Legal
Privacy policy
In short: this website does not use tracking, analytics, advertising cookies or social media plugins. Fonts are loaded from our own server. Personal data is only processed when you contact us or use the AI Studio demo to generate a visual.
1. Controller
Dom Quichotte
Gärtnerstraße 28, 10245 Berlin, Germany
Email: info@domquichotte.ai
2. Hosting and server log files
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). When you visit the website, the server automatically records technical access data: IP address, date and time, requested page or file, referring page, browser and operating system.
Purpose: delivering the website and keeping it secure (e.g. against attacks). Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in a secure, working website. IONOS shortens IP addresses in the log files so that they can no longer be assigned to you; the log files are deleted after eight weeks at the latest.
3. Storage in your browser
We do not set cookies. The AI Studio demo stores two small entries in your browser and only when you use it: an access code you entered or opened via a link (session storage, deleted when you close the tab) and, in preview mode, a counter of demo generations (local storage). Nothing of this is sent to us or to third parties. Legal basis: § 25 (2) No. 2 TDDDG — the storage is strictly necessary for the function you requested.
4. Contacting us
The contact buttons and the brief form open your own email program; the website itself does not store what you enter. When you write to us, we process your email address, your name and the content of your message to answer you and, if applicable, to prepare an offer. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (answering enquiries). We delete enquiries when they are settled, unless statutory retention periods apply (e.g. for commercial and tax records).
5. AI Studio demo: generating your own visual
If you generate a visual in the AI Studio demo, we process: your email address (or a personal access code instead), your idea text, the selected product and options, and the generated image. We send the finished visual to your email address; it is stored in plain text only until this email has been sent. To limit the number of generations, we store your email address and IP address only as a hash (pseudonymised counter).
Purpose: creating the visual you requested, sending it to you and preventing misuse of the demo. Legal basis: your consent, Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future by email.
To create the visual, your idea text and selection — not your email address — are processed by the following services:
- Make (Celonis SE, Munich, Germany) — automation of the workflow, as our processor.
- OpenAI (OpenAI Ireland Ltd., Dublin, Ireland; OpenAI, L.L.C., USA) — turns your idea into an image prompt. Transfers to the USA are based on the EU–US Data Privacy Framework and the EU standard contractual clauses.
- Google (Google Ireland Limited, Dublin, Ireland; Google LLC, USA) — Gemini API for image generation and Google Drive for storing the result. Transfers to the USA are based on the EU–US Data Privacy Framework and the EU standard contractual clauses.
Generated images and the related prompts are deleted after six months at the latest. The images are created with AI and are labelled as generated.
6. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7 (3)). Just write to info@domquichotte.ai.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
7. No automated decisions
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
Last updated: October 2026