Controller
Responsible for processing personal data on this website under the GDPR is Marcel Moll, Ludwig-Thoma-Straße 12, 68642 Bürstadt, Germany.
For anything about your data, write to hello@jitoku.app. There is no data protection officer, as none is required for a project of this size.
Hosting
This website runs on a server we rent from DigitalOcean, LLC, 101 6th Avenue, New York, NY 10013, USA, in its data centre in Frankfurt am Main, Germany. Every page you open is delivered from this server. We have a data processing agreement with DigitalOcean under Art. 28 GDPR. DigitalOcean is certified under the EU–US Data Privacy Framework (Art. 45 GDPR), with the EU standard contractual clauses as a fallback, should any data reach the USA. Legal basis: Art. 6(1)(f) GDPR, our interest in a secure and reliable website.
Server log files
For each request our web server records a shortened IP address (the last part is removed, so it no longer points to your connection), date and time, the page requested, the status code, the amount of data sent and your browser identification. We use these records only to keep the site secure and to find errors, and they are deleted automatically after 14 days. Legal basis: Art. 6(1)(f) GDPR.
Visitor statistics
We count visits with Umami Cloud, a service of Umami Software, Inc., 1362 42nd Ave., San Francisco, CA 94122, USA. Umami sets no cookies and stores nothing in your browser. It records the page you open, the page you came from, browser, operating system, device type, screen size and country. If your browser sends a Do Not Track signal, nothing is counted.
Your browser does not contact Umami: the statistics script and the data are passed through our own server. To derive your country and a pseudonymous visitor ID, our server hands your IP address on to Umami, which uses it once and does not store it. We have chosen Umami’s data region Europe, so the statistics are stored on servers in the EU. As Umami is a US company, access from the USA cannot be ruled out entirely; for this case our data processing agreement with Umami includes the EU standard contractual clauses (Art. 46(2)(c) GDPR).
We use the numbers only to see which pages are read and to improve the site. They are deleted after 6 months. Legal basis: Art. 6(1)(f) GDPR.
Cookies and storage in your browser
This website sets no cookies. Only if you press the button to switch between the light and dark theme, your choice ("light" or "dark") is saved in your browser's local storage, so the next page opens in the same theme. It never leaves your device, and pressing the button back to your device's own setting removes it. You can also delete it at any time in your browser settings. Legal basis: § 25(2) no. 2 TDDDG, as this storage is needed for a function you asked for.
Contact form and email
If you use the contact form, your name, email address and message go to our own server, which keeps no copy and hands them to our email delivery service MailerSend, Inc., 228 Park Ave S, PMB 54955, New York, NY 10003, USA. MailerSend stores data in the EU and sends the message as an email to hello@jitoku.app. MailerSend is certified under the EU–US Data Privacy Framework (Art. 45 GDPR), and we have a data processing agreement with it under Art. 28 GDPR. If you write to hello@jitoku.app directly, the email arrives there without MailerSend. We use what you send only to answer you.
Our mailbox is with Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA, on servers in the USA. Our data processing agreement with Namecheap includes the EU standard contractual clauses (Art. 46(2)(c) GDPR), which protect your data when it is transferred to the USA.
We delete the conversation once your request is settled, unless we have to keep it by law. Legal basis: Art. 6(1)(f) GDPR, our interest in answering you, or Art. 6(1)(b) GDPR if your message is about a contract.
Alpha sign-up
When you sign up for the alpha, our server passes your email address on to our newsletter service MailerLite (MailerLite Limited, Dublin, Ireland), which stores it on servers in the EU; our server keeps no copy. We have a data processing agreement with MailerLite under Art. 28 GDPR.
MailerLite then sends you an email with a confirmation link (double opt-in). Only after you click it are you on the list. As proof of your consent, MailerLite records when you signed up and confirmed, and the IP address used for confirming. Open and click tracking in these emails is switched off. We use your address only to invite you once when the alpha opens and, if you take part, to write to you about it. We do not share or sell it.
Every email has an unsubscribe link, or write to hello@jitoku.app; your address is then removed. Otherwise we delete the list when the alpha ends. Legal basis: Art. 6(1)(a) GDPR, your consent, which you can withdraw at any time without affecting what happened before.
Survey
Our survey “How do you practise between keiko?” runs on Tally, a form service by Tally BV, Sint-Pietersnieuwstraat 11, 9000 Ghent, Belgium. Your answers are stored on Tally’s servers in the EU, and we have a data processing agreement with Tally under Art. 28 GDPR. The survey opens on Tally’s own website, so this site sends nothing to Tally until you follow the link.
The survey asks for no name, email address or dojo, and we ask you not to put names in the free-text answer. To show the form and keep out abuse, Tally processes technical data such as your IP address and browser. We use the answers only to decide what goes into Jitoku and delete them at the latest 12 months after the alpha ends. Taking part is voluntary. Legal basis: Art. 6(1)(f) GDPR.
Fonts
All fonts are served from our own domain. No requests are made to third-party font services.
Links to Instagram
We only link to Instagram and do not embed any content, so no data is sent to Instagram when you visit this site. If you follow a link, Instagram’s own privacy policy applies there.
Your rights
You have the right to know what data we hold about you (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its use restricted (Art. 18), and to receive it in a common format (Art. 20).
Where we rely on our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your situation (Art. 21). Where we rely on your consent, you can withdraw it at any time with effect for the future (Art. 7(3)).
An email to hello@jitoku.app is enough for any of these. We do not use automated decision-making or profiling.
Right to lodge a complaint
You can complain to a data protection supervisory authority, in particular in the EU country where you live or work. The authority responsible for us is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 31 63, 65021 Wiesbaden, Germany, datenschutz.hessen.de.