Privacy policy
Protecting your data matters to us. Here we explain which personal data we process when you visit this website, for what purpose, on what legal basis and what rights you have. The basis is the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Last updated: October 23, 2026
This page is a translation for information purposes. The German version is legally binding.
1. Controller
The controller responsible for data processing on this website is:
Kawa Abdul SharifTheodor-Heuss-Str. 1851149 KölnDeutschlandinfo@hakusora.com2. Overview
You can use this website without providing any personal information. We only process personal data where technically necessary to run the website, when you write to us or when you sign up for updates. Nothing is sold through this website, and we do not pass your data on for advertising purposes.
Our fonts are hosted on our own server. No connections to third-party font, map or video services are made when you visit a page.
3. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. With every visit the server automatically processes data your browser transmits: IP address, date and time, requested address, referrer, browser and operating system. This is necessary to deliver the website and keep it secure, for example to fend off attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is secure and stable operation. Log data is stored only as long as necessary for these purposes and then deleted automatically, unless it is needed longer to investigate a specific security incident. We have a data processing agreement with the hosting provider under Art. 28 GDPR.
The provider may also process data in the USA. The transfer is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework, insofar as the provider is certified under it, and additionally on standard contractual clauses under Art. 46(2)(c) GDPR.
4. Storage on your device
We only store information on your device where it is strictly necessary for a service you have explicitly requested (Section 25 (2) No. 2 TDDDG). This covers your chosen appearance (light or dark), if you change it, your chosen language and, where we ask for consent, your privacy choice. We only use other storage and services with your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). An overview and the option to withdraw consent can be found on the Cookies page.
5. Contact form and email
When you write to us via the form or by email, we process your name, your email address, the optional company, the topic and your message in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract, otherwise Art. 6 (1) (f) GDPR. Our legitimate interest is answering your request.
We delete the data as soon as your request has been dealt with, at the latest after six months, unless statutory retention obligations apply.
6. Email updates with double opt-in
When you sign up for updates, we process your email address and voluntary details: first name, preferred style and language. We use them to send you news about our products, for example about the launch.
You first receive an email with a confirmation link. Only once you confirm do we store your details (double opt-in). As proof of your consent we store the time of sign-up and confirmation and the version of the consent text. We do not store your IP address for this.
The legal basis is your consent under Art. 6(1)(a) GDPR and Section 7(2) no. 2 UWG. We store the proof of consent on the basis of Art. 6(1)(c) in conjunction with Art. 7(1) GDPR. You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or simply by writing to us. We then delete your details. Without withdrawal we delete them no later than 24 months after your sign-up.
7. Sending emails
We use IONOS SE, Elgendorfer Str. 57, 56410 Montabaur to send emails. The provider processes your email address and the content of the message on our behalf under a contract pursuant to Art. 28 GDPR.
8. Protection against abuse
Our forms are protected against automated requests by an invisible check field, a minimum time to fill in the form and a limit on requests per IP address. For this purpose we only keep the IP address in memory and only for the respective time window, at most 10 minutes. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is protection against spam and abuse.
9. Recipients and third countries
Your data is only received by the service providers named, who act on our behalf. Data is only transferred to countries outside the EU or EEA if this is expressly stated above and appropriate safeguards under Art. 44 et seq. GDPR are in place.
10. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7 (3)). You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Competent supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf
11. Right to object
Where we process your data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless there are compelling legitimate grounds.
12. Further information
You are not obliged to provide us with any data. Without an email address, however, we cannot inform you or answer your request. There is no automated decision-making, including profiling. The connection to this website is encrypted with TLS.
13. Changes
We update this policy when the website or the legal situation changes. The version published here applies.