Information on the processing of personal data pursuant to the GDPR.
Protecting your personal data matters to me. Below, I inform you in accordance with the General Data Protection Regulation (GDPR) about the processing of personal data on this website.
Tim Kullmann
Im Urnenfeld 19, 63920 Großheubach, Germany
Email: klmn.media.websites@gmail.com · Phone: +49 172 9584230
You have the right at any time to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing (Art. 18), data portability (Art. 20) and object (Art. 21). You may withdraw any consent given at any time with effect for the future. Simply use the contact details above.
This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access the site, technically necessary data (including IP address, date/time, page requested, browser type) is processed in order to deliver the site securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, efficient operation). A data processing agreement is in place with Cloudflare; transfers to third countries are safeguarded by the EU Standard Contractual Clauses.
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.
The fonts used (Inter, Playfair Display) are served locally from this website's own server. No connection is made to Google's servers, and no data is transmitted to third parties for this purpose.
If you contact me via a form (e.g. contact, prototype request, submitting a problem), I process the data you provide (e.g. name, email, company, message) in order to handle your enquiry. Submission is encrypted and sent to my server function. I use Supabase (Supabase, Inc., USA) to store the enquiry and Resend (Resend, Inc., USA) to send the email notification. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or (f) (handling enquiries). Data processing agreements are in place with these providers; third-country transfers are safeguarded via the EU Standard Contractual Clauses. A spam-protection field (honeypot) prevents automated submissions.
The website contains links to WhatsApp. If you contact me this way, WhatsApp's own privacy policy applies (WhatsApp Ireland Ltd.). Content you send is processed via WhatsApp. The legal basis is Art. 6(1)(f) GDPR.
In the website check, you can voluntarily enter a URL. For the technical analysis (load time, performance), the URL you enter is submitted to the Google PageSpeed Insights API (Google Ireland Ltd.). No personal data about you is transmitted in this process – only the address to be checked. The legal basis is Art. 6(1)(f) GDPR.
The website contains links to my profiles on Instagram and LinkedIn. These are simple links – data is only processed by the respective platform, under its own privacy policy, once you click through and visit it.
This website sets no marketing cookies. Technically necessary processes needed to deliver the site do not require consent. In addition I use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how the website is used. This happens only if you click “Accept” in the banner. If you click “Decline”, Google Analytics is not loaded and no data is sent to Google. Without a decision nothing happens.
What data: pages viewed, time on site, where the visit came from, device type, browser and approximate location (country and region). To recognise visitors, Google Analytics sets cookies (e.g. _ga and _ga_V8NB7Q25N7, lifetime up to 2 years). According to Google, Google Analytics 4 does not log or store IP addresses.
Legal basis: your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Third countries: data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. A data processing agreement with Google is in place. Retention: data is deleted automatically after the retention period set in Google Analytics (14 months at most).
Withdrawal: You can change your decision at any time. The banner will then appear again, and Google Analytics cookies that were already set are removed.
Personal data is stored only for as long as necessary for the purposes stated above, or as required by statutory retention periods. It is deleted afterwards.
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
I develop apps (see Apps). This privacy policy applies to the pages in the apps section of this website, including section 10 (Google Analytics only with your consent). The apps themselves have their own privacy policies, which state what data the respective app processes: LearnThaiSabai (learning Thai, optional account) and Tiluma (self-help app, entries stay on the device).
I update this privacy policy whenever changes to the website or to legal requirements make it necessary. The version published here at any given time applies.
Free intro call – an honest assessment and a clear plan. Even if we don't end up working together.