Legal

Privacy Policy

Draft for legal review. This document is a working draft and not legal advice. It must be reviewed and finalised by qualified counsel before going live.

1. Controller

The controller responsible for data processing on this website is:

Koh Labs LLC
30 N Gould St, Ste N
Sheridan, WY 82801, US
Email: aaron@ninja.partners

2. Scope & legal framework

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and, where applicable, the German Digital Services Act (DDG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). Storing or reading non-essential information on your device requires your prior consent.

3. Hosting & server logs

This website is hosted by Vercel Inc. When you access the site, technical data (e.g. IP address, browser type, time of request) is processed to deliver the site securely. Legal basis: our legitimate interest in operating a secure and stable website (Art. 6(1)(f) GDPR).

4. Cookies & consent

We use strictly necessary cookies to operate the site and to remember your cookie choice. Non-essential cookies and similar technologies (analytics, marketing) are only set after you give consent via our cookie banner. Consent is voluntary and can be withdrawn at any time with effect for the future via .

Legal basis for consent-based processing: Art. 6(1)(a) GDPR and § 25(1) TDDDG.

5. Google Analytics 4

With your consent, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). GA4 uses cookies and similar identifiers to analyse how visitors use the site. IP addresses are not stored in raw form by GA4. We operate Google Consent Mode v2: no analytics cookies are set until you consent.

Recipient: Google Ireland Limited / Google LLC.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
Retention: user- and event-level data is retained for up to 14 months.
Third-country transfer: data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection.

6. Marketing tools (optional)

If activated and only with your consent, we may use advertising and remarketing tools (e.g. LinkedIn Insight Tag, Meta Pixel, Google Ads) to measure campaign performance. These are not loaded without your consent. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

7. Contact by email

If you contact us by email, the data you provide will be processed to handle your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual / contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

8. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority.

9. Changes to this policy

We may update this Privacy Policy to reflect changes to our processing or legal requirements. The current version applies.