Privacy Policy

1. Controller

The party responsible for processing personal data in connection with this website (Art. 4(7) GDPR):

Thomas Klein (artist name: Wilpsize)
Golfstraße 35
60528 Frankfurt am Main
Germany
Email: contact@wilpsize.com

This website is developed and technically operated on his behalf by Schumann Techworks, Vonwilstrasse 51, 9000 St. Gallen, Switzerland, as a processor within the meaning of Art. 28 GDPR.

2. Hosting & Server Logs

This website is hosted on Vercel and uses Supabase for its database and image storage. Both providers may process technical data on our behalf (such as IP address, browser type, and time of request) in order to provide this website. The database and the image files are held in the European Union (Ireland). The legal basis is our legitimate interest in providing this website securely and reliably (Art. 6(1)(f) GDPR).

3. Cookies & Tracking

This website sets no cookies at all. It uses no cross-site tracking technologies, no advertising networks, and no user profiling. The language you see follows from the address you visit — the plain address for English, /de for German — and is never guessed from your device or remembered between visits.
We do use two measurement tools from our host, Vercel: Web Analytics (page views and referrers) and Speed Insights (page loading performance). Both are operated without cookies and without any identifier that would let us recognise you across visits or websites; instead, each request is reduced to a hash that Vercel discards after 24 hours, so the data cannot be traced back to you as a person. That is why these two tools require no consent banner. Details: vercel.com/docs/analytics/privacy-policy.
The share links under each photograph (Pinterest, Facebook, email) are ordinary links, not the providers’ widgets: no code from those companies runs on this site, and nothing is transmitted to them unless you click one — and then only to the one you chose.
The Vimeo films on individual photo pages are the one exception, and they are only loaded if you click play — see section 4.

4. Embedded videos (Vimeo)

Each photograph has a companion film hosted by Vimeo Inc. (USA). These films are not loaded automatically. Opening a photo page establishes no connection to Vimeo whatsoever: what you see is a still preview picture delivered from this website’s own servers.
Only when you click play is Vimeo's player loaded, and only at that moment may your IP address and technical information about your device be transmitted to Vimeo. That click is your consent to the transfer (Art. 6(1)(a) GDPR); the notice beside each film says so before you click. If you do not click, nothing reaches Vimeo.
The consent applies to that one film on that one page view and is not stored — nothing remembers it, so nothing has to be withdrawn. We use Vimeo's privacy-friendly mode (Do-Not-Track), which reduces the setting of tracking cookies. It cannot, however, be entirely ruled out that Vimeo processes data collected this way or links it with other services. For more information, see Vimeo's privacy policy at vimeo.com/privacy.

5. Contact form

If you contact us via this website's contact page, we process the information you provide (name, email address, message content) solely to handle your inquiry. The page does not send anything itself: it opens a message in your own email program, addressed to contact@wilpsize.com, which you send yourself. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a purchase, and otherwise our legitimate interest in answering it (Art. 6(1)(f) GDPR).

6. Your rights

You have the right to request information about the personal data we process about you, as well as to request its correction, deletion, or restriction of processing, to object to processing based on legitimate interests, and to receive your data in a portable form. Please contact us at contact@wilpsize.com.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for the controller named above is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Wiesbaden.

7. Changes to this policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or in the services and data processing described above.