Privacy Policy.

Data protection / Datenschutz
Updated for the relaunch: 14 September 2026

1. Who is responsible?

The controller responsible for processing personal data in connection with this website is:

This policy concerns eyeland-design.com, including its Premium Eye Art pages and Visual Archive.

2. Visiting the website and hosting

You can browse the website without creating an account or providing your name. Your browser nevertheless transmits technical data needed to retrieve pages and media. This includes your IP address, the requested address, the date and time of the request and, depending on your browser, information about your browser, operating system and referring page.

Our website is hosted by epcan GmbH, Stadtlohner Straße 6, 48691 Vreden, Germany. The hosting service processes this information to deliver the website. Technical information may also be recorded in server logs to maintain reliable operation, diagnose errors and detect misuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a reliable and secure website.

Log data is retained only for as long as needed for these purposes. Data needed to investigate a security incident or meet a legal obligation may be retained for that purpose. The applicable period depends on the hosting configuration and whether information is needed to investigate a specific incident.

3. Images, videos and fonts

Images, videos, animation frames and other website files are served from this website’s hosting environment. Videos are not embedded from YouTube or Vimeo. The website uses fonts available on your device rather than loading fonts from an external font service.

Retrieving these files involves the technical connection data described above. Playing a video or using the interactive Premium presentation does not activate a separate third-party video player.

4. Cookies, analytics and browser storage

The website itself does not set analytics or advertising cookies and does not use Google Analytics, tracking pixels or advertising networks. Its page scripts do not use local storage or session storage to track visitors. Archive selections and presentation controls operate within the current page.

Your browser may cache website files to load them more efficiently. This is different from the website creating an advertising profile. Any additional functions introduced in the future will be reflected in an updated privacy policy.

5. Contact and project enquiries

You can contact us by email or telephone. We process the contact details and information you provide to answer your enquiry, discuss your project or handle a licensing request.

When you select “Send message”, the form transmits your name, email address, chosen topic, optional visual reference and message to our webserver for forwarding to Eyeland by email. The form does not subscribe you to a mailing list. If submission fails, the entries remain in the form so you can contact us by email instead.

When you arrive from the Visual Archive, a visual reference and enquiry topic may be included in the page address to fill in the corresponding form fields. These references identify the selected work. They can appear in your browser history and in technical request logs.

For enquiries relating to a contract or steps requested before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other correspondence, the basis is Article 6(1)(f) GDPR, namely our legitimate interest in responding to enquiries. Where processing is required to comply with statutory obligations, Article 6(1)(c) GDPR applies.

Providing enquiry information is voluntary. We need a way to contact you and sufficient information about your request in order to respond. Please do not include patient records or other sensitive health information in a general project enquiry.

To limit automated misuse, the form checks an additional hidden field and temporarily records request times together with a hashed identifier derived from the connecting IP address. The identifier is used only to limit submission attempts, not to track browsing. Only the previous hour is used for rate limiting; expired entries are removed on subsequent valid form requests. Message text is not stored in this rate-limit file. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in protecting the contact service against misuse.

6. Recipients and retention

Hosting and email service providers process data where necessary to provide their services. Personal information may also be disclosed where required by law or where necessary to handle a specific request or contract. We do not sell enquiry data for advertising.

Correspondence is retained for as long as necessary to handle the enquiry and any resulting project. If correspondence forms part of business records subject to statutory retention duties, it is retained for the applicable period. Otherwise, personal data is deleted when its purpose no longer applies, unless it is still needed to establish, exercise or defend legal claims.

7. Your rights

Subject to the applicable legal conditions, you have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing and data portability.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. If data is processed for direct marketing, you may object to that processing at any time. Where processing is based on consent, you can withdraw that consent with effect for the future; this does not affect processing carried out lawfully before withdrawal.

To exercise your rights, please contact us using the details above. You also have the right to complain to a data protection supervisory authority, in particular in the country of your habitual residence, place of work or the alleged infringement.

8. Automated decisions

We do not use personal data from this website for automated decisions producing legal or similarly significant effects, or for profiling.

9. External links and changes

Links to other websites take you to services operated by their respective providers. Their own privacy information applies once you visit those services.

We update this notice when website functions or the associated data processing change. For provider information, see our Imprint.