1. Data controller
Jean Robert (operating under the artist name Byse), Byse Workshop, Berlin, Germany. Contact: contact@byse.art.
2. Hosting on Cloudflare Pages
This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access pages, technically required data (IP address, date and time, requested page, user agent) is processed briefly for the delivery of content and the security of the infrastructure.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure and stable provision of the website). A data processing agreement is in place with Cloudflare; data transfer to the USA takes place on the basis of the EU Standard Contractual Clauses.
3. Contact form (Formbold)
On /en/contact/ and on each work detail page you will find a form whose submissions are routed through the third-party service Formbold. When you submit it, your inputs – name, email, phone (optional), subject, message, plus any project context – are transmitted over HTTPS directly from your browser to https://formbold.com/. Formbold forwards the message to our inbox.
Legal basis: Art. 6 (1) (b) GDPR (initiation of a contract) and (f) (response to general inquiries). A data processing agreement (DPA) under Art. 28 GDPR is in place with Formbold.
Because the provider processes data partly outside the EU, any such transfer relies on the EU Standard Contractual Clauses (Art. 46 GDPR). The data is used solely for delivering and handling your inquiry and is deleted from our inbox once the inquiry is closed – at the latest six months after the final exchange, unless statutory retention periods apply.
More on Formbold: https://formbold.com/privacy-policy
4. Web fonts (Google Fonts)
We currently embed web fonts via the Google Fonts API (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you load a page, your IP address is transmitted to Google so that the fonts can be delivered.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a consistent typographic presentation). Fonts are cached in your browser. A migration to self-hosted fonts is planned; until then the processing described here applies.
More on Google Fonts: https://policies.google.com/privacy
5. CMS area (/admin/, Sveltia CMS)
The /admin/ area is blocked from search engines and is reserved for editorial users. When logging in, a personal access token (GitHub Personal Access Token) is stored locally in the editor's browser; it is not transmitted to our infrastructure. Content is stored directly in our version control system (GitHub, Inc., USA).
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure editorial maintenance of the website).
6. Cookies
This website does not set tracking cookies or cookies for advertising purposes. If technical cookies are used (e.g. CSRF protection on a form), this is done on the basis of § 25 (2) (2) TTDSG and Art. 6 (1) (f) GDPR as strictly necessary functionality.
7. Analytics / tracking
The website currently uses no web analytics tools. Should a privacy-friendly analytics tool be deployed in the future (e.g. Cloudflare Web Analytics, Plausible), this policy will be updated accordingly.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR).
An informal email to contact@byse.art is enough to exercise these rights.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information (https://www.datenschutz-berlin.de).
9. Updates to this policy
We reserve the right to update this policy when the legal situation or the services used change. The version published on this page at any given time prevails.