Privacy Policy

Introduction

Jacob Kukuk ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website jacobkukuk.com (the "Site").

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and California Privacy Rights Act (CPRA).

Information We Collect

Automatically Collected Information

When you visit our Site, we automatically collect certain information about your device and browsing actions:

• IP address and general location (city/country level)
• Browser type and version
• Device type and operating system
• Pages visited and time spent on pages
• Referral source (how you arrived at our site)
• Date and time of visit

Analytics Data

We use privacy-focused analytics services (Umami Analytics and Google Analytics) to understand how visitors use our Site:

• Umami Analytics: Privacy-respecting, GDPR-compliant analytics (no cookies, no personal data)
• Google Analytics: Aggregate usage statistics with anonymized IP addresses

Contact Information

If you contact us via email or other means, we collect your email address and any information you voluntarily provide in your message.

How We Use Your Information

We use the collected information to:

• Improve and optimize our website experience
• Analyze site traffic and usage patterns
• Monitor and prevent security issues
• Respond to your inquiries and communications
• Comply with legal obligations

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on:

• Consent: You have given explicit consent for analytics and cookies
• Legitimate Interests: To improve our services and ensure website security
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information, please see our Cookie Policy.

Third-Party Services

We use the following third-party services:

Data Retention

We retain analytics data for a maximum of 26 months. Cookie consent preferences are stored in your browser for 12 months. You can withdraw consent at any time by clearing your cookies or using our cookie preference controls.

Your Privacy Rights

GDPR Rights (EEA Residents)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

CCPA/CPRA Rights (California Residents)

• Right to Know: Request disclosure of data collection and use
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Equal service regardless of privacy choices
• Right to Correct: Request correction of inaccurate information
• Right to Limit Use: Limit use of sensitive personal information

To exercise any of these rights, please contact us at me@jacobkukuk.com. We will respond within 30 days (GDPR) or 45 days (CCPA/CPRA).

Do Not Sell My Personal Information

We do not sell, rent, or trade your personal information to third parties. We do not share your data for monetary or other valuable consideration.

International Data Transfers

Our website is hosted in the United States. If you are accessing the Site from outside the US, your data may be transferred to, stored, and processed in the US. By using our Site, you consent to this transfer. We ensure appropriate safeguards are in place for international transfers as required by GDPR.

Children's Privacy

Our Site is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Data Security

We implement industry-standard security measures to protect your information, including HTTPS encryption, secure cookies, HSTS, Content Security Policy, and regular security audits. However, no method of transmission over the internet is 100% secure.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date. Continued use of the Site after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or wish to exercise your privacy rights, please contact:

Supervisory Authority (GDPR)

If you are located in the EEA and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.