Skip to content

Privacy policy

Effective date: 2026-10-30

Who is responsible

Bildhafen (bildhafen.com) is operated by ИП Зиверт Давид. ИП Зиверт Давид (tax number 23108198950056) is the controller for the processing described here. Contact: hi@david-siewert.com, +996995494200. Public business/contact address: Issyk-Kul Region, Karakol, 722000, Voskhod Microdistrict, Building 20, Apartment 33.

Data, purposes and legal grounds

  • Site delivery and security: hosting infrastructure may process IP addresses, request times, requested pages, browser/device information and error or security records to deliver the site, troubleshoot faults and prevent abuse. Processing relies on legitimate interests in a functioning, secure site, subject to your rights and the applicable balancing requirements.
  • Your inquiries and orders: if you email or otherwise contact us, we process your contact details, messages, requirements and any information needed to agree, deliver and support an order. The grounds are steps you request before a contract and performance of that contract. Please do not send unnecessary sensitive or third-party personal data.
  • Business and payment records: where relevant, we process order, invoice, payment-status and transaction-reference information for performance of the contract, accounting and other legal obligations. Records needed to address complaints or defend claims may also be retained on applicable legitimate-interest or legal grounds.

Merely browsing does not give consent to additional processing. Where consent is required, it must be obtained separately and may be withdrawn without affecting the lawfulness of earlier processing. We do not require consent as a substitute for a contract or other applicable legal ground. If information is necessary to respond to an inquiry or perform an order, not providing it may prevent that response or performance.

Payments and recipients

Hosting and communication providers may process the technical records and messages needed to run the site and handle business communications. Professional advisers or authorities receive information only where necessary and lawful, for example for accounting, compliance or claims.

Finik (https://www.finik.kg/) is the intended provider for Visa card payments when such payment is offered for a particular order. Publishing these policies does not enable card payments. Finik Visa subscriptions are fixed-term with manual renewal only; we do not offer automatic renewals or recurring card debits through Finik Visa. If a payment option is made available, the payment provider and participating banks process payment credentials under their own applicable notices. We receive only the order/payment information needed for the transaction; we do not request or store full card numbers or card security codes. Do not send these by email.

We limit disclosure to the purpose and use appropriate contractual and security measures for service providers. If processing involves a cross-border transfer, we must satisfy the applicable legal transfer requirements and safeguards; this policy does not assume a particular destination country or that a transfer is permitted without those safeguards. You may contact us for information about recipients and safeguards relevant to your data.

Retention and security

We keep personal data only as long as needed for the stated purpose, the relevant contract, applicable accounting or other legal retention duties, or the establishment, exercise or defence of claims. Technical records are retained in proportion to operational and security needs. Data no longer needed is deleted or anonymised, subject to lawful retention requirements. We use proportionate access restrictions and technical and organisational safeguards; no system can guarantee absolute security.

Your rights and complaints

Under the applicable provisions of the Kyrgyz Republic's Digital Code No. 178 of 31 July 2025, you may request information about processing and access to your data, correction, deletion or restriction, and exercise applicable objection and portability rights. These rights are subject to their legal conditions and exceptions; identity verification may be necessary. You may withdraw any consent given and challenge unlawful processing.

Send requests or privacy complaints to hi@david-siewert.com or the public contact address above. You may also complain to the State Agency for Personal Data Protection under the Cabinet of Ministers of the Kyrgyz Republic, or seek judicial protection. Official regulator information and the Digital Code are available at dpa.gov.kg and the regulator's legal register. Nothing here limits mandatory rights.

Changes

The effective date above identifies this version. Material changes will be published here; any new processing requiring consent or another legal step will not be authorised simply by changing this notice.