The controller responsible for data processing on this website is:
Jordan Libunao
Meinekestr. 11
10719 Berlin
Germany
Email: hi@jordanlibunao.com
No data protection officer has been appointed, as there is currently no legal obligation to do so.
I process personal data only to the extent necessary to provide this website, respond to inquiries, take pre-contractual steps, perform contracts, or comply with legal obligations.Personal data means any information relating to an identified or identifiable natural person, such as name, email address, IP address, or information submitted through the contact form.
This website is built with Webflow and hosted via Webflow Hosting.
When you visit this website, technical data may be processed to ensure that the website is displayed securely and reliably. This may include:
The processing is carried out to provide, secure, and maintain the website.
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: secure, stable, and error-free provision of the website
Webflow is a provider based in the United States. A transfer of personal data to third countries, in particular the United States, cannot be excluded. Where required, such transfers are based on appropriate safeguards, such as standard contractual clauses or comparable protection mechanisms.
This website may use Cloudflare for technical delivery, performance, and security purposes. Cloudflare may process IP addresses and technical access data in order to deliver website content efficiently, improve performance, and protect the website against attacks.
Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: secure and efficient provision of the website
If you contact me via the contact form, I process the data you submit in order to respond to your inquiry, assess your project, and, if applicable, prepare an offer.
The following data may be processed:
Legal basis:
Art. 6(1)(b) GDPR, where your inquiry relates to a contract or pre-contractual measures
Art. 6(1)(f) GDPR, where your inquiry is a general request
Legitimate interest: responding to and documenting project inquiries
The submitted data is received by email and may be stored in Google Sheets for internal organization.
I use Google Workspace for business communication, internal organization, and processing project inquiries.
This may include the processing of:
Provider:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Google may also process personal data outside the EU/EEA, in particular in the United States. Where required, such transfers are based on appropriate safeguards, such as standard contractual clauses or comparable protection mechanisms.
Legal basis:
Art. 6(1)(b) GDPR for pre-contractual or contractual communication
Art. 6(1)(f) GDPR for general organization and communication
Art. 6(1)(c) GDPR for compliance with legal retention obligations
Contact inquiries are stored only for as long as necessary to process the inquiry, continue communication, or document the request.
If no contract is concluded, inquiries are generally deleted after 12 months, unless there is a legitimate reason for longer retention.
If a contract is concluded, the data may be stored for a longer period as part of contract and business records.
If a contract is concluded, I process the data necessary to perform the contract, issue invoices, and comply with legal obligations.
This may include:
Legal basis:
Art. 6(1)(b) GDPR for contract performance
Art. 6(1)(c) GDPR for legal retention obligations
Business and tax-related documents are stored in accordance with statutory retention periods.
This website uses Finsweet Cookie Consent to manage cookie and privacy settings.
According to the current configuration, this website does not use analytics tools, tracking pixels, newsletter tools, externally embedded content, payment providers, or social media plugins.
Where cookies or similar technologies are strictly necessary for the technical operation of the website, they are used on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR.For any non-essential cookies or comparable technologies, consent would be requested before use.
Legal basis for strictly necessary cookies:
Section 25(2) TDDDG
Art. 6(1)(f) GDPR
Legitimate interest: providing a functional and legally compliant website
This website does not currently use analytics tools such as Google Analytics and does not use advertising or tracking pixels such as Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, or Google Ads Conversion Tracking.
No user profiles are created for marketing or advertising purposes.
This website uses Google Fonts hosted locally. When these fonts are loaded, no connection is made to Google Fonts servers.
According to the current configuration, this website does not embed external content such as YouTube videos, Google Maps, Calendly, Typeform, newsletter forms, or social media feeds.
Personal data may be transferred to technical service providers as part of the purposes described above, in particular:
Data is not transferred to other third parties unless this is necessary for contract performance, legally required, or based on your consent.
When using Webflow, Cloudflare, and Google Workspace, processing of personal data outside the EU/EEA, in particular in the United States, cannot be excluded.
Where such transfers take place, they are based on appropriate safeguards within the meaning of the GDPR, in particular standard contractual clauses, adequacy decisions, or comparable protection mechanisms.
You have the following rights under applicable data protection law:
To exercise your rights, you can contact me at:
hi@jordanlibunao.com
If personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation.If you object, I will no longer process your personal data unless there are compelling legitimate grounds for the processing or the processing serves the establishment, exercise, or defense of legal claims.
I take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, or unauthorized disclosure.This website is provided via encrypted HTTPS connection.
This Privacy Policy is currently valid.
Last updated: May 2026