Kenichi KawabataClassical Music Production

Legal

Privacy Policy

Privacy policy in accordance with GDPR

1. Data Controller

Kenichi Kawabata, Carinagasse 21, 6800 Feldkirch, Vorarlberg, Austria. E-mail: [email protected]. This person is the controller for the processing of personal data within the meaning of the GDPR.

2. Server Logs

When you access this website, the web server automatically records IP address, access time, requested URL, HTTP status, referrer and user agent in log files. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation). Log files are deleted automatically after 30 days at the latest and are not combined with other data.

3. Cookies and Local Storage

This website uses only strictly necessary cookies and local storage entries. No analytics, tracking, or profiling takes place. Legal basis: § 165(3) TKG 2021 (technical necessity for the explicitly requested service). Details: • Cookie "kk-locale" — stores the selected language (de / en / ja). Duration: 1 year. SameSite=Lax. • localStorage "tallyRoleV5" — used exclusively on the internal page /tally to remember the last selected crew role (camera operator, sound engineer, director) during a recording or live session. Persistent in the browser, can be deleted any time via browser settings. • localStorage audio player settings — volume and last playback position.

4. Fonts

The fonts in use (Inter, Cormorant Garamond, Noto Sans JP) are served directly from this server. No connection is established to Google Fonts or any other third-party font provider.

5. Embedded Content: Sanity CDN (Images)

Images are delivered through the content delivery network of Sanity (sanity.io, provider: Sanity Inc., USA). Loading an image transmits the visitor’s IP address to Sanity. Legal basis: Art. 6(1)(f) GDPR. More information: https://www.sanity.io/legal/privacy

6. Embedded Content: YouTube (on click only)

Videos are embedded using YouTube’s privacy-enhanced mode (youtube-nocookie.com, provider: Google Ireland Limited). No connection to YouTube is established before you click a video. Only when a video is actively played does the browser load the YouTube player and transmit your IP address and device information to Google. Thumbnails are loaded from img.youtube.com. More information: https://policies.google.com/privacy

7. Contact by Email

If you contact us by email, the transmitted information is used solely to handle your request. Legal basis: Art. 6(1)(b) and (f) GDPR. Emails are retained for as long as necessary to handle the request and to comply with statutory retention obligations.

7a. Audio Streaming for Recording Sessions (LiveKit)

For remote recording sessions, a self-hosted LiveKit instance is operated on the same Hetzner server in Germany (used by the internal pages /api/* and the Studio live area). During a session, participants' audio/video streams and technical connection metadata (IP address, browser, session identifier) are processed in real time. Streams are not stored persistently; only recordings explicitly requested by the client (e.g., artists of a recording session) are stored locally. Legal basis: Art. 6(1)(b) GDPR (contract performance) or (f) (legitimate interest in a smooth recording session). No data transfer to LiveKit Inc. (USA) takes place; all processing occurs on the own server.

7b. Tally System (Internal Crew Control)

The page /tally is an internal tool for recording/concert crews to synchronize camera and cue status in real time during live recordings. On access, the last selected role (stored in localStorage as "tallyRoleV5") and the current cue status are shared with other crew members via a WebSocket connection, exclusively on the own server. No personal data is retained persistently; closing the browser ends the connection. Legal basis: Art. 6(1)(f) GDPR.

7c. Sanity Studio (CMS Backend, /studio)

The URL /studio leads to the backend area of the Sanity content management system. Access requires login with a Sanity account and is intended exclusively for authorized editors of the media owner. During login, authentication data is transmitted to Sanity Inc. (USA). Legal basis: Art. 6(1)(f) GDPR. A data processing agreement is in place with Sanity.

8. Hosting (Hetzner)

This website is operated on a dedicated server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), located in Nuremberg. Data processing takes place exclusively in data centers within Germany. A data processing agreement under Art. 28 GDPR is in place with Hetzner. Hetzner privacy policy: https://www.hetzner.com/legal/privacy

8a. Data Security (SSL / TLS Encryption)

For security reasons and to protect the transmission of confidential content (e.g., inquiries sent to the media owner), this website uses SSL/TLS encryption. You can identify an encrypted connection by the change of the browser address bar from "http://" to "https://" and by the lock symbol in the browser bar. When SSL/TLS encryption is active, the data you transmit cannot be read by third parties. Legal basis: Art. 32 GDPR (Security of processing).

9. Content Delivery Network (Cloudflare)

For attack protection and content acceleration, this website uses Cloudflare provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you access this site, your IP address is temporarily transmitted to Cloudflare for request analysis. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and availability). Cloudflare processes data on the basis of Standard Contractual Clauses (Art. 46 GDPR) and is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023, Art. 45 GDPR). A data processing agreement is in place with Cloudflare. More information: https://www.cloudflare.com/privacypolicy/

10. Transfers to Third Countries

Through the third-party services mentioned above (Sanity Inc., USA; Cloudflare Inc., USA; Google Ireland Ltd. for YouTube), personal data is transferred to the United States. Such transfer is based on the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023, Art. 45 GDPR) and additionally on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

11. Your Rights

You have the right to: • access (Art. 15 GDPR) • rectification (Art. 16 GDPR) • erasure (Art. 17 GDPR) • restriction of processing (Art. 18 GDPR) • data portability (Art. 20 GDPR) • object to processing (Art. 21 GDPR) • withdraw consent with effect for the future (Art. 7(3) GDPR) An informal notification to the contact address listed in Section 1 is sufficient to exercise these rights.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Austria is: Österreichische Datenschutzbehörde Barichgasse 40-42, 1030 Vienna Phone: +43 1 52 152-0 Email: [email protected] Web: https://www.dsb.gv.at

13. No Automated Decision-Making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

14. Changes

This privacy policy is updated in case of legal or technical changes. The version published on this website at the time of your visit applies.

15. Scope on Subdomains

This privacy policy applies in addition to the main domain kenichi-kawabata.com to all subdomains operated under kenichi-kawabata.com, in particular: • remote.kenichi-kawabata.com (protected remote access for recording and editing systems) • reaper.kenichi-kawabata.com (redirect to remote access) • tally.kenichi-kawabata.com (Tally system for live recording crews) • german.kenichi-kawabata.com (internal B2 German learning dashboard) • live.kenichi-kawabata.com (live streaming infrastructure, SRS server) • livekit.kenichi-kawabata.com (WebRTC / Talkback infrastructure) • radio.kenichi-kawabata.com (internet radio) • uptime.kenichi-kawabata.com (Uptime-Kuma monitoring) This privacy policy is accessible via a direct link from every subdomain. Controller and data processing practice are identical to the main domain. The person listed in Section 1 is the controller for all subdomains.

16. Live Streaming Server (SRS) and Recording Infrastructure

For the transmission of live recordings, a self-hosted Simple Realtime Server (SRS, https://github.com/ossrs/srs) is operated on the same Hetzner server in Germany (live.kenichi-kawabata.com, radio.kenichi-kawabata.com). During a transmission, participants' audio/video streams and technical connection metadata (IP address, browser identifier, stream key) are processed in real time. Streams are only processed for the duration of the live transmission and not stored persistently unless the client has explicitly requested a recording. Legal basis: Art. 6(1)(b) GDPR (contract performance) or (f) (legitimate interest). No data transfer to third parties takes place; all processing occurs on the own server in Germany.

Last updated: 2026-05-13