Privacy Policy

This is a translation for your convenience. The German version is legally binding.

Privacy at a glance

General information

Protecting your personal data matters to me. Below I explain which data is collected, processed and stored when you visit this website.

Data collection on this website

Controller

Visual Generative Art / Dirk Habenschaden
Holzmichl 31
85413 Hörgertshausen, Germany

dh@visual-generative.art

What data is collected?

Technical data such as IP address, browser type and version, operating system, referrer URL and time of the server request.

How is the data collected?

Automatically when you visit the website, or through what you enter (e.g. in the contact form).

Hosting & server log files

This website is hosted by an external provider. When you access it, the following data is automatically stored in server log files:

  • page visited
  • date and time of access
  • amount of data sent
  • source/referrer from which you reached the page
  • browser and operating system used
  • IP address (anonymised)

This is based on Art. 6(1)(f) GDPR (legitimate interest in a stable and secure website).

Google Analytics

This website uses Google Analytics, a web analytics service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

What does Google Analytics do?

Google Analytics uses cookies that allow the use of the website to be analysed. The information generated by cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

I have enabled Google Analytics with “IP anonymisation”. This means your IP address is shortened before it is stored, so it cannot be traced directly back to you.

Objecting to data collection

You can prevent Google Analytics from storing your data by installing the browser add-on to deactivate Google Analytics.

Alternatively, an opt-out cookie can prevent your data from being collected. It sets a cookie in your browser that prevents data collection on this website in the future.

Legal basis: Google Analytics is used on the basis of Art. 6(1)(a) GDPR (consent).

Newsletter/waitlist (MailerLite)

If you sign up for the waitlist, I process your e-mail address via the e-mail marketing service MailerLite, UAB “MailerLite”, Basanavičiaus g. 15, LT-03108 Vilnius, Lithuania.

How does signing up work?

Sign-up uses a double opt-in: after signing up you receive a confirmation e-mail and must actively confirm before you are sent news about new series and works. Without this confirmation your address is not used for mailings.

MailerLite’s servers are located within the EU, so in principle no transfer to third countries outside the EU/EEA takes place.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the unsubscribe link in every e-mail or by writing to the contact address above.

Bot protection for the waitlist (Cloudflare Turnstile)

To protect the waitlist sign-up against automated bots and abuse, I use Cloudflare Turnstile by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks technical characteristics of your browser in the background to tell automated requests apart from human visitors – usually without you having to do anything.

The Cloudflare Turnstile Privacy Addendum also applies.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing spam and bot abuse).

Contact form (Formspree)

For the technical delivery of requests sent via the contact form I use Formspree, Formspree, Inc., 309 E 21st St, Rm 3331, Austin, Texas, 78705, USA.

What data is transmitted?

What you enter in the contact form (name, e-mail address, message and, where applicable, the images requested via the selection view and a Collector Token from the HYCEAN 18 arcade) is forwarded to me via Formspree and temporarily stored there for delivery.

As Formspree is based in the USA, this involves a transfer of data to a third country. According to Formspree, this transfer is safeguarded by EU Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework.

Legal basis: Art. 6(1)(b) GDPR (handling your request) and Art. 6(1)(f) GDPR (legitimate interest in reliable technical delivery).

Cookies & tracking technologies

This website uses cookies to provide certain functions and improve your experience.

Which cookies are set?

Technically necessary cookies: required to display the website correctly.
Analytics cookies (Google Analytics): set only with your consent, for statistical analysis of user behaviour.

How can you manage cookies?

You can set your browser to only accept cookies with your consent or to block them entirely. The settings of the most common browsers:

  • Google Chrome: Settings → Privacy
  • Mozilla Firefox: Settings → Privacy & Security
  • Safari: Settings → Privacy
  • Microsoft Edge: Settings → Privacy & services

Legal basis: cookies are stored on the basis of Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) GDPR (consent for analytics cookies).

Local storage (localStorage)

On some exploration pages you can select images for a request (selection view). Your selection is stored in your browser’s localStorage so that it is kept after changing pages or returning later, until you send it via the contact form or it expires automatically after 30 days.

Only information about the selected images is stored (e.g. file name, image path), no personal data. This storage is strictly necessary to provide a function you actively use and therefore requires no separate consent.

Legal basis: Art. 6(1)(b) and (f) GDPR and Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act; storage strictly necessary to provide a service you have explicitly requested).

HYCEAN 18 arcade and Collector Token

At hycean18.visual-generative.art I offer the browser game HYCEAN 18. Anyone who clears a round receives a Collector Token: a code granting 10 to 50 % off HYCEAN 18 pieces.

Issuing the code: When the game starts and when a level is reached, the game sends a request to my server (start time and level reached, no name and no e-mail address). The server creates the code from this. To prevent abuse, an encrypted (hashed) identifier of your IP address is stored on the server together with the request times and deleted after one hour without further use at the latest. It does not allow me to identify you.

Cookie “h18code”: The code and its expiry date are stored in a cookie named “h18code” for the domain visual-generative.art (lifetime 183 days). This lets the HYCEAN 18 exploration page show your code and pre-fills it in the contact form. The cookie is only set when you reach a level in the game. It contains only the code and its expiry date, is not passed on to third parties and is not used for analytics or advertising. You can delete it in your browser at any time; your code remains valid if you have noted it down.

Redeeming: If you enter the code in the contact form, it is sent to me via Formspree like the rest of your details (see “Contact form”). To process your order, I note the code together with the order so that it can only be redeemed once.

Legal basis: Art. 6(1)(b) GDPR (providing the game and Collector Token you use), Art. 6(1)(f) GDPR (legitimate interest in preventing abuse) and Section 25(2) No. 2 TDDDG (storage strictly necessary to provide a service you have explicitly requested).

Your rights under the GDPR

Under the General Data Protection Regulation you have the following rights:

  • access to the stored data (Art. 15 GDPR)
  • rectification of incorrect data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing (Art. 21 GDPR)

If you wish to exercise your rights, you can contact me at any time at the address given above.

Right to lodge a complaint with a supervisory authority

If you believe your data has been processed unlawfully, you can lodge a complaint with the competent data protection supervisory authority. A list of supervisory authorities is available from the German Federal Commissioner for Data Protection (BfDI).

Changes to this privacy policy

I reserve the right to change this privacy policy at any time to adapt it to new legal requirements or changes to my website.

Last updated: October 2026