Legal — II
Privacy Policy
Controller
Matthias Pinkert
OAKA OBJECTS
Forststraße 12
01099 Dresden
Germany
studio@oaka-objects.com
Hosting and technical data
This website is provided through Lovable and delivered and protected through Cloudflare infrastructure. Hosting and infrastructure providers process IP addresses, request times and URLs, browser information and technical error data to ensure secure, stable operation, based on Art. 6(1)(f) GDPR. Technical logs are retained according to operational needs and statutory obligations. Cloudflare sets the __cf_bm security cookie for 30 minutes; a __dpl cookie lasting one day was also observed during delivery.
Contact enquiries
When you contact us by email or through the enquiry form, we process the information you supply solely to handle your request. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries and Art. 6(1)(f) GDPR otherwise. The form delivers your name, email address, subject and message to us through Resend (Plus Five Five, Inc.). Processing in the United States is possible; Resend describes Standard Contractual Clauses and its EU–US Data Privacy Framework participation as transfer safeguards. We retain enquiries only as needed to handle them and meet any statutory obligations.
Cookie preferences with Klaro
Klaro manages your choices for optional services. The necessary oaka-consent cookie stores your consent decision for 365 days; Klaro does not use local storage for this. Storage is based on section 25(2) TDDDG, and processing the decision documents and manages consent under Art. 6(1)(c) GDPR. Klaro's script and stylesheet are served locally through this website; the KIProtect CDN is not contacted. You can change your choices at any time using Cookie Settings.
The Pinterest Tag loads after your consent. It records page visits, product and space categories and outbound Etsy clicks, including page and referrer URLs, technical browser data and, where applicable, product identifiers and prices. This measures and optimises Pinterest advertising. The legal bases are Art. 6(1)(a) GDPR and section 25(1) TDDDG. Recipients include Pinterest Europe Ltd., Dublin, Ireland, and Pinterest, Inc., San Francisco, United States. Pinterest describes processing in the United States and other countries, with adequacy decisions, the Data Privacy Framework and Standard Contractual Clauses as safeguards. Testing observed _pin_unauth lasting one year and is_eu in session storage; other Tag cookies, such as _epik, _derived_epik or _pinterest_ct, may be used depending on activity. Pinterest specifies one year for its first-party Tag cookies; other data is retained under the criteria in its privacy policy. Withdrawing consent through Cookie Settings stops further tracking events and removes Pinterest cookies and associated local and session storage entries accessible to this website. This does not automatically delete data already transmitted.
Hosting-platform visitor measurement
Lovable visitor measurement is disabled. This website does not load Lovable visitor or interaction measurement scripts or set an identifier for those purposes. The technical processing for hosting and security described above is unaffected.
Fonts, images and other services
Instrument Sans and Cormorant Garamond are hosted locally; Google Fonts is not contacted. Images are also delivered through Lovable's media infrastructure. No embedded social-media content is implemented.
External links
This website links to Etsy, Instagram, Pinterest and LinkedIn. These ordinary links alone do not transmit data to those platforms when you view an OAKA page. Clicking them takes you away from OAKA, where the respective provider's privacy terms apply. Separately, the Pinterest Tag described above may transmit data after your consent.
Your rights
Subject to the GDPR, you have rights to access, rectification, erasure, restriction of processing, data portability where applicable, and objection. You may withdraw consent at any time with future effect; processing performed before withdrawal remains unaffected. Contact studio@oaka-objects.com. You may complain to a data protection supervisory authority, including the Sächsische Datenschutz- und Transparenzbeauftragte (Saxon Data Protection and Transparency Commissioner, www.datenschutz.sachsen.de).