Last updated: November 13, 2025

1. Controller Information

This website is operated by:

Kukan UG (haftungsbeschränkt)
Brunnenstrasse 41
10115 Berlin
Germany
Email: hello@kukan.ai

2. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or smartphone) when you visit a website. Cookies allow the website to recognize your device and remember certain information about your preferences or past actions.

Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain on your device for a specified period).

3. Legal Basis for Cookie Usage

We process data via cookies based on the following legal grounds:

• Strictly necessary cookies: Art. 6(1)(f) GDPR (legitimate interest in ensuring website functionality and security) and § 25(2) Nr. 2 TTDSG (technical necessity)

• Analytics cookies: Art. 6(1)(a) GDPR (consent) and § 25(1) TTDSG (consent requirement for storage and access to device information)

4. Types of Cookies We Use

4.1 Strictly Necessary Cookies

These cookies are essential for the website to function properly and cannot be disabled. They do not require your consent under German and EU law.

Cookie Name Provider Purpose Duration Category ss_cvr Squarespace Session management and security (CSRF protection) Session Strictly Necessary ss_cvt Squarespace Tracks session state for visitor identification Session Strictly Necessary crumb Squarespace Security token to prevent cross-site request forgery (CSRF) attacks Session Strictly Necessary SS_MID Squarespace Unique session identifier for site functionality 2 years Strictly Necessary cookie_consent Squarespace Stores your cookie consent preferences 1 year Strictly Necessary

4.2 Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. These cookies are only set after you have given your explicit consent.

Cookie Name Provider Purpose Duration Category _ga Google Analytics Distinguishes unique users and generates statistical data about website usage 2 years Analytics ga* Google Analytics Used by Google Analytics 4 to persist session state 2 years Analytics _gid Google Analytics Distinguishes users for 24 hours 24 hours Analytics

Google Analytics 4: We use Google Analytics 4, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) or Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for users in the EU.

Google Analytics uses cookies to analyze your use of the website. The information generated includes:

• Pages visited

• Time spent on the website

• Referring website

• Browser type and version

• Operating system

• IP address (anonymized)

IP Anonymization: We have activated IP anonymization. Your IP address will be shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before transmission to the USA.

Data Transfer to Third Countries: Data may be transferred to Google servers in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection for transfers to the USA.

Data Processing Agreement: We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR.

Opt-out: You can prevent Google Analytics from collecting your data by:

1. Withdrawing your consent via our cookie banner

2. Installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

For more information about Google Analytics' privacy practices, visit: https://policies.google.com/privacy

5. Why Do We Use Cookies?

We use cookies for the following purposes:

• Security and fraud protection: To detect and prevent cyberattacks and unauthorized access

• Service provision: To enable core website functionality and remember your preferences

• Performance monitoring: To analyze website performance and identify technical issues

• User experience improvement: To understand how visitors use our website and optimize accordingly

6. Your Consent and Choices

6.1 Cookie Banner

When you first visit our website, a cookie banner will appear asking for your consent to use analytics cookies. You have the following options:

• Accept all cookies: All cookies (necessary and analytics) will be set

• Reject non-essential cookies: Only strictly necessary cookies will be set

• Cookie settings: You can customize your preferences by cookie category

Analytics cookies will only be set after you have given your explicit consent by clicking "Accept" in the cookie banner.

6.2 Withdrawing Consent

You can withdraw your consent at any time with future effect by:

1. Clicking on the cookie settings link in our website footer

2. Adjusting your browser settings to block or delete cookies

3. Using the Google Analytics opt-out tool mentioned above

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

6.3 Browser Settings

You can manage or delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

Instructions for managing cookies in common browsers:

• Google Chrome: Cookie settings in Chrome

• Mozilla Firefox: Cookie settings in Firefox

• Safari (macOS): Cookie settings in Safari

• Safari (iOS): Cookie settings in Safari iOS

• Microsoft Edge: Cookie settings in Edge

• Android browsers: Settings > Privacy > Clear browsing data

For more general information about cookies, visit:

• www.aboutcookies.org

• www.allaboutcookies.org

• www.youronlinechoices.eu (for EU users)

Important: Deleting or blocking cookies may result in certain features of our website being unavailable or not functioning properly.

7. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about your personal data we process

• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate personal data

• Right to erasure (Art. 17 GDPR): You can request deletion of your personal data under certain conditions

• Right to restriction of processing (Art. 18 GDPR): You can request limitation of data processing

• Right to data portability (Art. 20 GDPR): You can receive your data in a structured, commonly used format

• Right to object (Art. 21 GDPR): You can object to processing based on legitimate interests

• Right to withdraw consent (Art. 7(3) GDPR): You can withdraw consent for cookie usage at any time

To exercise any of these rights, please contact us at: hello@kukan.ai

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Responsible supervisory authority for Berlin:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de

8. Data Retention

• Strictly necessary cookies: Deleted when you close your browser (session cookies) or after the specified duration (persistent cookies)

• Analytics cookies: Automatically deleted after 2 years (or 24 hours for _gid)

• Google Analytics data: We have configured Google Analytics to automatically delete user data after 14 months

9. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We encourage you to review this page periodically for the latest information.

The "Last updated" date at the top of this policy indicates when it was last revised. Material changes will be communicated through a notice on our website.

10. Contact Us

If you have questions about this Cookie Policy or our use of cookies, please contact us:

Kukan UG (haftungsbeschränkt)
Email: hello@kukan.ai
Address: Brunnenstrasse 41, 10115 Berlin, Germany

For your main Privacy Policy, please ensure you also address:

• How you collect, use, and store personal data beyond cookies

• User rights in detail

• Data security measures

• Third-party services beyond Google Analytics

• Contact forms, newsletter subscriptions, etc.