1. CONTROLLER

AKIRA ISHINO (KIKU AGENCY)
FÖHRER STR. 10, 13353 BERLIN, GERMANY
EMAIL: CONTACT@KIKU.AGENCY

2. Hosting and Website Operation

This website is hosted and technically operated via Squarespace. In the course of providing and delivering the website, personal data is processed (in particular technical access data as described in section 3). Squarespace acts as a data processor; Squarespace’s Data Processing Addendum (DPA) applies. (squarespace.com)
Personal data may be transferred to third countries (e.g., the United States). Squarespace describes appropriate safeguards for such transfers (e.g., Standard Contractual Clauses). (support.squarespace.com)

3. Access Data / Server Log FileS

When this website is accessed, technical data transmitted by the browser is processed. This typically includes:
• IP address,
• date and time of access,
• requested page/file,
• browser type/version and operating system,
• referrer URL.

Purposes: operation of the website, ensuring security and stability, and prevention/analysis of misuse and errors.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure website).

Retention period: 14 days.

4. Contact (Contact Form / Email)

Where contact is made via the contact form or by email, the information provided is processed in order to handle the enquiry and to communicate regarding the request.
Required fields in the contact form: first name, last name, email address, message.

Purposes: handling and responding to enquiries and, where applicable, pre-contractual communication.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract / contract performance) and/or Art. 6(1)(f) GDPR (legitimate interest in efficient communication). (dsgvo-gesetz.de)

Retention period: until the enquiry has been conclusively handled; longer only where statutory retention obligations apply or retention is necessary for the establishment, exercise, or defence of legal claims.

5. Social Media Links (Instagram, LinkedIn)

This website contains icon links only to profiles on Instagram and LinkedIn. No personal data is transferred to these platforms merely by accessing this website. A transfer occurs only upon activation of the respective link and redirection to the platform; from that point onward, the platform’s privacy policies apply.

6. Cookies

This website may use strictly necessary cookies and similar technologies required for the operation and provision of the website. Based on the current setup, no tracking or marketing tools (e.g., analytics services or pixels) are used.

7. Recipients / Categories of Recipients

Depending on the processing activity, personal data may be disclosed to the following recipients:
• Squarespace (hosting/website operation as a data processor). (squarespace.com)
• Email service providers, where enquiries are handled via email.

8. Data Subject Rights

Subject to the applicable legal requirements, data subjects have the following rights under the GDPR:
• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
• right to withdraw consent at any time with future effect, where processing is based on consent.
The information duties result from Art. 13 GDPR. (dsgvo-gesetz.de)

9. Right to Lodge a Complaint

Data subjects have the right to lodge a complaint with a supervisory authority. The competent authority in Berlin is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61, 10555 Berlin, Germany
Email: mailbox@datenschutz-berlin.de

(datenschutz-berlin.de)

10. Changes to this Privacy Notice
This Privacy Notice may be updated where the website, services used, or legal requirements change.