Pukalani Studio

Privacy policy

This site is deliberately kept lean: no accounts for visitors, no ad networks, no embedded third-party content. What is processed nonetheless is described here.

Controller

David Schubert — Pukalani Studio 231 Pukalani St Makawao, HI 96768 United States of America Email: mail@davidschubert.com

What data is processed

  • Server logs: When this site is accessed, the IP address, time, requested URL, amount of data transferred and browser user agent are logged. They are used to keep the site secure and to diagnose faults.
  • Language choice: A cookie named i18n_redirected remembers the selected language (valid for one year). It contains only the language code and is not analysed. This site sets no other cookies for visitors.
  • Getting in touch: If you send an email or call, the details you provide are processed to handle your enquiry.

There are no accounts and no registration for visitors. The protected area under /dashboard serves only to maintain this site; the session cookies set there exist only after a sign-in.

Purposes and legal bases

  • Providing and securing the site, server logs — Art. 6(1)(f) GDPR (legitimate interest in stable, abuse-free operation)
  • Language cookie — Art. 6(1)(f) GDPR; technically required for the requested function
  • Audience measurement without cookies and without storing personal data — Art. 6(1)(f) GDPR
  • Handling enquiries and preparing a contract — Art. 6(1)(b) GDPR

Hosting

This site runs on rented servers in Germany.

Audience measurement

Plausible Analytics is used for audience measurement — self-hosted on my own server in Germany, not as a third-party service. It sets no cookies. Your IP address and browser user agent are sent to the measurement endpoint; Plausible turns them into a hash that changes daily, in order to recognise repeat visits — neither is stored. What is stored permanently is only aggregated information such as the page visited, referrer, country, browser and device type. Individual people are not recognised beyond the day.

External connections

  • Booking a call: The buttons for an intro call link to cal.com. Only when you follow that link does the request leave this site, and the privacy notice of that provider applies.
  • Profile links: Links to LinkedIn, GitHub and Instagram are plain links; simply opening this site sends no data to them.

Third-party content — fonts, maps, videos, ad networks — is not embedded; fonts are served from the site's own server.

Access from outside the EU

The servers are located in Germany. The controller is established in the United States and accesses the systems from there.

Retention

Enquiries are kept for as long as handling them and any statutory retention obligations require. Server logs are deleted regularly.

Your rights

  • Access to the data stored about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent, at any time and with effect for the future (Art. 7(3) GDPR)

To exercise them, contact mail@davidschubert.com. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Obligation to provide data

There is no obligation to provide data. Without contact details, however, an enquiry cannot be answered.

As of: