Privacy Policy
We take the protection of your personal data seriously and process it exclusively on the basis of the statutory provisions (GDPR). In this policy we inform you about the nature, scope and purpose of the processing of personal data on this website.
1. Controller
The controller for data processing on this website is:
Kentaro Asakura · Japan Privat
2135 Kamiyamaguchi, Tokorozawa-shi, Saitama 359-1153, Japan
Contact: via our contact form.
2. Hosting (Cloudflare)
This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) and delivered via their global content delivery network (CDN). When you open the pages, Cloudflare processes technically necessary connection data (including IP address, time of the request, file requested) in order to deliver the content securely and reliably and to fend off attacks. The legal basis is our legitimate interest in the secure and efficient operation of the website (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition.
3. Server log files
When you visit the website, information transmitted by your browser is automatically processed in what are known as server log files: browser type and version, operating system used, referrer URL, time of the request and the (truncated) IP address. This data serves technical delivery, stability and security, and is not combined with other data sources. The legal basis is Art. 6 (1) (f) GDPR.
4. Consent and cookies
Services that require consent (in particular Google Analytics 4) are only loaded after you have actively agreed via our cookie notice (opt-in). Without your consent, no cookies are set and no data is processed for services requiring consent. We store your decision locally in your browser (localStorage) for a maximum of twelve months so that the notice is not shown again. You can withdraw your consent at any time with effect for the future via the link “Change cookie settings” at the foot of the page. The legal basis for processing that requires consent is Art. 6 (1) (a) GDPR.
5. Google Analytics 4
Following your consent, we use Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that make it possible to analyse your use of the website. The IP address is processed in truncated form (IP anonymisation enabled). Among other things, we record which pages are opened and whether the contact form has been submitted. This processing takes place exclusively on the basis of your consent (Art. 6 (1) (a) GDPR), which you may withdraw at any time. Transfer to the USA (Google LLC) is possible; Google is certified under the EU-US Data Privacy Framework, and standard contractual clauses apply in addition. The retention period for the data collected in Google Analytics follows the settings in the Google Analytics account (as a rule no longer than 14 months); after that the data is deleted automatically.
6. Contact form
If you send us an enquiry via the contact form, we process the data you provide in order to deal with your enquiry. Name and e-mail address are required; details of your travel period, number of travellers, budget range, interests and your message are optional. Technically, the message is sent via the service provider Formspree (Wildbit, LLC, USA), which is certified under the EU-US Data Privacy Framework; the details then reach us by e-mail. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract) as well as our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). We process this data solely in order to deal with your enquiry and delete it as soon as it is no longer required and no statutory retention obligations prevent deletion.
7. Fonts and image delivery
The fonts used are loaded locally from our server (self-hosting). No connection to third-party servers is established in the process, and no personal data is transmitted to Google. Images are optimised and delivered via Cloudflare’s image delivery; the information under point 2 applies here as well.
8. Recipients and transfer to third countries
Recipients of personal data are the service providers named above (Cloudflare, Google, Formspree) within the scope of the purposes described. Where data is transferred to the USA in the process, the transfer is based on certification under the EU-US Data Privacy Framework and, in addition, on standard contractual clauses pursuant to Art. 46 GDPR. You may request a copy of these safeguards from us. No further disclosure to third parties takes place.
9. Storage period
We store personal data only for as long as is necessary for the respective purposes or as statutory retention periods require. Enquiries submitted via the contact form are deleted as soon as they have been dealt with conclusively and no retention obligations apply.
10. Your rights
Under the statutory provisions you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object (Art. 21). You may withdraw consent you have given at any time with effect for the future (Art. 7 (3) GDPR). An informal message via our contact form is sufficient to exercise your rights.
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. You may contact the supervisory authority responsible for your place of residence.
Last updated: August 2026