Privacy Policy

This privacy policy explains how personal data is collected, used, and protected when you visit this website, the digital exhibition The Unwritten Future. It follows the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).

The controller responsible for data processing on this website is:

Silke SonnenbergRothenbaumchaussee 7720148 HamburgGermanyEmail: silke@lecaid.com

When you visit this website, personal data may be processed. Personal data is any information that can identify you as an individual, such as your IP address. Data is processed only to the extent necessary to operate the website and to respond to your direct inquiries. The legal basis is generally Art. 6 (1) (f) GDPR (legitimate interest in operating a functioning, secure website) and Art. 6 (1) (b) GDPR for pre-contractual or contractual communication.

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you access the site, Vercel processes technical data necessary to deliver the content, including:

• IP address
• Date and time of access
• Browser type and operating system
• Referrer URL
• Volume of data transferred

This data is processed on the legal basis of Art. 6 (1) (f) GDPR (legitimate interest in providing a secure, stable website). A Data Processing Agreement according to Art. 28 GDPR is in place with Vercel.

Vercel is based in the United States. Data transfers to the USA are covered by Vercel's certification under the EU-U.S. Data Privacy Framework (DPF), which provides an adequate level of data protection according to Art. 45 GDPR.

Vercel's privacy notice

This website uses Vercel Web Analytics, a privacy-focused service provided by Vercel Inc. It is cookieless and does not collect or store any personally identifiable information. It collects the following anonymized data for aggregated traffic statistics:

• Page views
• Country (derived from IP address; the IP itself is not stored)
• Browser type and operating system
• Referrer URL
• Device type

Visitors are identified using a daily-rotated hash that is automatically discarded after 24 hours. No cross-site or long-term tracking takes place. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in understanding aggregated website usage).

Web Analytics Privacy

On each artwork's page you can click one of a few set questions. The answers were written in advance by the artist and come from this website itself. No AI service is involved, nothing you type or say is used, and your choice is not stored.

The answer is read aloud by your browser's own speech function. Depending on your browser and the voice it uses, the browser's maker may process the text of the answer.

Below the artworks you can place a dot on a line from Uneasy to Excited. When you add your perspective, two things are sent and stored: where you placed the dot (a number from 0 to 100) and a random id that your browser makes itself, so that your perspective counts once and moves when you change it. Nothing else is stored with it: no name, no IP address, no time. The id cannot be traced back to you. The stored perspectives are only used to show, in ten bars, where visitors stand.

To stop the line being filled by script, the server counts how often each IP address adds a perspective for 10 minutes, in memory only, and then forgets it.

The perspectives are stored with Upstash, Inc. (USA), which provides the database on my behalf through Vercel, in its region Frankfurt, Germany. Upstash's Data Processing Agreement according to Art. 28 GDPR is part of its terms and includes the EU Standard Contractual Clauses for any transfer to the USA (Art. 46 GDPR). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in showing visitors where others stand). The perspectives are kept while the exhibition is online and deleted when it closes.

Upstash's Data Processing AgreementUpstash compliance

Three things are kept in your browser's local storage, so that the exhibition remembers them on your next visit:

• Whether you switched the 3D space on or off
• Where you placed yourself on the line, so you see your own result again
• The random id described above

The first stays on your device and is never sent. The other two are sent only when you add your perspective, as described above. You can delete all three by clearing this site's data in your browser. The legal basis is § 25 (2) No. 2 TDDDG.

All fonts used on this website are hosted with the website itself. No data is transmitted to external font providers such as Google Fonts or Adobe Fonts.

All images and videos are also hosted with the website. No third-party media services such as YouTube or Vimeo are embedded.

The Reality Signals link to their sources on other websites. These are simple links: no data is transmitted to those websites when you visit this one. Only when you click a link and visit the other website does it begin to process data according to its own privacy policy.

"Invite a friend" opens your own email app or your device's share sheet with the invitation filled in. What you send, and to whom, goes from your device and never passes through this website. "Copy link" copies the link to your clipboard and sends nothing.

If you contact me by email at silke@lecaid.com, the information you send, including your email address and the content of your message, will be processed to respond to your inquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual communication) or Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries).

Your message is stored only for as long as needed to handle your request and any related follow-up. After that, the data is deleted, unless there is a legal obligation to retain it.

This website does not set any cookies, neither for tracking nor otherwise. No consent banner is required.

This website uses SSL/TLS encryption to protect the transmission of content. You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time, with effect for the future, where processing is based on consent (Art. 7 (3) GDPR)

To exercise any of these rights, please contact me at silke@lecaid.com.

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR. The competent authority for this website is:

Der Hamburgische Beauftragte für Datenschutz und InformationsfreiheitLudwig-Erhard-Straße 22, 7th floor20459 HamburgGermany

datenschutz-hamburg.de

This privacy policy may be updated to reflect changes in legal requirements or in the functionality of the website. The current version always applies.