Privacy Policy | HypnosTravelArt

👤 1. Controller

The controller responsible for data processing on this website is:

Gilbert Wipfli
Urb. Pla Roig I, 71A
Ap. de Correos 802
03710 Calpe
Spain

ℹ️ 2. General information

Protecting personal data is important to me. Personal data is processed on this website only where necessary to operate the website, provide its functions or respond to enquiries.

Processing is carried out in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

Personal data is any information that can directly or indirectly identify a natural person.

🖥️ 3. Hosting

This website is hosted by an external hosting provider. The hosting provider supplies the technical infrastructure required to make this website available.

IP addresses, server log files, connection data and other technical information may be processed in this context. Processing is necessary to provide the website securely, reliably and without disruption.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and functional operation of this website.

📄 4. Server log files

When you visit this website, technical information may automatically be stored in server log files.

This may include:

IP address
date and time of access
requested page or file
amount of data transferred
browser type and version
operating system
referrer URL
HTTP status code

This data is used for technical operation, error analysis, stability and security. It is not combined with other data sources or used for personal profiling.

The legal basis is Article 6(1)(f) GDPR.

🍪 5. Cookies and local storage

This website currently does not use analytics or marketing tracking services such as Google Analytics.

Technically necessary cookies or comparable local storage technologies may be used where required for essential website functions. These may include language selection, session functions, form protection or administrative logins.

Technically necessary cookies are used on the basis of Article 6(1)(f) GDPR. Where consent is required, processing is based on Article 6(1)(a) GDPR.

📧 6. Contact form and contact by e-mail

If you use the contact form or contact me by e-mail, the information you provide will be processed to respond to your enquiry.

This may include:

name
e-mail address
selected subject
message content
date and time of transmission
technical data required to prevent misuse

Processing is carried out to respond to your enquiry. Depending on the nature of the enquiry, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

The data will not be passed on to third parties without a legal basis.

✉️ 7. Newsletter

If you subscribe to the newsletter, your e-mail address will be processed to send information about new articles, trips, photography projects, products or website news.

Subscription is voluntary. Where used, registration is secured by a confirmation procedure.

You may withdraw your consent at any time with future effect. You can use the unsubscribe link in the newsletter or contact kontakt@hypnos1105.ch .

Processing is based on your consent under Article 6(1)(a) GDPR. Your e-mail address is generally stored until you unsubscribe.

💬 8. Guestbook

If you publish an entry in the guestbook, the information you enter will be stored and displayed on the website.

This may include:

name or nickname
city, where provided
e-mail address, where provided voluntarily
message
date and time
technical data required to prevent misuse

The name or nickname, city, message and date may be displayed publicly after approval. A voluntarily provided e-mail address is not displayed publicly and is used only for internal processing of the guestbook entry.

Guestbook entries are reviewed before publication. Please do not publish confidential, sensitive or third-party personal data.

Processing is based on your consent under Article 6(1)(a) GDPR and the legitimate interest in operating a secure guestbook under Article 6(1)(f) GDPR.

🖼️ 9. Travel blog, gallery and media library

Photos, videos and information about recording locations are published in the gallery, travel blog and media library.

Images may contain technical recording data or be displayed together with such data. This may include camera model, lens, focal length, shutter speed, aperture, ISO value, recording time or location information.

Location information is published only where this is intended for documenting the recording location.

Personal data of uninvolved individuals is avoided where possible or published only where an appropriate legal basis exists.

🗺️ 10. Maps using Leaflet and OpenStreetMap

Interactive maps are used on certain pages to display photography locations and travel destinations.

The technical display is provided using the open-source JavaScript library Leaflet. Leaflet itself does not provide map data and, when hosted locally, generally does not process personal data.

The displayed map data is provided by OpenStreetMap. When map tiles are loaded, a connection is established to the map servers being used. The IP address, time of access, browser information and requested map area may be transmitted.

Processing is based on Article 6(1)(f) GDPR. The legitimate interest is the clear visual presentation of photography and travel locations.

Further information: OpenStreetMap Foundation Privacy Policy

🛍️ 11. Etsy shop

Products from my Etsy shop HypnosTravelArt are presented on this website.

Product information such as titles, prices, variations and images may be retrieved through the Etsy interface and displayed on this website.

Purchases and payment processing take place exclusively on Etsy. When you click a product or purchase link, you will be redirected to Etsy.

This website does not process payment data or complete order details from Etsy purchases.

Etsy’s privacy rules apply once you access the Etsy website.

Further information: Etsy Privacy Policy

📦 12. Production and shipping through Gelato

Certain products from the Etsy shop are manufactured and shipped through the print-on-demand provider Gelato.

Orders and payments are processed through Etsy. Where necessary for production and delivery, Etsy and Gelato may exchange order, delivery and contact details.

Merely visiting shop or product pages on this website does not transmit personal visitor data to Gelato.

Further information: Gelato Privacy Policy

💳 13. Support payments and payment processing through Stripe

Hypnos1105.ch may offer visitors the option to provide voluntary financial support for my travel and photography project. This may include one-time contributions as well as recurring support as a Travel Companion.

Payment processing is carried out by the payment service provider Stripe. Depending on the payment method, data processed may include name, e-mail address, payment amount, currency, payment status, date and customer, payment, invoice, checkout and subscription identifiers assigned by Stripe.

Selected payment and customer information from Stripe is stored in a database operated for Hypnos1105.ch in order to manage and allocate support payments. This may include Stripe identifiers, payment date, name, e-mail address, amount, currency, payment status, type of support and customer or subscription status.

Complete credit or debit card details are not stored on the Hypnos1105.ch web server. They are processed by Stripe as part of the payment process.

Recurring support data is also processed to manage its current status and to technically assign changes such as renewals or cancellations.

Supporters are mentioned publicly only in accordance with the publication settings provided for this purpose. Only approved information, such as a chosen public display name, is shown. Private contact details, e-mail addresses, Stripe identifiers and payment details are not displayed publicly.

Where processing is necessary to provide and manage requested support, it is based on Article 6(1)(b) GDPR. Where processing is required for secure technical administration, allocation and documentation, Article 6(1)(f) GDPR may apply. Statutory retention obligations remain unaffected.

Further information: Stripe Privacy Policy

🤖 14. AI-assisted translations using OpenAI

Services provided by OpenAI may be used for individual editorial tasks. This currently includes translating or improving product descriptions, travel reports, articles, media descriptions, alternative text and other editorial content.

Only the content intended for processing is transmitted to the OpenAI API. Visitor information from contact forms, newsletter subscriptions, guestbook entries or orders is not used for these translations.

AI-assisted processing takes place within the administrative area and is not automatically triggered by visiting the website.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the efficient creation and translation of multilingual content.

Further information: OpenAI European Privacy Policy

🔗 15. Affiliate links

This website may contain affiliate links. These are clearly marked links to offers provided by external companies.

If you click such a link and make a booking or purchase from the linked provider, I may receive a commission. This does not result in any additional costs for you.

When an affiliate link is clicked, the website of the respective provider is opened. Technical data such as your IP address, time of access, referring website and device information may be processed.

The respective provider is responsible for any subsequent processing. Its privacy policy applies. Affiliate links are marked accordingly on this website.

🌐 16. Social media

This website contains links to external social media platforms, such as YouTube, Facebook, Instagram, Pinterest or TikTok.

With ordinary text or image links, a connection to the respective platform is generally established only when you click the link.

After clicking the link, you leave this website. The privacy policy of the respective platform operator applies to subsequent data processing.

▶️ 17. Embedded content

Content from external providers may be embedded on this website, including videos, maps, preview images or other media.

Loading such content may establish a direct connection to the servers of the respective third-party provider. The IP address, browser information and the page being viewed may be transmitted.

Where possible, external content is embedded in a privacy-friendly manner or loaded only after a deliberate user action.

↗️ 18. External links

This website contains links to external websites. I have no control over their content, technical design or processing of personal data.

When you click an external link, you leave this website. The operator of the destination website is responsible for processing personal data there.

📊 19. Internal visitor statistics

An internal privacy-friendly visitor statistics system may be used in the future to improve this website.

Only technically necessary, anonymised or promptly shortened data is intended to be processed. Data will not be shared with external analytics providers, combined with advertising profiles or used for cross-site tracking.

Data collected may include anonymised page views, clicks on shop or affiliate links, general device categories, language versions and technically necessary timestamps.

Once this function is activated, this section will be updated with the exact data collected, retention period and anonymisation method.

🗄️ 20. Storage period

Personal data is stored only for as long as necessary for the relevant purpose or as required by statutory retention obligations.

When the purpose no longer applies and no statutory retention obligation exists, the relevant data will be deleted or anonymised.

⚖️ 21. Your data protection rights

Under applicable data protection law, you have the following rights in particular:

right of access to your stored data
right to rectification of inaccurate data
right to erasure
right to restriction of processing
right to object to processing
right to data portability, where applicable
right to withdraw consent

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact kontakt@hypnos1105.ch .

🏛️ 22. Right to lodge a complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

In Spain, the relevant authority is in particular the Agencia Española de Protección de Datos (AEPD).

🔒 23. Encrypted data transmission

This website uses an encrypted HTTPS connection. This protects data transmitted between your browser and the server from being read by third parties.

An encrypted connection can be recognised by https:// and the corresponding security symbol in your browser.

🔄 24. Changes to this privacy policy

This privacy policy may be updated if the website, services used, technical functions or legal requirements change.

The current version published on this page applies.

Last updated: August 2026