Last updated: April 2026
Wind farm BoP (“we”, “us”, or “our”) operates the website windfarmbop.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, purchase our products, or interact with our services.
We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.
1. Data Controller
The data controller responsible for your personal data is:
Wind farm BoP
Email: contact@windfarmbop.com
2. What Personal Data We Collect
We collect different types of personal data depending on how you interact with our website:
When you browse the website: Your IP address, browser type, operating system, referring URL, pages visited, and time spent on pages. This data is collected automatically through cookies and Google Analytics.
When you create an account or make a purchase: Your first and last name, email address, billing address, and payment information. Payment details are processed securely by our payment providers (Stripe and PayPal) and are never stored on our servers.
When you contact us: Your name, email address, and any information you include in your message.
When you download a purchased product: Your name and email address are embedded as a visible watermark in PDF documents for copyright protection purposes.
3. How We Use Your Data
We use your personal data for the following purposes:
- To process and fulfill your orders, including sending confirmation emails and providing access to digital downloads.
- To personalize purchased PDF products with a watermark containing your name and email address, as a copyright protection measure.
- To respond to your inquiries and provide customer support.
- To analyze website traffic and usage patterns through Google Analytics, in order to improve our content and user experience.
- To comply with legal obligations, such as tax and accounting requirements.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under the GDPR:
- Contract performance (Art. 6(1)(b)): Processing necessary to fulfill your purchase and deliver digital products.
- Legitimate interest (Art. 6(1)(f)): Website analytics and security measures, including PDF watermarking for copyright protection.
- Consent (Art. 6(1)(a)): For non-essential cookies and marketing communications, where applicable.
- Legal obligation (Art. 6(1)(c)): To comply with tax, accounting, and other legal requirements.
5. Third-Party Services
We share your data with the following third-party services, only to the extent necessary to operate our website and process your orders:
- Stripe — Payment processing. Stripe processes your payment information securely under its own privacy policy (stripe.com/privacy).
- PayPal — Payment processing. PayPal processes your payment information under its own privacy policy (paypal.com/privacy).
- Google Analytics — Website analytics. Google may process your data on servers located outside the EU. We use IP anonymization where available. See Google’s privacy policy at policies.google.com/privacy.
We do not sell, rent, or trade your personal data to any third party.
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes described in this policy:
- Account and order data: Retained for as long as your account is active, plus an additional period as required by tax and accounting laws (typically 5–10 years depending on jurisdiction).
- Analytics data: Google Analytics data is retained for 14 months, after which it is automatically deleted.
- Contact form inquiries: Retained for up to 12 months after the conversation is resolved.
7. Your Rights Under the GDPR
As a data subject, you have the following rights:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct any inaccurate or incomplete data.
- Right to erasure: You can request that we delete your personal data, subject to legal retention requirements.
- Right to restriction: You can ask us to restrict the processing of your data in certain circumstances.
- Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
- Right to object: You can object to the processing of your data for legitimate interest purposes, including analytics.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at contact@windfarmbop.com. We will respond to your request within 30 days.
8. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data transmitted between your browser and our website, and secure payment processing through PCI-compliant third-party providers.
9. International Data Transfers
Some of our third-party service providers (such as Google and Stripe) may process data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
11. Contact
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:
contact@windfarmbop.com
You also have the right to lodge a complaint with a supervisory data protection authority in your country of residence.