Legal
Privacy Policy
This is a courtesy translation. The legally binding version is the German one at /datenschutz. As of: June 2026.
1. Data controller
The party responsible for data processing on this website is:
Boris Stock-Kaul
Alte Ortsstr. 41
65510 Hünstetten
Germany
Phone: +49 176 27 555 328
Email: info@koikunawa.com
2. General notes
2.1 Scope
We collect and process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. Processing regularly takes place only with the user's consent or where permitted by law.
2.2 Legal bases (Art. 6 GDPR)
- Art. 6 (1) (a) GDPR — consent
- Art. 6 (1) (b) GDPR — contract or pre-contractual measures
- Art. 6 (1) (c) GDPR — legal obligation
- Art. 6 (1) (f) GDPR — legitimate interest
2.3 Retention and deletion
Personal data is deleted as soon as the purpose for storage no longer applies. Longer storage may occur if provided for by European or national legislation. Blocking or deletion also occurs if a storage period required by such provisions expires.
3. Website hosting and server log files
This site is built as a static Astro deployment and hosted by IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany). With every visit, the hosting provider automatically records information transmitted by your browser:
- browser type and version
- operating system
- referrer URL
- hostname of the accessing computer
- time of the server request
- IP address (anonymised on the server to /24)
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in stable, secure operation of the website and abuse prevention).
Retention: Logs are rotated by the hosting provider and deleted after a maximum of 8 weeks.
4. Cookies
This website sets only a single, technically necessary cookie:
- kkn-18 — stores the confirmation of the minimum age (age gate). Lifetime: 1 year. Stored locally in the browser only, no transmission to third parties.
Legal basis: § 25 (2) No. 2 TDDDG (cookie strictly necessary for a service explicitly requested by the user). No consent banner is shown because only strictly necessary storage takes place.
You may delete the cookie at any time via your browser settings. After deletion you will be asked for your age confirmation again on the next visit.
5. Web analytics
This website does not use any web analytics. No Google Analytics or comparable tracking tools are deployed. We only evaluate the anonymised server logs of the hosting provider (see section 3).
6. Instagram feed
On the homepage we display a preview of our Instagram profile. The images are fetched at build time from our server via the Behold.so API, stored locally, and served from our own web server when the page is loaded. Merely visiting the page does not establish a direct connection from your browser to Instagram/Meta.
Only when you click on a post are you redirected to the Instagram website — from that point on, the privacy policy of Meta Platforms Ireland Ltd. applies.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a meaningful external presentation).
7. External content (social media, embeds)
This website contains links to profiles on third-party platforms (e.g. Instagram, Joyclub, FetLife, Pinterest). These links are purely textual and transmit no data to the respective platform before they are clicked. Only by clicking a link are you redirected to the external site, where their privacy policy applies.
8. Fonts
Fonts are served locally from our own web server. There is no connection to Google Fonts or comparable third-party providers.
9. Email contact
If you contact us by email, the transmitted data (your email address and content) will be stored to process your request. We do not pass on this data without your consent. Legal basis: Art. 6 (1) (b) or (f) GDPR. The data is deleted as soon as the matter has been resolved and there are no statutory retention obligations.
10. Your rights as a data subject
Insofar as personal data of yours is processed, you are a data subject within the meaning of the GDPR and you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7 (3) GDPR)
11. Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR. The competent authority is:
The Hessian Commissioner for Data Protection and Freedom of Information
Postfach 31 63
65021 Wiesbaden, Germany
12. Updates to this privacy policy
This privacy policy is dated June 2026. As our website evolves or statutory or regulatory requirements change, this policy may need to be adapted. The latest version is always available on this page.