Privacy Policy

The protection of your personal data is important to me. Below I inform you about which data is processed when visiting this website and when using the provided tools, and which rights you have under the General Data Protection Regulation (GDPR).

Last updated: 19.11.2025

1. Data Controller

The controller responsible for data processing on this website is:

Winkels.dev – IT Services
E-mail: info@winkels.dev
Website: https://winkels.dev

2. General information about data processing

I process personal data exclusively in accordance with applicable data protection regulations, in particular the GDPR. Personal data means any information relating to an identified or identifiable natural person (e.g. name, e-mail address, IP address).

Data processing takes place only to the extent necessary to provide a functional website, to operate the offered tools, or to process contact requests.

3. Access data / Server log files

When this website is accessed, the web server automatically collects certain information and temporarily stores it in server log files. This includes in particular:

Processing is based on Art. 6(1)(f) GDPR (legitimate interest) for the technical provision of the website, ensuring system security and error analysis. No merging of these data with other data sources takes place.

4. Contact form

If you use the contact form, I process the data you enter:

The processing of these data is for the purpose of handling your inquiry and communicating with you. The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) as well as Art. 6(1)(f) GDPR (legitimate interest in efficient handling of inquiries).

The data are stored in an internal database and used exclusively to process your inquiry and for any necessary follow-up questions. Data will not be passed on to third parties unless this is necessary for processing your request or required by law.

Contact form data are regularly reviewed and deleted as soon as they are no longer necessary for the purpose for which they were collected. In general this is the case after 90 days, unless other legal retention requirements apply.

For internal organization new contact requests are additionally signaled by an internal notification system (e.g. a bot notifying the operator). Only the minimal information necessary to identify the request is processed. There is no publication of the data or disclosure to uninvolved third parties.

5. QR Code Generator & EPC QR Pay Generator

5.1 Standard QR Code Generator

With the QR code generator you can create QR codes for links, texts or other content. The content you enter is processed exclusively locally in the browser to generate the QR code. No server-side storage of entered texts or URLs takes place.

Generated QR codes can be downloaded and used freely by you. Each generated QR code contains a note "created with the QR Code generator tool by Winkels.dev" as well as an integrated logo.

5.2 EPC QR Pay Generator & OpenIBAN

For the EPC QR Pay generator (SEPA payment QR code), details such as recipient name, IBAN, BIC, amount and remittance information are processed to generate the QR code locally in the browser. Payment data are not stored on the server.

To automatically determine the BIC from the entered IBAN, the public API of OpenIBAN.com is used. The IBAN is transmitted to that service for validation and BIC lookup. No further personal information (e.g. name or amount) is transmitted to OpenIBAN.

The legal basis is Art. 6(1)(b) GDPR (provision of the function at your request) as well as Art. 6(1)(f) GDPR (legitimate interest in a user-friendly and error-free experience through automatic BIC determination).

6. Password generators

The offered password generators produce secure passwords exclusively locally in the browser. Generated passwords are not transmitted to the server and are not stored.

It is your responsibility how and where you store or use the passwords.

7. IP information tool

To display your public IP address an external service is used, e.g. the API of api.ipify.org. When calling this tool your IP address is transmitted to that provider to determine and display your public IP.

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in providing a technical information service).

8. Google reCAPTCHA

To protect the contact form from spam and misuse Google reCAPTCHA may be used (service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA serves to distinguish whether an input was made by a human or automated.

Among other things, the following data may be transmitted to Google:

The use of reCAPTCHA is based on Art. 6(1)(f) GDPR (legitimate interest in preventing spam and abuse). Further information can be found in Google's privacy notices.

9. Cookies

This website is designed so that it can be used without tracking cookies. If technically necessary cookies are used (e.g. for session management), they serve exclusively to provide the website and its functions and do not contain marketing or tracking information.

The legal basis for using technically necessary cookies is Art. 6(1)(f) GDPR (legitimate interest in a technically correct presentation and use of the website).

10. Storage period

Unless a more specific retention period is stated in this privacy policy, personal data will be deleted as soon as the purpose of the processing ceases or you exercise your right to deletion and no statutory retention obligations prevent it.

For contact form data, a retention period of generally up to 90 days applies, unless longer storage is required due to a specific contractual relationship or legal obligations.

11. Your rights

You have, under the GDPR, in particular the following rights:

For this and other questions you can contact me at any time:

E-mail: info@winkels.dev

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection laws.

12. Changes to this privacy policy

I reserve the right to adjust this privacy policy so that it always complies with current legal requirements or to reflect changes to the offered services in the privacy policy. The current version applies to your next visit.