PRIVACY

KASA STUDIO
[Full name/legal form and service address]
Email: hello@kasa-studio.de

When the website is opened, the hosting provider may process technical data such as IP address, time, requested URL, referrer, browser and device information, and status codes. This supports secure and stable delivery under Article 6(1)(f) GDPR.

The hosting provider is Cloudflare, Inc., USA (Cloudflare Workers and Cloudflare D1). A data processing agreement under Article 28 GDPR is in place with Cloudflare. Cloudflare is certified under the EU-U.S. Data Privacy Framework; transfers to the USA rely on the European Commission's adequacy decision.

[Add specific retention periods for server logs.]

KASA STUDIO currently uses no proprietary analytics, marketing or profiling cookies. Language selection is handled only through the URL. No data is stored permanently in the browser.

Strictly necessary security or session information from the hosting provider may be used where required for the service explicitly requested. Any non-essential technology would require separate consent before use.

When you send the form, your name, email, message and optional project details are transmitted to this website and stored in its Cloudflare D1 database. Only the studio can access the password-protected inbox. A reference, submission time and processing status are saved to handle your enquiry reliably and prevent duplicate submissions. No enquiry data is stored permanently in your browser. Sending an email separately uses the email providers involved.

Confirmations to you and internal notifications to the studio may be sent through the email delivery service Resend (Resend, Inc., USA). Your name, email address and the details from the form are transmitted to this service for that purpose. [Before activation: review the data processing agreement and third-country transfer; remove this paragraph if the service is not used.]

The optional place search starts only after three characters have been entered. Only the city or region search term is then passed through the website server to komoot's Photon search service; the browser does not connect to Photon directly. Results are based on OpenStreetMap data. Please do not enter an exact address or other personal information. KASA does not store search terms permanently; technically necessary server logs of the involved providers may still be created.

Processing takes place under Article 6(1)(b) GDPR for a possible project and otherwise under Article 6(1)(f) GDPR.

Data is only received by parties needed to provide the website or answer an enquiry. Enquiries are deleted when their purpose ends unless statutory retention obligations apply.

[Add specific email and project retention periods.]

Under the GDPR, data subjects may have rights to access, rectification, erasure, restriction, portability and objection. They may also complain to a data protection authority.

Competent supervisory authority: Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany, datenschutz.saarland.de.

5 October 2026