CollectionAfrican Art Archive
deenfr

Privacy Policy

This policy informs you about the type, scope, and purpose of personal-data processing on africanarchive.org pursuant to the GDPR and §96 TKG.

Controller

Dr. Herbert Stepic, Annagasse 6, 1010 Vienna, Austria.

Contact: office@optimusflow.consulting

Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. The database is operated by Neon Database Inc. (USA), server region eu-central-1 (Frankfurt).

Both providers are US-based; data transfers rely on EU Standard Contractual Clauses (Art. 46 GDPR).

Server log files

When you access the website, log data is collected automatically (IP address, date/time, user-agent, referrer, requested URL). Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in operational security). Retention: up to 30 days.

Cookies and tracking

We set technically necessary cookies (language choice, consent state) without prior consent under §96 TKG.

For analytics and marketing cookies (Google Tag Manager, Vercel Analytics), we obtain your consent via the cookie banner (Art. 6 (1)(a) GDPR). You may withdraw consent at any time via the banner.

Vercel Analytics

We use Vercel Analytics (Vercel Inc., USA) for aggregated visitor statistics. Vercel Analytics does not store cookies or personal data persistently. Activation only after consent via the cookie banner.

Google Tag Manager / Google Analytics 4

Upon consent we load Google Tag Manager (Google Ireland Ltd., Dublin) for managing analytics tags. Personal data (IP, user-agent, device ID) may be transferred to Google servers in the USA. Legal basis: Art. 6 (1)(a) GDPR. Data transfer to the USA: EU SCC + EU-US Data Privacy Framework.

Contact form and email communication

If you contact us by email, your information is processed to handle the inquiry and any follow-up. Legal basis: Art. 6 (1)(b) GDPR (pre-contractual) or (f) (legitimate interest). Retention: until the matter is closed; thereafter archived per statutory retention periods.

Your rights

You have rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). For complaints, please contact the Austrian Data Protection Authority (https://www.dsb.gv.at).