Privacy Policy
Koostory UG (haftungsbeschränkt), Akazienstraße 3a, 10827 Berlin, Germany ('KooStory', 'we', 'us') operates koostory.net. This policy explains what personal data we collect, why, and your rights under the GDPR.
1. Data Controller
Koostory UG (haftungsbeschränkt) Akazienstraße 3a, 10827 Berlin, Germany Email: ilmokoo@koostory.net
2. What We Collect and Why
We collect personal data only when you actively provide it: • Contact form: name, email, message — to respond to your inquiry (Art. 6(1)(b) GDPR, pre-contractual measures). • Workshop reservation: name, email, message, preferred dates — to manage your booking (Art. 6(1)(b) GDPR). • Sample report request: email address — to send you the document and follow up about our services, based on your explicit consent (Art. 6(1)(a) GDPR). We do not use tracking or analytics cookies. Only technically necessary session cookies are set for authentication.
3. Data Retention
We retain your data only as long as necessary: contact and reservation data for up to 24 months for business follow-up and legal compliance. You may request earlier deletion at any time.
4. Third-Party Processors
• Vercel Inc. (hosting, USA) — EU-region servers where possible • Resend Inc. (transactional email, USA) — processes email delivery • Neon Inc. (database, USA) — encrypted data at rest All processors are bound by data processing agreements. Transfers outside the EU are covered under the EU–US Data Privacy Framework or Standard Contractual Clauses.
5. Your Rights
Under the GDPR you have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict (Art. 18), and port (Art. 20) your data, and to object to processing (Art. 21). You may also withdraw consent at any time without affecting prior processing. To exercise any right, email ilmokoo@koostory.net. You also have the right to lodge a complaint with a supervisory authority — in Germany: Berliner Beauftragte für Datenschutz und Informationsfreiheit (www.datenschutz-berlin.de).
6. Changes to This Policy
We may update this policy to reflect changes in our practices or applicable law. The date at the top of this page will be updated accordingly.