Privacy policy.
We process personal data only to the extent necessary, do not build user profiles and do not load external analytics scripts without your consent.
Data controller
Data controller under GDPR is John Tunkin. Full contact details are shown in the legal notice. For data-protection queries an informal email via the contact form on this website is sufficient. Postal address and phone number are provided by email upon initial contact.
Data minimisation
This website is deliberately restrained. No advertising pixels are loaded, no Google Analytics is set, and no external fonts are loaded from third-party servers. All required resources (fonts, images, audio, video) are delivered from a self-operated CDN infrastructure inside the EU. No automated decision-making within the meaning of Art. 22 GDPR takes place.
Server log files
When you visit this website, our hosting provider automatically collects technical information: truncated IP address, user agent, referrer, requested resource and time of access. This data serves exclusively the technical delivery, error analysis and defence against attacks. It is stored separately from other personal data and deleted or anonymised no later than 14 days after collection. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in stable and secure operation).
Contact and enquiry form
If you use the contact form or the project enquiry wizard, the details you provide (name, email, phone if given, company name and project-related information such as usage, target audience, timing and script excerpts) are processed to handle your enquiry. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures or contract performance). Data is deleted after the enquiry or project is complete, unless statutory retention periods under German tax and commercial law apply.
Hosting, CDN and processors
For running this website, storing enquiries and delivering static media (images, audio, video) we use a specialised hosting and CDN infrastructure. Servers and storage are located within the European Union. Data-processing agreements under Art. 28 GDPR are in place with all commissioned providers. No transfer of personal data to third countries outside the EU/EEA takes place. Should transfers to third countries become necessary in future, they will be based on appropriate safeguards under Art. 44 et seq. GDPR (e.g. EU Standard Contractual Clauses).
Cookies and similar technologies
This site uses only strictly necessary cookies and localStorage entries — in particular to store your consent decision (key „jt-consent-v1“, retention up to 12 months). Legal basis: § 25 (2) no. 2 TDDDG (German implementation of the ePrivacy Directive). Further categories (comfort, statistics, marketing, external media) are activated only after your explicit consent under § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. You can change or withdraw your selection at any time with effect for the future via the footer link „Cookie settings“.
Video and audio playback
All video and audio files on this website (including the hero background video and reference / demo clips) are served exclusively from our own CDN infrastructure inside the EU. No third-party players such as YouTube, Vimeo, Spotify or SoundCloud are embedded. When a media file is requested, only the technically required connection data (IP address, user agent, requested file) is processed — analogous to section 03 of this policy. There is no server-side user tracking, fingerprinting or profiling. The hero background video autoplays muted; audio playback only starts after your active user gesture (click, keypress or scroll).
External media and embeds
Should external videos, calendar frames or similar embeds (e.g. YouTube, Vimeo, Calendly, Google Maps) be used in future, they will load only after your consent in the „External media“ category and will be replaced by a neutral preview until then. Only after your consent will data be transmitted to the respective provider; that provider's privacy policy then applies additionally.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Consent, once given, can be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a data-protection supervisory authority — for Bavaria this is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Retention
Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention periods (server logs: max. 14 days; enquiries without contract: max. 6 months; project records: up to 10 years under German tax and commercial law).
Data security
All content is transmitted encrypted via TLS (HTTPS). Access to enquiry data is limited to the controller and named processors. Technical and organisational measures under Art. 32 GDPR are reviewed regularly.
Status and updates
This privacy policy is updated continuously to reflect technical and legal changes. Version: July 2026.
Last updated: July 2026