8KCANVAS

Privacy Policy

We deliberately keep data collection to a minimum. There are no user accounts on 8kCanvas.

1. Controller

The controller responsible for data processing on 8kcanvas.com is TEMPEL Design, Schönwalder Straße 53, 13585 Berlin, Germany, email support@tempel.design.

2. What we process and why

DataPurposeLegal basis

The display name you choose for a claimTo register and publicly show your claim on the canvas and in the registryArt. 6(1)(b) GDPR (performance of contract)

Payment data and email (collected by our payment processor at checkout)To take payment, issue the certificate, prevent fraud, and meet legal record-keeping dutiesArt. 6(1)(b) and 6(1)(c) GDPR

Your express consent to immediate performance and the acknowledgment of losing the withdrawal rightTo document the lawful start of performanceArt. 6(1)(c) GDPR

Server log data and IP addressTo operate and secure the service and defend against attacks and abuseArt. 6(1)(f) GDPR (legitimate interest in a secure service)

3. Recipients and processors

We use the following service providers, who process data on our behalf under data processing agreements:

Payment processing: Stripe (Stripe Payments Europe, Ltd., Ireland, and Stripe, Inc., USA). Card and payment data are processed by Stripe. Transfers to the USA are based on the EU standard contractual clauses and Stripe's certification under the applicable transfer framework.
Hosting and server infrastructure: our hosting provider, which operates the servers used to run the service.
Certificate email delivery: our transactional email provider, used to send you a copy of your certificate.
Reach measurement: Google Analytics 4 (Google Ireland Ltd.), loaded only after you opt in. Your IP address is anonymized.

4. Cookies and tracking

We set only technically necessary cookies, which do not require consent. With your consent we additionally use Google Analytics 4 (Google Ireland Ltd.) to measure reach; it is loaded only after you opt in through the consent banner, on the basis of Art. 6(1)(a) GDPR, and your IP address is anonymized. You can withdraw your consent at any time with effect for the future using the "Cookie settings" link in the footer, which is as easy as giving it.

5. International transfers

Where data is transferred outside the EU or EEA (for example to the USA via Stripe or Google), we rely on the EU standard contractual clauses and, where applicable, the recipient's certification under the current EU transfer framework, together with supplementary measures.

6. Retention

We keep claim and payment records for as long as required to provide the permanent service and to meet statutory retention duties (commercial and tax records are generally kept for up to ten years under German law). Server logs are kept only as long as needed for security and are then deleted or anonymised.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability, and objection, and the right to withdraw consent with effect for the future. You also have the right to lodge a complaint with a supervisory authority, for example the data protection authority responsible for 13585 Berlin.

8. Obligation to provide data

Providing a display name and payment data is necessary to conclude and perform a purchase. Without it we cannot register your claim. Browsing the canvas does not require you to provide personal data beyond what is technically necessary.