Privacy Policy

1. Data Controller

The data controller responsible for the processing of personal data on this website is:

For any questions or requests regarding the processing of personal data, you can contact the controller at the email address above.

2. Personal Data We Process

This website may process the following categories of personal data:

• technical navigation data, such as IP address, browser information, device information, date and time of access, and technical request data;
• email address provided voluntarily by the user for newsletter subscription;
• technical data related to newsletter subscription, confirmation, and unsubscription, where necessary for security, abuse prevention, and consent management.

This website does not intentionally collect special categories of personal data.

3. Purposes and Legal Bases of Processing

Personal data is processed for the following purposes.

a) Website operation and security

Technical data may be processed to ensure the proper operation of the website, maintain system security, prevent abuse, detect technical issues, and protect the website from unauthorized or harmful activity.

The legal basis for this processing is the legitimate interest of the controller in maintaining a secure and functional website.

b) Newsletter subscription and management

If you subscribe to the newsletter, your email address will be processed to send updates, news, editorial content, and communications related to the Miki Arai project.

Newsletter subscription uses a double opt-in process. After submitting your email address, you will receive a confirmation email. Your subscription becomes active only after you click the confirmation link.

The legal basis for this processing is your consent.

You may withdraw your consent at any time by using the unsubscribe link included in each newsletter email or by contacting the controller at privacy@miki-arai.com.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

c) Abuse prevention

Some technical data may be processed to prevent fraudulent subscriptions, automated form submissions, spam, misuse of the newsletter form, or other harmful activity.

The legal basis for this processing is the legitimate interest of the controller in protecting the website, the newsletter service, and users from abuse.

4. Newsletter

To subscribe to the newsletter, you must provide a valid email address.

The newsletter is managed through the website's own back-end system. Email delivery is handled through Zoho Mail.

The newsletter uses a double opt-in process. If you do not confirm your subscription, your email address will not be used to send newsletters.

Each newsletter email contains an unsubscribe link. You can unsubscribe at any time.

5. Data Retention

Personal data is kept only for as long as necessary for the purposes for which it was collected.

In particular:

• email addresses awaiting subscription confirmation are deleted after 7 days if the subscription is not confirmed;
• email addresses of active newsletter subscribers are kept for as long as the newsletter service remains active or until the user withdraws consent;
• after unsubscription, the email address is retained for a technical period of up to 30 days only to complete the unsubscription process, prevent accidental unwanted emails, and ensure proper system handling; after this period, the email address is physically deleted;
• technical security logs, if any, are retained only for the time necessary to ensure website security and maintenance.

6. Recipients and Service Providers

Personal data may be processed by technical service providers necessary for the operation of the website and newsletter service, including:

• hosting and cloud infrastructure providers;
• database service providers;
• email delivery providers, including Zoho Mail;
• technical providers used for website security, maintenance, and operation.

Personal data is not sold or shared with third parties for their own marketing purposes.

7. International Data Transfers

Some technical service providers may process data outside the European Economic Area.

Where this occurs, data transfers are carried out in accordance with the safeguards required by the GDPR, such as adequacy decisions, standard contractual clauses, or other legally recognized transfer mechanisms.

8. Cookies and Tracking Technologies

This website currently uses only technical cookies or technologies strictly necessary for the operation of the website, where applicable.

This website does not currently use profiling cookies.

If analytics tools, tracking technologies, profiling systems, or third-party services involving non-technical cookies are introduced in the future, this Privacy Policy will be updated and, where required, user consent will be requested.

9. Social Media Links

This website may contain a link to the Miki Arai TikTok profile.

This is a simple external link. The website does not embed TikTok plugins, widgets, pixels, or tracking scripts. Data may be processed by TikTok only if you choose to click the link and visit the external platform.

For information about how TikTok processes personal data, please refer to TikTok's own Privacy Policy.

10. Your Rights

Under the GDPR, you may have the following rights regarding your personal data:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object;
• the right to withdraw consent at any time, where processing is based on consent.

To exercise your rights, you can contact the controller at:

privacy@miki-arai.com

11. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

For users in Italy, the competent authority is the Garante per la protezione dei dati personali.

12. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal, technical, or organizational requirements.

The updated version will be published on this page with a new "Last updated" date.