Privacy policy

This site sets no cookies, loads nothing from other companies' servers, and asks you for nothing. What it does process, and why, is below.

Controller

Kilo Moana UG (haftungsbeschränkt), Heidestraße 49g, 25462 Rellingen, Germany. E-mail: info@kilo-moana.com. Full details are in the imprint.

We are not required to appoint a data protection officer. Questions about data protection go to the address above and are answered by us.

Server log files

Our hosting provider records every request in a log file: the address requested, the date and time, the amount of data transferred, the referring page, your browser and operating system, and your IP address. Every web server does this, and it is necessary to deliver the site and to recognise attacks on it.

Legal basis is Art. 6(1)(f) GDPR — our legitimate interest in operating the site reliably and securely. The logs are not combined with any other data source, are not used to identify individual visitors, and are deleted by the provider after a short period.

Hosting provider: STRATO AG, Pascalstraße 10, 10587 Berlin, Germany. The provider acts as our processor under Art. 28 GDPR, on the basis of a data processing agreement. The servers are located in Germany.

Reach measurement

We use Umami to see which pages are looked at. It runs on our own server at stats1.kilo-moana.com, not at an analytics company, so this data does not leave our control.

What it records: the page opened, the site that referred you, the approximate country derived from your IP address, and your browser, operating system and screen size.

How it tells visits apart without cookies: it forms a hash from your IP address, your browser identification and the site identifier, using a salt that changes every day. Nothing is written to your device, the IP address itself is not stored, and because the salt changes daily the value cannot be used to recognise you tomorrow or on any other website.

We treat that identifier as personal data even though it cannot be traced back to you in practice, and process it on the basis of Art. 6(1)(f) GDPR: we have a legitimate interest in knowing which projects people actually look at. You can object to this at any time under Art. 21 GDPR (see below), and setting "Do Not Track" in your browser is enough — Umami then records nothing.

We do not ask for consent for this, because no information is stored on your device and nothing is read from it beyond what your browser transmits with every request in any case.

Fonts

Both typefaces are delivered from our own server. No connection is made to Google Fonts or any other font service, and no data about you reaches a third party through them.

Contacting us

If you write to us, your message, your address and anything else you put in it are stored so that we can answer. If you call us, we see the number you are calling from and note down what we need to deal with the matter — we do not record calls. Legal basis in both cases is Art. 6(1)(b) GDPR if your enquiry concerns a contract or its preparation, otherwise Art. 6(1)(f) GDPR — our interest in answering enquiries addressed to us.

We delete enquiries once they are dealt with and there is no reason to keep them. Correspondence that counts as a commercial or business letter is kept for the statutory retention periods of six or ten years (§ 257 HGB, § 147 AO); during that time it is only stored, not used.

Transfer to third countries

None. All processing described here takes place on servers in Germany, and no data is transferred outside the European Economic Area.

What this site does not do

• No cookies, and no local storage used for tracking.
• No Google Analytics, no advertising network, no conversion pixels.
• No embedded social media widgets, no YouTube or Vimeo players.
• No contact form, no newsletter, no user accounts, no login.
• No content delivery network in front of the site.
• No profiling and no automated decision-making under Art. 22 GDPR.

If any of this changes, this page changes with it — and if consent becomes necessary, you will be asked for it, because it will be required.

Your rights

You have the right to request access to the data we hold about you (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or its processing restricted (Art. 18), and to receive it in a portable form (Art. 20). Write to the address above; we answer within one month.

You have the right to object at any time to processing based on our legitimate interest (Art. 21 GDPR) — that is the reach measurement and the server logs. An e-mail saying so is enough, and it costs you nothing.

You may also complain to a supervisory authority. The one responsible for us is the Independent Centre for Privacy Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.