Privacy policy

Last updated: 11 September 2026

1. Controller

The controller responsible for processing personal data on this website is:

David Karuza
Hamburg, Germany
Email: davekrza@gmail.com

2. General Information

This Privacy Policy explains how personal data is processed when you visit bdavidk.net, contact David Karuza, or commission creative and digital services.

Personal data means any information that can identify you directly or indirectly, such as your name, email address, IP address, or information provided in a project enquiry.

3. Website Hosting and Server Logs

When you visit this website, the hosting provider may automatically process technical information required to deliver the website securely. This may include:

  • IP address

  • Date and time of access

  • Requested page or file

  • Browser type and version

  • Operating system

  • Referring website

  • Device information

This processing is necessary for the secure and reliable operation of the website and is carried out on the basis of Article 6(1)(f) GDPR, based on the legitimate interest in operating, securing, and improving this website.

The website is hosted by Framer. Further information about how this provider processes data can be found in its privacy policy: https://www.framer.com/legal/privacy-statement.

Server-log data is retained only for as long as necessary for security, troubleshooting, and abuse prevention, unless a longer retention period is required by law.

4. Contact by Email or Contact Form

If you contact David Karuza by email or through a contact form, the information you provide will be processed to respond to your enquiry and, where applicable, prepare or carry out a project.

Depending on your enquiry, this may include:

  • Name

  • Email address

  • Phone number

  • Company name

  • Project details

  • Files, brand assets, and other content you provide

  • Communication history

The legal basis is Article 6(1)(b) GDPR where the processing is necessary to take steps before entering into a contract or to perform a contract. In other cases, processing is based on Article 6(1)(f) GDPR, based on the legitimate interest in responding to business enquiries.

Your data will be deleted once the enquiry has been fully resolved, unless it is needed for a project, legal obligations, or legitimate documentation purposes.

5. Client and Project Data

If you commission services from David Karuza, personal and project-related data may be processed to manage the project, communicate with you, create agreed deliverables, issue invoices, process payments, and meet legal obligations.

This may include contact details, company information, billing data, project briefs, feedback, supplied content, brand assets, access credentials, and correspondence.

The legal basis for this processing is Article 6(1)(b) GDPR for contract performance and Article 6(1)(c) GDPR where data must be retained to comply with legal obligations, including tax and accounting obligations.

Project and billing data are stored only for as long as necessary for the relevant contractual, legal, accounting, or tax obligations.

6. Cookies and Similar Technologies

This website uses technically necessary cookies or similar technologies where required for core website functionality, security, and the storage of cookie preferences.

Non-essential cookies, analytics tools, marketing pixels, and similar tracking technologies are used only with your prior consent where legally required. Consent may be withdrawn at any time through the cookie settings available on this website.

The legal basis for technically necessary technologies is Article 6(1)(f) GDPR. The legal basis for non-essential technologies is your consent under Article 6(1)(a) GDPR and applicable German cookie laws.

7. Analytics and Marketing

This website does not use analytics tools, advertising pixels, or marketing tracking technologies.

8. External Services and Embedded Content

This website may use external services such as Google Fonts, LinkedIn.

When you access pages containing these services, personal data such as your IP address may be transmitted to the relevant provider. Where required, external content is loaded only after you provide consent.

Further information on each provider’s data processing can be found in the provider’s privacy policy.

9. Recipients and International Transfers

Personal data may be shared with service providers that support the operation of this website or the delivery of services, such as hosting providers, email providers, cloud-storage providers, accounting providers, project-management tools, payment providers, and communication services.

These providers process data only where necessary and, where applicable, under data-processing agreements.

If personal data is transferred to a country outside the European Economic Area, appropriate safeguards will be used where required by law. These may include an adequacy decision of the European Commission, the EU–US Data Privacy Framework for certified US providers, or European Commission Standard Contractual Clauses.

10. Data Security

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures are reviewed and adapted where necessary.

However, no internet transmission or electronic storage method can be guaranteed to be completely secure.

11. Changes to This Privacy Policy

This Privacy Policy may be updated where necessary to reflect legal, technical, or business changes. The current version is always available on this website.



















i use framer for hosting, and i only use framer analytics, nothing else


















Since your site is hosted on Framer and uses only Framer Analytics, you can make the privacy policy much shorter. Framer states that its built-in analytics do not use cookies or persistent identifiers; it hashes the IP address and user agent with a daily rotating secret to calculate daily unique visitors, and says that the analytics data cannot identify individual visitors. On that basis, Framer says a separate cookie-consent banner is not needed for Framer Analytics alone.

However, hosting still entails technical processing such as server requests and IP addresses, so you should disclose Framer hosting and analytics. The following is a focused draft for bdavidk.net.

Privacy Policy

Last updated: 11 September 2026

1. Controller

The controller responsible for processing personal data on this website is:

David Karuza
[Your full business address]
Hamburg, Germany
Email: davekrza@gmail.com

2. General Information

This Privacy Policy explains how personal data is processed when you visit bdavidk.net or contact David Karuza.

Personal data is information that can identify you directly or indirectly, for example your name, email address, or IP address.

3. Website Hosting

This website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, The Netherlands.

When you visit this website, Framer may process technical data that is required to deliver the website securely and reliably. This may include:

  • IP address

  • Date and time of access

  • Requested page or file

  • Browser type and version

  • Operating system

  • Device information

  • Referring website, where available

This processing is necessary for the secure operation and provision of the website. The legal basis is Article 6(1)(f) GDPR, based on the legitimate interest in operating a secure, reliable, and technically functional website.

Further information about Framer’s processing of personal data is available in Framer’s Privacy Statement.

4. Framer Analytics

This website uses Framer Analytics, a built-in analytics service provided by Framer B.V., to understand how visitors use the website and to improve its performance, content, and user experience.

According to Framer, Framer Analytics does not use cookies or persistent identifiers. To calculate daily unique visitors, Framer hashes the visitor’s IP address and user agent using a daily rotating secret. The secret is reset and deleted each day. Framer states that the resulting analytics data is anonymised and cannot be traced back to an individual visitor.

The legal basis for this processing is Article 6(1)(f) GDPR, based on the legitimate interest in analysing and improving this website.

Because Framer Analytics does not use cookies or persistent identifiers, no cookie-consent banner is required solely for this analytics service according to Framer’s guidance.

5. Contact by Email

If you contact David Karuza by email, your message and the personal data you provide, such as your name, email address, company name, and project details, will be processed to respond to your enquiry and, where applicable, prepare or perform a contract.

The legal basis is Article 6(1)(b) GDPR when your message relates to a potential or existing contractual relationship. In other cases, the legal basis is Article 6(1)(f) GDPR, based on the legitimate interest in responding to enquiries.

Email correspondence is kept only for as long as necessary to process the enquiry, manage a client relationship, or meet legal retention obligations.

6. Client and Project Data

If you commission services from David Karuza, personal and project-related data may be processed to manage the project, communicate with you, prepare designs and deliverables, issue invoices, and comply with legal obligations.

This may include:

  • Name and contact details

  • Company details

  • Billing and invoice information

  • Project briefs and communication

  • Brand assets, images, copy, and other materials supplied by you

  • Feedback and project approvals

The legal basis is Article 6(1)(b) GDPR where processing is necessary to perform a contract or take steps before entering into a contract. Where retention is required by law, the legal basis is Article 6(1)(c) GDPR.

7. Recipients and Transfers

Data may be processed by Framer B.V. as the provider of this website’s hosting and analytics services. Framer may use sub-processors to provide its services.

Framer is based in the Netherlands. Depending on Framer’s infrastructure and sub-processors, personal data may also be processed outside the European Economic Area. Where required, such transfers are made using an appropriate legal mechanism, such as an adequacy decision or Standard Contractual Clauses. Refer to Framer’s Privacy Statement for current details.

No advertising pixels, external analytics tools, marketing trackers, social-media embeds, newsletter tools, payment tools, or other third-party tracking services are used on this website.

8. Data Retention

Personal data is retained only for as long as necessary for the relevant purpose:

  • Technical website data is retained according to Framer’s operational and security requirements.

  • Email enquiries are retained for as long as needed to respond and manage a potential business relationship.

  • Client, project, and invoice data is retained for the period required by applicable legal, accounting, and tax obligations.

9. Your Rights

Under the GDPR, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate or incomplete data

  • Request deletion of your personal data, where applicable

  • Request restriction of processing

  • Object to processing based on legitimate interests

  • Request data portability, where applicable

  • Withdraw consent at any time, where processing is based on consent

  • Lodge a complaint with a data-protection supervisory authority

To exercise your rights, contact:

David Karuza
davekrza@gmail.com

For Hamburg, you may contact the Hamburg Commissioner for Data Protection and Freedom of Information.

10. Security

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration, or disclosure. However, data transmission over the internet cannot be guaranteed to be completely secure.

11. Changes to This Policy

This Privacy Policy may be updated where necessary to reflect legal, technical, or operational changes. The current version is always available on this website.