Privacy policy

Data controller

Website operation and logs

When you visit, our server processes your IP address, the page or file you request and information sent by your browser for the duration of the request. This data is technically required to deliver the site and downloads to you. Our download statistics store only the total number of file requests for each wallpaper.

We log technical errors for troubleshooting. When new entries fill the space set aside for these logs, we delete the oldest logs. How long we keep the logs depends on how many new entries are recorded. The legal basis for delivery and troubleshooting is Article 6(1)(f) GDPR. Our legitimate interest is keeping the site secure and reliable.

Hostinger hosts this website on our behalf. For any transfers to countries outside the European Economic Area without an adequacy decision, Hostinger's data processing addendum provides for safeguards including EU standard contractual clauses.

Hostinger data processing addendum

Delivery through Cloudflare

Cloudflare provides DNS resolution and forwards requests to heyleonie.com to our server. It processes technical data such as your IP address, the page or file you request, and connection details. We use the service to deliver the website securely and reliably (Article 6(1)(f) GDPR).

Cloudflare privacy policy

Backups

We store encrypted backups with Hetzner Online GmbH in the EU. We delete backups older than 30 days after the next successful backup. The same rule applies to backups we make before maintenance. We delete database recovery logs at the next daily cleanup after 30 days.

Hostinger also keeps the two most recent weekly backups. Hostinger says an additional manual backup expires after one day.

Data deleted from the live system may remain in a backup until that backup is deleted. Our legitimate interest is preventing data loss and restoring the site after a failure (Article 6(1)(f) GDPR).

Hostinger backup retention

Browser preferences

Your browser remembers your choice of light or dark mode until you clear this site's data. The lock screen preview remembers when it showed the sample notification in the open tab. After 60 minutes, the preview replaces that time when it next displays the notification. Section 25(2)(2) of the German TDDDG applies to these features.

Wallpaper newsletter

Signing up is optional and requires your email address. We also store your chosen language, subscription status, the times you sign up, confirm and unsubscribe, and data for your confirmation and unsubscribe links.

You get a confirmation link valid for 48 hours. Confirmation and limits on signup attempts help prevent abuse (Article 6(1)(f) GDPR). For these limits, we keep your IP address or part of it for up to 15 minutes.

After you confirm, we send the newsletter about new and exclusive wallpapers with your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time using the unsubscribe link or by emailing the address above. Withdrawal takes effect for the future. Your consent covers messages sent before withdrawal.

We delete unconfirmed signups at the next daily cleanup after the link expires or you unsubscribe. We keep confirmed signups for as long as you subscribe. After you unsubscribe, we keep evidence of your consent and withdrawal in case of legal claims (Article 6(1)(f) GDPR). We delete that evidence at the next daily cleanup after three years.

Email delivery through Mailgun

Sinch Mailgun sends the newsletter and confirmation email on our behalf through its EU sending region. Mailgun processes your email address, the message content and delivery information. Depending on the plan, it typically keeps content for up to 7 days and delivery information for up to 30 days.

After a permanent delivery failure or spam complaint, Mailgun may add your address to a list that blocks further delivery attempts. The entry is stored until it is removed from that list. Open and click tracking are off for the confirmation email. If your email app loads an image from it, our site processes the same technical data as it does when you visit a page.

For transfers to certified recipients in the US, including Mailgun Technologies, Inc., Sinch uses the EU-US Data Privacy Framework. For other transfers without an adequacy decision, Sinch provides for safeguards including EU standard contractual clauses. You can contact us for details of these safeguards.

Mailgun privacy policy

Contact by email

If you email us, we use your email address and the information in your message to answer your enquiry. The people handling your enquiry and our email providers can access this data. The legal basis is our legitimate interest in responding to your enquiry (Article 6(1)(f) GDPR).

We retain your message until we finish handling your enquiry. Statutory retention obligations or the need to establish, exercise or defend legal claims may require longer retention.

Your data protection rights

You can ask for access to your data. Subject to the conditions in the GDPR, you can have it corrected or erased, restrict its processing and receive it in a portable format (Articles 15 to 20 GDPR). To exercise these rights, email us at the address above.

You can complain to a supervisory authority, for example where you live, work or believe the infringement took place (Article 77 GDPR). The Saxon Data Protection and Transparency Commissioner is the authority for our registered office in Dresden.

File a data protection complaint in Saxony

Your right to object

You can object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. After an objection, we may continue processing only if compelling legitimate grounds override your interests, rights and freedoms or if the processing is for the establishment, exercise or defence of legal claims (Article 21(1) GDPR).

You can object to processing for direct marketing at any time (Article 21(2) GDPR).