Loading...
Loading...
Effective: August 2, 2026
John Baptist Kusiima
Unionstraße 10
59557 Lippstadt, Germany
Email: hello@kusiima.com
I operate kusiima.com as an individual freelancer offering services remotely and online. Further provider information is available in the Imprint.
The website is hosted by Vercel. When pages are requested, technical connection data such as IP address, request time, requested URL, referrer, browser and device information may be processed to deliver the site, maintain security and diagnose faults. Vercel is configured to use European infrastructure where available. The legal basis is Article 6(1)(f) GDPR: my legitimate interests in providing a secure, reliable website.
Abuse prevention uses Upstash Redis in a European region. Short-lived IP-based rate-limit identifiers are processed for the configured window—15 minutes for contact requests and 30 minutes for newsletter requests—under Article 6(1)(f) GDPR.
I use Vercel Web Analytics and Speed Insights to understand aggregated traffic and website performance. In the default configuration used here, these services do not set analytics cookies or create cross-site profiles. Web Analytics processes information such as page, referrer, approximate location, browser, operating system and device category; its daily visitor hash expires after 24 hours. Speed Insights processes web performance measurements. The legal basis is Article 6(1)(f) GDPR: improving the site and detecting technical problems.
If you use the contact form, I process your name, email address, subject, message and, if you voluntarily provide it, company or organization. The form also uses an IP-based rate limit and Cloudflare Turnstile to prevent automated abuse. The IP address and Turnstile token are sent to Cloudflare for verification. Inquiry content is stored in Supabase in Europe and sent through Resend; replies are handled through Resend and my Zoho Mail account, both configured for European processing.
Processing is based on Article 6(1)(b) GDPR when needed to answer a request or take steps before a freelance engagement, and Article 6(1)(f) GDPR for other correspondence, abuse prevention and maintaining communication records. Required fields are necessary to reply; without them the form cannot be submitted. General inquiries that do not lead to an engagement are normally deleted 12 months after the conversation ends. Records connected with an engagement are retained for the applicable contractual, tax and statutory periods.
Free consultations are provided online. The booking calendar is supplied by Cal.com using its European service at cal.eu. It loads only after you choose to load it. Cal.com may process connection data and the booking details you enter. Processing is based on Article 6(1)(b) GDPR to arrange the consultation. You may instead request a time by email without loading the calendar. Booking data is retained in my Cal.com account only as long as needed to organize and document the consultation, subject to applicable legal obligations. See the Cal.com Privacy Policy.
Insight pages increment aggregate read and reaction counters. IP addresses are used only for short-term rate limiting and are not stored with those counters. This processing is based on Article 6(1)(f) GDPR: measuring interest and preventing artificial activity.
The QR Code Generator and Color Wheel process entered values in your browser. Tool inputs are not transmitted to or stored on my servers. A necessary browser preference may be stored locally to remember the selected site theme. This preference is used only to provide the interface setting you requested.
I do not sell or rent personal data. I use service providers for European-region hosting, database storage, email delivery, abuse prevention, aggregated website analytics, and optional appointment booking. These providers are configured to process and store data in Europe where that option is available.
Some providers or their subprocessors may process limited data outside the European Economic Area. Where this occurs, the transfer is based on an applicable adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Subject to the GDPR's conditions, you may request access, correction, deletion, restriction, and portability of your personal data. You may object to processing based on Article 6(1)(f) GDPR and withdraw consent at any time. You may also lodge a complaint with a supervisory authority. The authority responsible for my location is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany. Contact me at hello@kusiima.com to exercise a right.
I update this notice when the website or its processing changes. The effective date above identifies the current notice. Material changes apply prospectively and, where required, will be communicated or submitted for renewed consent.