Privacy policy

1. Controller

Who is responsible?

YepaYepa GmbH
Merianstraße 30
79104 Freiburg im Breisgau
Germany
Phone: +49 174 199 6295
Email: info@kanto-kola.de

2. Hosting & server log files

Hosting

This website is hosted by checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany. When the website is accessed, technically necessary access data is processed by the web server. This may include, in particular, IP address, date and time of access, requested file, amount of data transferred, browser type, operating system, referrer URL and the requesting provider.

The processing is carried out to provide the website and ensure its stability and security on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the secure and error-free operation of this website.

3. Waitlist / email signup

Waitlist for the product launch

On our website, you can sign up for our launch waitlist. Registration takes place using a double opt-in process. After entering your email address, you first receive a neutral confirmation email. Only after clicking the confirmation link will the email address be finally added to the waitlist.

We process the following data:

• Email address
• Time of signup
• IP address at signup
• Time of confirmation
• IP address at confirmation
• technical browser information, where required for security and proof of signup
• selected signup language, so confirmation and launch information can be sent in the appropriate language

Unconfirmed signups are stored temporarily and deleted after 7 days at the latest if the confirmation link is not clicked.

We use the data only for the KANTŌ KOLA updates described at sign-up. We do not send a regular newsletter.

The data is stored in access-protected files on our web server (checkdomain GmbH, Germany) and is not passed on to third parties for their own purposes. We currently do not use an external newsletter service. The confirmation and notification emails are sent using the technical email infrastructure of our hosting or mail provider.

Temporary storage of the signup and sending of the confirmation email take place in order to technically carry out the double opt-in process and prevent misuse. Final inclusion in the waitlist and our email notifications are based on your consent pursuant to Art. 6(1)(a) GDPR. We use them to inform you occasionally about the launch of KANTŌ KOLA, tastings and where to buy it, and new editions. For sign-ups before 14 October 2026, the consent given at the time applies: one notification about the launch. The signup and confirmation are additionally documented as proof of consent. You can unsubscribe and withdraw your consent at any time with effect for the future, for example by replying briefly to one of our emails or by emailing info@kanto-kola.de. We will then delete your data without delay.

We store confirmed waitlist data until you unsubscribe or withdraw your consent. We delete your data no later than 24 months after your signup is confirmed. Sign-ups made before 14 October 2026 are deleted after the launch notification, and no later than 12 months after sign-up.

To protect against automated mass sign-ups, the form contains a field that is invisible to people and does not collect any personal data. We also limit the number of sign-up attempts: for this, we store a hash of your IP address for up to 10 minutes and a hash of the submitted email address for up to one hour to limit repeated requests. The legal basis is our legitimate interest in a secure sign-up process pursuant to Art. 6(1)(f) GDPR.

4. Contact by email

Email contact

If you contact us by email, we process the data you send to us in order to handle your request. Depending on the content of the request, the legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

5. Cookies, tracking & analytics

Plausible Analytics

This website uses no marketing pixels, no embedded social media feeds and no non-essential cookies.

For a simple, privacy-friendly evaluation of website usage, we use Plausible Analytics. Plausible Analytics is a cookie-free analytics tool. No cookies are set and no user profiles are created. The evaluation is anonymized or aggregated and serves only to better understand usage and technical performance of our website.

The provider is Plausible Insights OÜ. According to the provider, data is processed within the European Union and is not used for advertising profiles or cross-site tracking. Further information: plausible.io/privacy

The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in developing our website in a secure, user-friendly and technically meaningful way.

The analytics script is loaded from a Plausible server in the EU. Your IP address is processed in the process but not stored: together with the browser type, Plausible derives an identifier that changes daily and cannot be traced back to you. Only aggregated figures are evaluated, such as pages visited, referring page, campaign parameters in links (e.g. from a QR code), device type and country. In addition, we anonymously count individual events: clicks on the main button, waitlist requests and confirmed sign-ups, completion of the “One breath” moment, clicks on the link for restaurant and trade enquiries and, where applicable, clicks on the shop link of our distribution partner.

6. Language selection / local storage

Language selection

To store the selected language, we use your browser’s local storage function (localStorage). Only the selected language is stored. This information is not used for tracking or marketing purposes and is not transferred to third parties.

You can remove the stored language selection at any time via your browser settings or by deleting website data.

7. Social media links

Links to social media

This website contains simple links to KANTŌ KOLA profiles on Instagram, TikTok and Facebook. Merely visiting this website does not transfer any data to these providers. Only when you click one of these links do you leave our website; the privacy notices of the respective provider apply to data processing there.

8. Storage period

How long do we store data?

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations.

9. Your rights

Data subject rights

Under the GDPR, you have in particular the right of access, rectification, deletion, restriction of processing, data portability and objection to certain processing. You also have the right to lodge a complaint with a data protection supervisory authority.

Withdrawal: You can withdraw any consent you have given at any time with effect for the future, e.g. by email to info@kanto-kola.de.

Right to object under Art. 21 GDPR: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

10. Changes

Updates

This privacy policy may be adapted if the website or the services used change.