Privacy

1. Controller

The controller responsible for data processing on this website is:

There is no data protection officer, as none is legally required. If you have questions, just write to me directly.

2. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you visit the site, Vercel processes technically necessary data so that the site can be delivered and run securely: your IP address, date and time, the requested address, the previous page (referrer), browser and operating system. This data is kept in server logs and is not combined with other data.

The legal basis is my legitimate interest in a stable and secure website (Art. 6(1)(f) GDPR). I have a data processing agreement with Vercel (Art. 28 GDPR). Vercel may process data in the USA. The company is certified under the EU-U.S. Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.

3. Contact form and email

When you write to me via the form, I process what you enter there: your name, whether you are writing as a client or an employer, the topic, how I can reach you, and your message. For an email, it is your address and its content. I only use this information to answer your request and, where applicable, to prepare a project or working relationship.

The legal basis is Art. 6(1)(b) GDPR where your request concerns a project or a job, otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Providing the information is voluntary, but I cannot reply without a way to reach you.

Emails to contact@knuff.studio are received by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, and forwarded to my email account at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Gmail). The contact form sends your message as an email through the same Google account. Your message and any emails you send me are stored there.

Google may process this data in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, which provides an adequate level of data protection for these transfers.

To prevent spam, the form contains an invisible field and measures how long it takes to fill in. No additional data about you is stored in the process.

I delete your request once it has been dealt with and nothing further is expected. If it leads to a project, I keep the correspondence for as long as tax and commercial law require (usually six to ten years).

4. Statistics (only with your consent)

If you agree, I use Vercel Web Analytics and Vercel Speed Insights, both provided by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. They show me which pages are visited how often and how fast they load. The data collected is: the page visited, the previous page, the time, country and region, browser, operating system, device type and loading times.

Neither service sets cookies or builds profiles across websites. To count visits, Vercel creates a hash from the request, which is discarded after 24 hours. I only ever see aggregated numbers, never individuals.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time with effect for the future: open privacy settings. The information on transfers to the USA under Hosting applies here too.

5. Browser storage

This site does not set cookies. It does save a few settings in your browser's local storage. This data stays on your device and is never sent to me.

• Your privacy choice, whether sound is on and whether you chose light or dark mode. You set these yourself; the site only remembers them. This is strictly necessary for that purpose (§ 25(2) no. 2 TDDDG).
• Whether you have visited before, so the intro animation does not play every time. This is only stored if you agree under “Comfort” (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

You can delete these entries at any time in your browser settings.

6. Fonts and links

For the font Helvetica Neue, this site uses Adobe Fonts, a service of Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Park, Dublin 24, Ireland. When a page loads, your browser fetches the font from Adobe’s servers. Adobe receives your IP address, which is technically necessary for this, as well as information about the fonts delivered and the site requesting them, which Adobe uses to count page views for licensing. No cookies are set.

The legal basis is my legitimate interest in a consistent, legible appearance of the site (Art. 6(1)(f) GDPR). Adobe may process data in the USA. Adobe Inc. is certified under the EU-U.S. Data Privacy Framework. All other fonts are hosted on this server.

Links to other sites, such as social media profiles, are plain links. You only leave this site when you click them. The respective provider is responsible for any processing there.

7. Your rights

You have the right to

• access the data stored about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw consent at any time, with effect for the future (Art. 7(3) GDPR),
• lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Right to object (Art. 21 GDPR): Where I process data based on my legitimate interest, you can object at any time on grounds relating to your particular situation. I will then stop processing the data unless there are compelling legitimate grounds for it.

Just email me at contact@knuff.studio.

I do not make automated decisions about you or create profiles. The connection to this site is encrypted via TLS.