Privacy policy

In short

This site sets no cookies, runs no analytics and loads nothing from third parties. Its fonts and videos are served from its own host. We only process personal data to deliver the site, and to reply when you send us a brief or an email.

Who is responsible

The controller under the GDPR is Matias David Eichner, Kronstädter Straße 17, 50858 Köln, Germany. Email: matiaseichner@gmail.com.

Hosting

This site is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, the host’s servers process the data your browser sends with every request: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. This is needed to deliver the site and keep it secure.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a reliable and secure website. Cloudflare processes this data on our behalf under a data processing agreement (Art. 28 GDPR), which is incorporated in Cloudflare’s terms.

Transfers to the US

Cloudflare is based in the US. It is certified under the EU-U.S. Data Privacy Framework, so transfers rest on the European Commission’s adequacy decision (Art. 45 GDPR). Its processing agreement also includes the EU Standard Contractual Clauses.

The brief form

The brief form doesn’t send anything to our server. When you press “Send brief”, it opens your own email app with a draft containing what you typed: your email address (required), your brand’s website (required) and anything else we should know (optional). Nothing leaves your device until you send that email yourself. From then on it’s an email to us, handled as described under “Email”.

We use these details to reply to your enquiry and, if you want, to prepare an offer. Legal basis: Art. 6(1)(b) GDPR, steps taken at your request before a contract; where no contract is in view, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries. Without an email address we can’t reply; everything else is up to you.

Email

If you email us at david@skason.com or matiaseichner@gmail.com, we use your address and message to reply, on the same legal basis as the brief form.

Our skason.com mailboxes are hosted by Google (Google Workspace), which processes emails on our behalf under its Cloud Data Processing Addendum (Art. 28 GDPR). Where data reaches Google in the US, Google is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR), and the addendum also includes the EU Standard Contractual Clauses.

Emails to matiaseichner@gmail.com are handled by Gmail, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data in the US; Google LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

How long we keep it

We delete enquiries once they’re no longer needed to answer them. If an enquiry turns into a project, we keep the related records for as long as German commercial and tax law requires, usually six to ten years (§ 257 HGB, § 147 AO).

Cookies and browser storage

None. This site doesn’t set cookies and doesn’t store anything on your device (no local storage, session storage or similar). Settings like sound on or off only last while the page is open.

Your rights

• Access to your data (Art. 15 GDPR)
• Correction (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection: you can object at any time, on grounds relating to your situation, to processing based on Art. 6(1)(f) GDPR (Art. 21)

To use any of these, write to matiaseichner@gmail.com. You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example in the EU country where you live, or the data protection authority of North Rhine-Westphalia (LDI NRW), where we’re based.

We don’t use automated decision-making or profiling (Art. 22 GDPR).