Privacy notice

Controller

The controller for data processing on this website is Jens Hartmann, Burnitzstr. 47, 60596 Frankfurt am Main, Germany, email hello@kultmeister.com.

Hosting

This website is hosted by Vercel Inc. (USA). When the site is accessed, the host processes technically necessary server log data — including the IP address, the date and time of access, and browser information. The legal basis is the legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR).

Fonts and content

Fonts and all design assets are self-hosted; the site loads no content from font or content delivery networks at runtime. Your browser connects to this domain only. Data reaches third parties solely through the host, through the two services forwarded from this domain — analytics and error telemetry — and, when you submit the contact form, through the email delivery service; all described below.

Getting in touch

The contact form sends your details (name, email address, message and the optional fields) to a function of this website, which delivers them to the studio as an email via the delivery service Resend (Resend, Inc., USA); the website itself does not store them. To fend off automated submissions, the function checks the details automatically before delivery and receives from the form the time between loading the page and sending it; only the result of that check is logged, never the content of your enquiry. If you use the form or write to us by email, we process your details to handle your enquiry (Art. 6 (1) (b) and (f) GDPR). The data is deleted once it is no longer needed to handle the enquiry.

Cookies and analytics

This website sets no cookies. For audience measurement it uses Plausible — cookieless, with no cross-device recognition and no user profiles. What is recorded are anonymous details of the page view (the page requested, the referring source, an approximate region of origin, and browser and device class) together with technical display metrics of the page (loading, responsiveness, and stability). No identifier that makes you recognisable is issued, so no consent banner is needed.

In addition, the measurement counts a few gallery events without any personal reference: that the flight was started, a jump to a room (with the room’s name), reaching the plinth, saving an exhibition photo, and switching the room sound on or off. These events carry no identifier either.

The measurement is sent via this domain and forwarded from there; the browser does not connect to the provider directly. If your browser signals “Do Not Track” or Global Privacy Control, the display metrics are not transmitted.

The legal basis is the legitimate interest in privacy-preserving audience measurement (Art. 6 (1) (f) GDPR).

Room sound and settings in your browser

The gallery’s room sound is generated in the browser itself (Web Audio); no audio files are loaded and no data is transmitted. It starts only after a gesture from you. The browser keeps your tour settings in its local storage — permanently (localStorage): room sound on or off and its mix, the guide on or off; for the session only (sessionStorage): the text ground, the rendering level and the highest level your device has carried in this session, and whether the opening and the hints have already been shown in this session. All of it on your device only, without an identifier and without transmission; this storage is necessary for the function you chose (§ 25 (2) no. 2 TDDDG). You can delete it via your browser’s site data.

The exhibition photo is rendered entirely on your device and saved as a file; none of it leaves the browser.

Error telemetry (Sentry)

So that faults surface and can be fixed, this website reports technical errors automatically to Sentry (Functional Software, Inc.). Processing takes place in the EU region of the service; the data is processed in Germany. Sentry processes it on our behalf.

Only technical details are transmitted: the type and message of the error, a stack trace truncated to 2,000 characters, the address of the page, the platform, the browser identification string (User-Agent), and technical accompanying data (timestamp, severity, the version identifier of the deployment, and a random event identifier). No cookies, no user identifiers, no profile.

The report is sent via this domain and forwarded from there; the browser does not connect to the provider directly.

The legal basis is the legitimate interest in error-free and secure operation (Art. 6 (1) (f) GDPR).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15 to 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority. For any request, a message to hello@kultmeister.com is enough.