Pinterest, and my photography profiles on Pixabay, Pexels, Unsplash and StockSnap. In addition, share buttons (Sassy Social Share) let you share posts and pages on social networks. Both are plain links: no data is transferred to these platforms by merely visiting my website. A connection to the respective network is only established when you click a link or share button, and from that moment the privacy policy of the destination applies.
7. Data security
This website is delivered over TLS-encrypted HTTPS connections. I apply regular software updates, restrict access to personal data, and follow secure email and backup practices. Please note that no method of transmission or storage over the internet is completely secure.
8. Your rights
You have the right to:
- access the personal data I hold about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR), and
- objection to processing based on legitimate interests (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW). To exercise any of these rights, contact me at the address above.
9. Recipients and data transfers
Your personal data is processed primarily within the European Union. It is shared only with the service providers named in this policy (hosting, email delivery) and where I am legally required to disclose it.
10. Changes to this policy
I update this privacy policy when my practices or legal requirements change. The current version, with its effective date, is always published on this page.