Legal

Privacy

A house that sells discretion should practise it. This page says plainly what this website stores, why, and for how long.

Controller

[Name and address as in the imprint], info@theoeuvre.art.

No cookies, no third parties

This site sets no cookies and loads nothing from third-party servers. Fonts, styles and scripts are served from this domain. There is therefore no consent banner: nothing happens that would require your consent.

Server logs

Our web server records the usual technical data needed to deliver and defend the site (time, requested path, status, user agent, IP address). Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in operating a secure website.

Reach measurement

We count page views ourselves, without cookies and without storing your IP address. A visitor is identified by a hash of a secret, the date, your IP address and your browser identification. That hash changes every day and cannot be reversed; it cannot be linked to you across days or across other websites. We record the page, the referring site, campaign parameters from the link you followed, time on page and scroll depth. If your browser sends Do Not Track or a Global Privacy Control signal, nothing is recorded at all. Legal basis: Art. 6(1)(f) GDPR.

Asking for a viewing

If you use the form, we store the address, name, role and message you enter, plus the page you were on, the referring site, campaign parameters and the daily visitor hash described above. We send you one email to confirm that the address is yours (double opt-in). Only when you confirm does your request reach us, and only then is a contact record created in our customer relationship system, which runs on our own server in Germany. Legal basis: Art. 6(1)(b) GDPR for handling your request, and your consent under Art. 6(1)(a) GDPR for the confirmation email. If you never confirm, the entry is deleted after 30 days.

Email

Outgoing and incoming email for this domain is handled by MXroute LLC, United States, as our processor. Transfers are covered by the EU standard contractual clauses. Legal basis: Art. 6(1)(b) and (f) GDPR.

Hosting

This website runs on a server we rent from Hetzner Online GmbH, Gunzenhausen, Germany, and administer ourselves. DNS for this domain is operated by the same provider.

Retention

• Unconfirmed form entries: deleted after 30 days.
• Confirmed requests and the resulting contact record: kept until you ask us to delete them, or until the enquiry has clearly come to nothing.
• Reach measurement: kept in aggregate; it contains no personal data after the day its visitor hash was valid.

Your rights

You may ask us for access, rectification, erasure, restriction, data portability, and you may object to processing based on legitimate interests (Art. 15–21 GDPR). Consent can be withdrawn at any time with effect for the future. One email to info@theoeuvre.art is enough. You also have the right to lodge a complaint with a supervisory authority.