Last updated: July 2026
This Privacy Policy explains how Kumimatsushita.com, operating under the business name Inlumino, collects, uses, and protects personal data collected through this website (kumimatsushita.com), in accordance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG).
1. Data Controller
Kumi Matsushita / Inlumino
Westerstraat 10 A7043,
Rotterdam, The Netherlands
BTW-ID: NL004690673B65
Email: hello@kumimatsushita.com
2. What Personal Data We Collect
Via the contact form (HubSpot):
- Name
- Email address
- Message content
Automatically via website usage:
- IP address (anonymised)
- Browser type and version
- Pages visited and time spent
- Device and operating system information
3. Purposes and Legal Basis for Processing
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to enquiries submitted via the contact form | Name, email, message | Legitimate interest (Art. 6(1)(f) GDPR) |
| Website analytics and performance measurement | Anonymised IP, browsing behaviour | Consent (Art. 6(1)(a) GDPR) |
| Spam and bot prevention via reCAPTCHA | Browser data, interaction behaviour | Legitimate interest (Art. 6(1)(f) GDPR) |
| Website hosting and infrastructure | IP address, server logs | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Third-Party Services
This website uses the following third-party services, which may process personal data on our behalf:
Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Purpose: Website traffic analysis.
Data transferred: Anonymised IP address, browsing behaviour, device information.
IP anonymisation is enabled by default in GA4. Data is not used for advertising purposes.
Google Privacy Policy
Google reCAPTCHA
Provider: Google Ireland Limited.
Purpose: Protection against spam and automated bot submissions in the contact form.
Data transferred: Browser and interaction data sent to Google’s servers for verification.
Google Privacy Policy
Hostinger
Provider: Hostinger International Ltd, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.
Purpose: Website hosting and infrastructure.
Data transferred: Server logs including IP addresses, processed within the EU/EEA.
Hostinger Privacy Policy
Hubspot
Provider: HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA.
Purpose: Contact form and Taste Memories contribution form functionality; storage of form submissions.
Data transferred: Form submissions (name, email, message or contribution content), processed on HubSpot’s servers. Where data is processed outside the EEA, appropriate safeguards under the GDPR are applied, including the EU–US Data Privacy Framework and Standard Contractual Clauses.
HubSpot Privacy Policy
Complianz
Provider: Really Simple Plugins, The Netherlands.
Purpose: Cookie consent management.
Data transferred: Consent records stored locally on this website’s server. No data is sent to external servers.
Complianz Privacy Policy
5. Data Retention
| Data | Retention period |
|---|---|
| Contact form enquiries | 2 years from date of receipt |
| Google Analytics data | 14 months (GA4 default setting) |
| Cookie consent records | 1 year |
| Server logs (Hostinger) | As per Hostinger’s data retention policy |
6. Your Rights
Under the GDPR, you have the following rights with respect to your personal data:
- Right of access — You may request a copy of the personal data we hold about you.
- Right to rectification — You may request correction of inaccurate or incomplete data.
- Right to erasure — You may request deletion of your personal data, subject to legal obligations.
- Right to restriction of processing — You may request that we limit how we use your data.
- Right to data portability — You may request your data in a structured, machine-readable format.
- Right to object — You may object to processing based on legitimate interests.
- Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact: hello@kumimatsushita.com. We will respond within one month.
7. Cookies
This website uses cookies. For detailed information about which cookies are used and how consent is managed, please refer to our Cookie Policy.
8. Complaints
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens (AP)
Website: www.autoriteitpersoonsgegevens.nl
Telephone: +31 (0)70 888 85 00
9. The Taste Memories Contribution Form
This section applies to personal data submitted through the Taste Memories contribution form. Taste Memories is a food memory archive operated by Kumi Matsushita and managed as a separate project; for data submitted through this form, the data controller is Kumi Matsushita, acting for the Taste Memories project. How contributions are used is described in the Contributor Terms.
What we collect: your food memory and your answers to the form questions; your name (optional — held for administration only, and never published unless you have chosen otherwise on the form); and your email address, if you agree to be contacted about your memory.
Purpose and legal basis: we process this data to receive, manage, and preserve your contribution as part of the Taste Memories project, on the basis of your consent (Art. 6(1)(a) GDPR), given through the form.
Service provider: form submissions are collected and stored using HubSpot (see section 4 for details).
Separation: data submitted to Taste Memories is kept separate from other data collected on this website. It is never used for the KumiMatsushita.com newsletter or added to any mailing list.
Retention: contributions are retained for as long as they continue to serve the archival purposes of the Taste Memories project, unless removal is requested or required by law.
Your rights: the rights described in section 6 apply equally to this data. To withdraw consent, contact hello@kumimatsushita.com; after withdrawal, no new use will be made of your contribution and it will be removed from the archive, though materials already exhibited or published cannot be retroactively affected.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.