Privacy policy.
We process personal data only to the extent necessary, do not build user profiles and do not load external analytics scripts without your consent.
Data controller
Controller within the meaning of Art. 4 (7) GDPR: John Tunkin — British Voice-Over Email: info@johntunkin.com Phone: +49 176 23530801 The postal address is stated in the legal notice or provided by email on request. An informal email is sufficient for data-protection queries. No data protection officer has been appointed, as the statutory thresholds under Art. 37 GDPR / Sec. 38 BDSG are not met.
Data minimisation
This website is deliberately restrained. No advertising pixels are loaded, no Google Analytics is set, and no external fonts are loaded from third-party servers. All required resources (fonts, images, audio, video) are delivered from a self-operated CDN infrastructure inside the EU. No automated decision-making within the meaning of Art. 22 GDPR takes place.
Server log files
When you visit this website, our hosting provider automatically collects technical information: truncated IP address, user agent, referrer, requested resource and time of access. This data serves exclusively the technical delivery, error analysis and defence against attacks. It is stored separately from other personal data and deleted or anonymised no later than 14 days after collection. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in stable and secure operation).
Contact, project and sample enquiries
If you use the contact form, the project enquiry wizard or the form for a custom voice sample, the details you provide (name, email, phone if given, company name and project-related information such as usage, preferred voice style, timing and script excerpts) are processed to handle your enquiry. Optionally uploaded script files are stored in a private, non-public storage area within the EU; access is limited to the controller via a password-protected internal area. Every enquiry is stored together with the time of your consent, its processing status and internal handling notes. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures or contract performance) and Art. 6 (1) (a) GDPR for the storage consent. Data is deleted after the enquiry or project is complete, unless statutory retention periods under German tax and commercial law apply.
Hosting, CDN and processors
For running this website, storing enquiries and delivering static media (images, audio, video) we use a specialised hosting and CDN infrastructure. Servers and storage are located within the European Union. Data-processing agreements under Art. 28 GDPR are in place with all commissioned providers. No transfer of personal data to third countries outside the EU/EEA takes place. Should transfers to third countries become necessary in future, they will be based on appropriate safeguards under Art. 44 et seq. GDPR (e.g. EU Standard Contractual Clauses).
Cookies and similar technologies
This site uses only strictly necessary cookies and localStorage entries — in particular to store your consent decision (key „jt-consent-v1“, retention up to 12 months). Legal basis: § 25 (2) no. 2 TDDDG (German implementation of the ePrivacy Directive). Further categories (comfort, statistics, marketing, external media) are activated only after your explicit consent under § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. You can change or withdraw your selection at any time with effect for the future via the footer link „Cookie settings“.
Video and audio playback
All video and audio files on this website (including the hero background video and reference / demo clips) are served exclusively from our own CDN infrastructure inside the EU. No third-party players such as YouTube, Vimeo, Spotify or SoundCloud are embedded. When a media file is requested, only the technically required connection data (IP address, user agent, requested file) is processed — analogous to section 03 of this policy. There is no server-side user tracking, fingerprinting or profiling. The hero background video autoplays muted; audio playback only starts after your active user gesture (click, keypress or scroll).
External media and embeds
Should external videos, calendar frames or similar embeds (e.g. YouTube, Vimeo, Calendly, Google Maps) be used in future, they will load only after your consent in the „External media“ category and will be replaced by a neutral preview until then. Only after your consent will data be transmitted to the respective provider; that provider's privacy policy then applies additionally.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Consent, once given, can be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a data-protection supervisory authority — for Bavaria this is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Retention
Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention periods (server logs: max. 14 days; enquiries without contract: max. 6 months; project records: up to 10 years under German tax and commercial law).
Data security
All content is transmitted encrypted via TLS (HTTPS). Access to enquiry data is limited to the controller and named processors. Technical and organisational measures under Art. 32 GDPR are reviewed regularly.
Email communication
We normally reply to your enquiry by email. Sending and receiving runs through an email provider with servers in the EU under a data-processing agreement; transmission is TLS-encrypted. Full protection of message content cannot be guaranteed for unencrypted email — for particularly sensitive content you can reach us by phone.
Protected internal area
Enquiries are handled in a password-protected internal area accessible to two authorised accounts only. There is no public registration. Sign-in processes the email address, a hashed password and the time of the last sign-in. Legal basis: Art. 6 (1) (f) GDPR (secure administration of enquiry data). A verification email is sent when a password is reset or changed.
Categories of recipients
Personal data is never sold and never passed to third parties for advertising. Recipients are limited to: the hosting and database provider (website operation and enquiry storage, EU), the CDN provider for media delivery (EU), the email provider and — where a contract is concluded — tax advisors and, if applicable, payment providers within statutory obligations.
Objection to direct marketing
You may object to the processing of your data for direct marketing purposes at any time and without giving reasons (Art. 21 (2) GDPR). No newsletter is operated at present; promotional contact only takes place within existing or prospective business relationships and only where Sec. 7 UWG permits it.
No obligation to provide data
Providing your data is voluntary and neither legally nor contractually required. Without a name and email address, however, we cannot process your enquiry. All other fields in the enquiry forms are optional and only serve to assess your project more precisely.
Status and updates
This privacy policy is updated continuously to reflect technical and legal changes. The terms of business and withdrawal instructions under „Terms & cancellation“ apply in addition. Version: August 2026.
Last updated: September 2026