Privacy

Last updated 11 October 2026

Who is responsible

Timothy Birkl runs the Scaffold Panel under the name lunupa, Sterzingerstr. 44, 83024 Rosenheim, Germany. Questions about your data go to hola@lunupa.com.

These pages

The public pages set no cookies and use no analytics. The fonts are on our own server.

The web server logs every request: the page, the time, your browser, the page you came from, and your IP address, which is turned into a short code before it is stored. We use this to spot attacks and errors and to count visits (legitimate interests, Article 6(1)(f) of the UK GDPR and the EU GDPR). The log is deleted after 90 days.

Weather and maps

Wind data comes from the Met Office. Our server asks for it, not your browser, so the Met Office sees our server and the rounded position of each site, to about 10 km. It never sees your IP address or any names, addresses or clients.

The map comes from our own server, made from OpenStreetMap data (© OpenStreetMap contributors, Open Database Licence). No map company sees your IP address or the places you look at. Your phone keeps the map around your sites so it opens without signal.

The demo

Anything you change in the demo is saved in your own browser only and never reaches our server. Your browser keeps the wind data for 30 minutes so it does not ask again on every click.

When you start a trial we store what you put in the form: your firm, your name, your email and the username you picked, with the time you sent it. Your password is stored only as a check value, from which it cannot be worked out. We need these details to make your panel and send you the link that starts it (a contract you asked for, Article 6(1)(b)).

We email you that link through Resend, an email service in the USA. The link works for 24 hours. A sign-up nobody confirms is deleted after that, when the next sign-up comes in. Once you open it, your firm and your login are made, and your email becomes the address where clients' replies to report emails go. You can change it in Settings.

The count on the home page

The home page may show how many inspections, firms and people use the panel. These are totals only. No firm, person or site can be told from them.

The panel with a login

For each login we store the username, the display name, the role and a check value made from the password, from which the password cannot be worked out. After you sign in, the server sets a cookie that keeps you signed in for 12 hours. The panel does not work without it, so we do not ask for consent to it.

What a firm enters, such as scaffolds, inspections, jobs, vehicles and staff, belongs to the firm. The firm is responsible for it. We store it on the firm's behalf and use it for nothing else. It is deleted when the firm asks or ends its contract. Before we delete it we send the firm a full copy of its records, so it can keep them for the 6 years HMRC asks for VAT records.

Under Who is where the server records the time of every check-in and check-out. If the firm has location switched on, your phone's position at that moment is saved with it, rounded to about 11 metres, and only if you allow location in the browser. Nothing is recorded in between. These entries are part of the firm's data.

When an inspection is saved for a scaffold with a client email, the server emails the report to that address through Resend. The firm's own email is the reply address, so the client's answer goes to the firm. An admin or the office can switch this off in Settings.

Quotes and invoices, with the customer names and addresses on them, are only sent to admin and office logins. Site logins never receive them.

An admin or the office can email a quote, invoice or credit note to the customer email on it. It goes through Resend, with the firm's email as the reply address. If the firm turns on payment reminders under Invoice details, the server also emails the customer when an invoice is overdue and not marked paid, 3 times at most. Each reminder carries the invoice and the firm's payment details.

The customer's page for a quote, invoice or statement stores nothing on their device and does not record that it was opened. The firm sees only what the customer chose to do there: print or save it, follow the pay online link, or sign.

Photos and signatures from an inspection, and drawings and documents added to a scaffold, are stored on our server with the rest of the firm's data. Only people signed in to that firm can open them.

The office can enter up to 3 addresses for a reminder email. From 7 each weekday morning the server sends them a list of overdue inspections, inspections due today and tomorrow, reports not given, defects nobody is assigned to and variations not signed, with scaffold numbers and site names. It sends nothing on a day with nothing to report. The email goes through Resend, an email service in the USA. Clearing the addresses in Settings stops it.

For job costs, the panel stores who worked on each job day and how many hours, typed in by the gang or the office. These hours are not taken from check-ins. The office can also enter what an hour of each person costs the firm. Admins and the office see that cost and the profit per job; site logins see the hours, never the cost.

A variation (extra work agreed on site) stores its description, photos, price, the name of the person who signed for the customer and their signature, with the rest of the firm's data. Site logins see its price only if the firm ticked "Can price variations" for them.

An off-hire note stores what came off hire, the day hire stops, and the name and signature of the person who signed for the customer. Unless the office turns it off in Settings, the server emails each signed note once to the scaffold's client email through Resend, as a link. The link opens the note on a page that needs no login; each note has its own random link, which cannot be guessed.

When the customer signs a quote they can pick the week they would like the work to start. It is stored with the signed quote. When the office sets the start date, it can email it to the customer through Resend.

The QR code on a printed scaffold tag opens a page that needs no login. It shows the firm's name and logo, the scaffold number and site name, which access point the tag is on, whether the scaffold is safe to use, when it was last inspected and by whom, when the next inspection is due and the load class. It never shows the client or the site address. Each printed tag has its own random link, which cannot be guessed.

So the panel works without signal, your phone keeps a copy of the firm's data in the browser, with photos and check-ins made while offline until they reach the server. Signing out deletes that copy from the phone.

An admin or the office can download the firm's data from Settings at any time: the scaffold list as a spreadsheet, everything as one file, or the full records (quotes, invoices, payments, credit notes, CIS, applications for payment, inspections, variations with who signed them, job costs with hours per person, hire rate changes, and off-hire notes with who signed them) as one ZIP file.

The panel also keeps a technical log: which page was called, whether it worked and, at each sign-in, the username. It is deleted after 90 days.

Where the data is stored

The server belongs to DigitalOcean and is in New York, USA. DigitalOcean has joined the EU-US Data Privacy Framework and its UK Extension. The European Commission recognises the framework as adequate protection, and the UK Government recognises the UK Extension in the same way.

Your rights

You can ask for a copy of your data, have it corrected, deleted or restricted, and get it in a format you can use elsewhere. You can object to processing based on legitimate interests. Write to hola@lunupa.com.

You can complain to a data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk). The authority for lunupa in Germany is the Bavarian Data Protection Authority (lda.bayern.de).

lunupa makes no automated decisions about you.