Privacy policy

1. Controller

The controller for data processing on this website is Ichii GmbH, Kollwitzstraße 76, 10435 Berlin, Germany, represented by its managing director Kunichi Kisaki. Email: info@ichii.de.

No data protection officer has been appointed.

2. Overview

We only process personal data where this is necessary to operate the website and handle your enquiries.

Without your consent this website sets no cookies and loads no analytics or marketing services. Google Analytics is only loaded if you choose “Allow statistics” in the privacy settings (see section 6). We use no advertising or marketing services, no tracking pixels and embed no third-party content (such as videos, maps or social media plugins). Fonts are served from our own server; no connection to Google Fonts is made when a page loads.

We store your choice in the privacy settings (“allowed” or “rejected”) in your browser’s local storage (entry “ichii-analytics-consent”) so that we do not ask again on every visit. This entry is necessary for the function you requested (§ 25(2) no. 2 TDDDG), is not transmitted to us and remains until you delete it in your browser.

3. Hosting and server log files

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel delivers pages through a global content delivery network; server-side functions (such as the enquiry form) run in a data centre in Frankfurt am Main, Germany.

When you visit the website, Vercel processes technically necessary data, in particular IP address, date and time, requested URL, amount of data transferred, referrer and browser and operating system information. This data is stored in server log files to deliver the website securely and reliably and to detect errors or abuse. We do not combine this data with other data or use it for analytics.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and error-free provision of the website.

We have a data processing agreement (Data Processing Addendum) with Vercel under Art. 28 GDPR. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46 GDPR).

4. Project enquiry form

When you send us an enquiry through the form, we process the data you enter: name, email address, optionally company and current website, preferred offer, required pages and features, content to be added, optionally your preferred times for a Zoom call, the language of the enquiry and the time it was received.

The purpose is to handle your enquiry, arrange a call and, where applicable, prepare an offer. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps at your request) and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Required fields are marked; without them we cannot process your enquiry.

Each enquiry is stored as a file in a non-public storage (Vercel Blob, located in Frankfurt am Main) so that no enquiry is lost. In addition, we receive a notification email in our mailbox; for sending it we use Resend (Plus Five Five, Inc., USA), which is certified under the EU-US Data Privacy Framework and with which we have a data processing agreement. Our mailbox is operated by Google (Google Workspace, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

You do not receive an automated email from us. We reply to you personally.

We delete your enquiry once it is no longer needed. If a contract is concluded, we retain the data as far as commercial and tax retention obligations apply.

5. Spam and abuse protection

To protect the form we only use our own mechanisms, without third parties and without cookies: a field invisible to humans, a signed timestamp that detects automated submissions that are too fast, a check of the request's origin and a limit on the number of requests per IP address.

For this limit your IP address is kept in the server's memory for at most 10 minutes and is not stored permanently. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against spam and abuse.

6. Web analytics with Google Analytics 4 (only with consent)

If you choose “Allow statistics” in the privacy settings, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Before that, the Google script is not loaded and no data is sent to Google. If you reject, this remains the case.

After your consent, the following data is processed in particular: pages visited (address and title), time, referring page, language, information about device, browser, operating system and screen, and an approximate location (country, region, city) that Google derives from your IP address. According to Google, Google Analytics 4 does not store IP addresses. For recognition, Google sets cookies (“_ga” and “_ga_BPMVPET0EJ”) containing a pseudonymous identifier; by default these cookies are valid for up to two years.

If you successfully send an enquiry through the form, we additionally transmit the event “generate_lead”. It contains no form content – neither your name, email address nor your project details.

Google Signals and ad personalisation are disabled; the data is not linked to Google Ads. We use the reports to understand how our website is used and to improve it.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Google processes the data on our behalf. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Event data is retained according to the retention period set in our Google Analytics property and then deleted automatically.

You can withdraw your consent at any time with effect for the future: open “Privacy settings” in the website footer and choose “Reject”. We then disable Google Analytics, delete this website’s Google Analytics cookies and reload the page.

7. Contact by email

If you email us at info@ichii.de, we process your email address and the content of your message to handle your request (Art. 6(1)(b) or (f) GDPR). The mailbox is operated on Google Workspace (see section 4).

8. Video calls via Zoom

We use Zoom (Zoom Communications, Inc., USA) for initial calls. This involves processing in particular name, email address, audio and video data and technical connection data. The legal basis is Art. 6(1)(b) GDPR. Details on Zoom's data processing can be found in Zoom's privacy statement. Participation is voluntary; we can arrange an alternative on request.

9. Payments

Online payments are currently not enabled on this website. No payment data is processed through the website.

10. Links to other websites

Our project pages link to external websites (e.g. raumy.de, dypnosis.com, infeee.com, getsteuer.com, berjobs.com). Data is only transferred to the respective operator once you click such a link; their privacy policies apply there.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21). Please contact info@ichii.de.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us, the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

No automated decision-making, including profiling, takes place.