Privacy policy

Controller

Jeremy Dacho · Artlook · Jagdgasse 1E/8/26, 1100 Wien, Österreich

Hosting and administration

Cloudflare serves the website. Cloudflare Access protects the administrator and D1 stores website content and revision history, not enquiries. Connection data may be processed for delivery and security. Exact logging periods, processing agreements and transfer safeguards remain to be verified.

Contact and providers

The form sends the entries you provide to FormSubmit. Emails to [email protected] are forwarded to Gmail. You may also contact me by phone or WhatsApp; opening the WhatsApp link connects you to that service. Messages are used to handle enquiries and agreed work. Actual form-to-inbox receipt remains unverified.

The owner also reports using Google Drive, PayPal, Nextcloud and Adobe. Their exact purposes, account arrangements, processing/transfer terms and retention settings still need a complete inventory. This update does not activate new payments, client galleries or cloud integrations.

Images and client access

The public selection uses the existing Artlook image endpoint and may load images from Google Drive / Google image hosts. Client galleries remain separate from this public frontend. The intended client access period is 30 days with a reminder 7 days before expiry; the start date and technical enforcement still need confirmation.

According to the owner, unselected images are deleted 30 days after delivery. Selected originals and delivered work are archived locally; no final archive retention period has been supplied. Online expiry does not mean deletion of those archived copies.

Local preferences and future services

Fonts and curated image files are served locally. Language, motion and accessibility preferences use browser storage; editor drafts are administrator-only. No analytics, advertising pixels, newsletter scripts or third-party embedded widgets are introduced in this build. Such services are planned only; their vendors, purposes and consent requirements are unresolved.

Retention and rights

Retention periods for email, invoices, backups and security logs are not yet fully documented. The owner’s general “30 days after sending” note is not a verified deletion rule for all data. Depending on applicable conditions, you may request access, rectification, erasure, restriction or portability, object to processing and withdraw consent for the future. You may complain to the Austrian Data Protection Authority. Contact Jeremy for requests.