This Privacy Policy explains how personal data may be processed when using the Platform (client dashboard, guest links, and related features). The Platform is operated by me as a technical tool for providing access to Project Materials.
1. Platform operator (Controller)
For data processing related to the operation of the Platform (access control, security, logging, and technical support), I act as the controller within the meaning of the GDPR:
Pavel Krivetchenko
Fehrstrasse 14
92637 Weiden i.d.OPf., Germany
Email: info@paulk.studio
2. Roles on the Platform
- Customer accesses the Platform via an account login (username and password issued by me).
- Viewer / Guest accesses Project Materials exclusively via a guest link shared by the Customer.
The Customer does not upload files to the Platform and does not manage users or roles. I place Project Materials on the Platform exclusively in relation to paid orders.
3. Categories of data and purposes
The following categories of data may be processed depending on Platform usage:
- Customer account data: email address or identifier, technical account identifiers, authentication data (e.g. password hash), firm/project identifiers.
- Access and usage data: login events, session identifiers, access to projects or pages, guest link usage events (e.g. timestamps), basic security events.
- Technical data (server logs): IP address, time of access, requested resource, referrer (if transmitted), user agent.
- Project Materials: renders, images, 360° panoramas, and interactive elements placed by me for the Customer. Such materials may contain personal data depending on the content of the commissioned work.
Purposes of processing include:
- providing access to the Platform and Project Materials;
- security and prevention of abuse;
- stable operation and troubleshooting;
- fulfilling contractual obligations related to access to work results.
4. Legal bases
Processing is based on the following legal grounds:
- Art. 6(1)(b) GDPR — performance of a contract (providing access to the Platform and Project Materials).
- Art. 6(1)(f) GDPR — legitimate interests (secure operation, prevention of abuse, protection of the Platform, diagnostics).
- Art. 6(1)(c) GDPR — compliance with legal obligations, where applicable.
5. Server log files
When accessing the Platform, technically necessary data may be processed and stored in server log files, including IP address, date and time of access, requested resource, referrer URL (if transmitted), browser type, operating system, and user agent.
Purpose: delivery of the Platform, security, and diagnostics.
Legal basis: Art. 6(1)(f) GDPR.
6. Cookies, local storage, and sessions
The Platform uses strictly necessary technical storage mechanisms required for secure access and basic functionality, including:
- session cookies or equivalent session identifiers;
- local storage for preferences such as theme or language, where applicable.
No marketing cookies are used. If optional features (e.g. analytics) are introduced in the future, they will be implemented with appropriate transparency and consent mechanisms where required by law.
7. Guest links
Customers may share access to Project Materials via guest links. The Customer controls guest link parameters only within the following limits:
- link expiration;
- permission to download or not download materials.
When a guest link is used, technical access data (e.g. IP address, timestamp, requested resource) may be processed to deliver content and protect against abuse.
8. Recipients and processors
Data may be processed by me and by technical service providers (processors) used for hosting and infrastructure, strictly for operating the Platform. Data is not sold.
9. Retention periods
Log and security data is retained only as long as necessary for security and stable operation, after which it is deleted or anonymized in accordance with operational needs and applicable law.
Project Materials and related data are stored without a fixed retention period unless otherwise agreed and may be deleted as part of reasonable operational policies. The Customer is responsible for maintaining their own copies of delivered Project Materials.
10. Data subject rights
Depending on the context, data subjects may have rights under the GDPR, including access, rectification, erasure, restriction of processing, data portability, and objection.
If a request relates to personal data contained in Project Materials, I will process the request within the limits of applicable law and, where legally and technically possible, restrict access to or remove the relevant data.
11. Security
I apply reasonable technical and organizational measures to protect the Platform and data against unauthorized access, loss, and misuse. However, no online service can guarantee absolute security.
12. Contact
For privacy-related questions regarding the Platform, please contact:
info@paulk.studio