Privacy policy
This is an English translation for your convenience. The German version (Datenschutzerklärung) is legally binding.
1. Controller
Nicolas Jansohn
KikuchiLabs
Am Kastanienberg 55
69151 Neckargemünd
Germany
Email: info@kikuchilabs.de
2. Overview of processing
This website collects as little personal data as possible. No tracking of individual visitors is used. For cookieless audience measurement I use Cloudflare Web Analytics (see section 4). The fonts of this website are delivered from the same server as the website itself. In addition, the spam protection of the enquiry form loads a script from Cloudflare (see section 6).
3. Web host
This website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare processes technically necessary data, such as IP addresses, in order to deliver the website.
Each request produces access data: IP address, time, requested address, referrer and browser identifier. Cloudflare uses this data to deliver the site and to fend off attacks. I do not keep server log files of my own and do not analyse access data of individual visitors. The legal basis is my legitimate interest in a secure and stable website (Art. 6(1)(f) GDPR).
Cloudflare is certified under the EU-US Data Privacy Framework. More information: Cloudflare privacy policy
4. Audience measurement with Cloudflare Web Analytics
This website uses Cloudflare Web Analytics. The provider is Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). It shows me which pages are visited and how fast they load.
When you open a page, your browser loads a small script (beacon.min.js) from static.cloudflareinsights.com. It measures loading times (Core Web Vitals) and sends the values to Cloudflare via this website. The script does not set cookies, does not use local storage and does not create a fingerprint of your device. Cloudflare does not use it to follow you across page views or websites.
Only aggregated data is evaluated: page visited without URL parameters, referrer, country, browser, operating system, device type and loading times. Cloudflare processes your IP address only to determine the country. It is not stored for the analysis. I cannot identify individual visitors.
Cloudflare keeps the measurement data in full for 7 days. After that, it is only kept in aggregated, heavily reduced form. Data from the last 6 months can be viewed.
The legal basis is my legitimate interest in analysing the use and performance of the website (Art. 6(1)(f) GDPR). Data may be transferred to the USA. This is based on the EU-US Data Privacy Framework, under which Cloudflare is certified, and on the Standard Contractual Clauses. More information: Cloudflare privacy policy and Cloudflare Web Analytics
5. Contact by email
If you contact me by email, I store the information you provide, including your contact details, in order to process your request and to answer any follow-up questions. I do not pass on this data without your consent.
Legal basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).
6. Enquiry form
When you write to me via the enquiry form, I process the details you enter there. These are your name, optionally your company, your email address, the selected topic and your message. The purpose is to handle and answer your enquiry. For the bot check, your IP address is processed as well.
The legal basis for handling your enquiry is Art. 6(1)(b) GDPR (pre-contractual steps). For spam protection it is my legitimate interest in a form free of abuse (Art. 6(1)(f) GDPR).
Nothing is stored on the web server. The form function only forwards your details as an email. The email arrives in my inbox info@kikuchilabs.de on my own mail server. Your IP address is not included in the email. I keep your details there until your enquiry is settled. After that I delete them, unless statutory retention periods apply.
Cloudflare Turnstile
To protect the form against spam and automated requests I use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Its establishment in the EU is Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany.
Turnstile is only loaded when you reach the contact section or use the form. Cloudflare then processes your IP address and technical characteristics of your browser. For this, Cloudflare may set the technically necessary cookie cf_clearance. When you submit the form, the result of the check is sent to Cloudflare for confirmation.
Data may be transferred to the USA in the process. This is based on the EU-US Data Privacy Framework, under which Cloudflare is certified. The legal basis is my legitimate interest in spam protection (Art. 6(1)(f) GDPR). More information: Cloudflare privacy policy
Mailjet
The form email is sent to my inbox by Mailjet SAS. Address: 4 rue Jules Lefebvre, 75009 Paris, France. Mailjet is part of the Sinch group. Mailjet acts as my processor, and sending takes place from the EU. Tracking of opens or clicks is not enabled. More information: Mailjet privacy policy
7. Cookies, local storage and no tracking
This website itself does not set cookies and does not use any tracking tools. Audience measurement with Cloudflare Web Analytics works without cookies and without local storage (see section 4). No profiling takes place. For the Cloudflare Turnstile cookie, see section 6.
If you switch the design, your browser stores this choice locally under the key kl-theme. This entry does not leave your device and contains no personal data. It is required for the function you requested (Section 25(2) no. 2 TDDDG).
8. SSL encryption
For security reasons, this website uses SSL encryption (HTTPS). You can recognize an encrypted connection by the lock icon in the address bar of your browser.
9. Your rights
With regard to your personal data, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The responsible authority is the State Commissioner for Data Protection Baden-Württemberg (LfDI). Address: Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
10. Changes
I reserve the right to update this privacy policy so that it always meets current legal requirements, or to reflect changes to my services.