Privacy Policy
This policy explains what personal data WinkView processes, for what purposes, on what legal basis, and what rights you have — in particular how you can correct or remove an entry about you.
1. Controller
The controller responsible for data processing under the General Data Protection Regulation (GDPR) and Slovenian data protection law (ZVOP-2) is:
WinkView
Email: hello@winkview.com
For any data protection matter, contact us at the email address above.
2. What WinkView is — and is not
WinkView is an informational directory that gathers the official links of content creators, in order to protect users from fake accounts and impersonators. WinkView does not publish intimate, paywalled or “leaked” content — only factual details (name, niche, country, platform, official profile links) together with the source of those details.
3. What data we process
a) Information about creators
For a person listed in the directory we process: name or stage name, niche/category, country, platform(s) used, links to official profiles (e.g. OnlyFans, Instagram), a statement of the source, and the status (“verified” or “listed”).
b) Requests via the contact / removal form
When you use the form on the “Your listing” page, we process the email address you provide, the profile concerned, the request type you select, and your message.
c) Server log data
When the website is accessed, our hosting provider processes technically necessary access data (including a shortened IP address, date/time, page requested, browser type) for secure and stable operation.
4. Purposes and legal bases
a) Directory entries
The purpose is to provide a trustworthy directory of official links that protects against identity misuse and impersonation.
The legal basis for processing ordinary personal data is our legitimate interest and the public’s interest in accurate, tamper-proof information (Art. 6(1)(f) GDPR).
Where linking a person to an adult platform may involve data belonging to a special category within the meaning of Art. 9 GDPR, the processing relies on the fact that the data subject has manifestly made that data public herself (Art. 9(2)(e) GDPR). The links held in the directory come from publicly accessible channels that the creators operate or publicly link themselves — such as their own social-media profiles, their linked link-pages, publicly accessible creator directories, and named press coverage. Each profile page states, in the Source field, what the entry is based on.
b) Form requests
Processing your request serves to handle your matter (removal, claim, correction) and is based, depending on the matter, on Art. 6(1)(f) GDPR (legitimate interest in communication) and on our obligation to fulfil your data-subject rights (Art. 6(1)(c) together with Art. 15 ff. GDPR). For evidentiary purposes we also store requests as an internal log.
c) Server logs
The legal basis is Art. 6(1)(f) GDPR (secure operation of the website).
5. Source of the data
Information about creators does not reach us from the data subject directly, but from publicly accessible sources: the creators’ own public profiles and link pages, publicly accessible creator directories, and public media coverage. We provide this information pursuant to Art. 14 GDPR. The specific source of an entry is stated on the relevant profile page.
6. Recipients and processors
To operate the website we use carefully selected service providers acting as processors:
Hosting: the website runs with our hosting provider, which supplies the server infrastructure and email service.
Email forwarding: form notifications are forwarded to a mailbox operated by a US provider (Google). For the associated transfer to the USA there is an adequacy decision (EU-US Data Privacy Framework); the provider is certified accordingly.
7. Retention
Directory entries are stored for as long as the purpose exists or until removed at the data subject’s request. Form requests and the internal log are deleted once they are no longer needed for handling and record-keeping. Server logs are kept only briefly.
8. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). To exercise them, a message to hello@winkview.com or the form on the Your listing page is enough.
Objection and erasure — made simple
You may object to the processing of your data at any time and request that your entry be removed. You need no reason and no proof of identity to do so. We handle removal requests within 72 hours, delete the page, and also request its removal from Google’s index.
9. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority at the controller’s seat is the Slovenian Information Commissioner (Informacijski pooblaščenec). As a data subject you may also contact the supervisory authority of your habitual residence (in Germany the relevant state authority, in Austria the Datenschutzbehörde, in Switzerland the FDPIC).
10. Cookies and analytics
WinkView uses only technically necessary cookies, for example to store your chosen language. There is no cross-platform advertising tracking.
11. Data security
The website is served exclusively over encrypted HTTPS.
12. Changes to this policy
We update this policy when data processing or the legal situation changes. The version published on this page applies.