Privacy policy

How we handle personal data under the EU General Data Protection Regulation.

Draft, not yet legally complete. This describes what the site actually does today. It must be reviewed by counsel, and updated the moment analytics, an embedded map or a font CDN is added, because each changes what is processed and where. Set to noindex until then.

1. Controller

OasisArch, Warschauer Platz 11-13, 10245 Berlin, Germany. Email studio@oasisarch.com. Data protection contact: [TO CONFIRM].

2. What this website processes

Server log data

When you open a page, the hosting provider automatically records the request: IP address, date and time, the page requested, referring page, browser and operating system. This is technically necessary to deliver the site and to protect it against attack. Legal basis: Art. 6(1)(f) GDPR.

Contact and enquiry forms

The forms collect your name, email address, any further details you enter, and your message. Submissions are stored in our Supabase database and used solely to answer the enquiry. Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract or its initiation, otherwise Art. 6(1)(f). Retained as long as needed to deal with the matter and for the periods required by commercial and tax law, then deleted.

Job applications

Application data is used only to assess your application. Where an application is unsuccessful, data is deleted within six months unless you consent to us keeping it on file for future openings.

3. Cookies and tracking

This website sets no cookies, uses no analytics and embeds no advertising or social media trackers. If that changes, a consent banner will be added and this section updated before the change goes live.

4. Processors

Hosting: [TO CONFIRM]. Database: Supabase. Data processing agreements under Art. 28 GDPR are in place with both. All fonts and images are served from our own domain, so no request is made to a third-party content network when you browse the site.

5. Your rights

  • Access to the personal data we hold about you (Art. 15)
  • Correction of inaccurate data (Art. 16)
  • Erasure (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Objection to processing based on legitimate interest (Art. 21)
  • Withdrawal of consent at any time, with effect for the future (Art. 7(3))

To exercise any of these, write to studio@oasisarch.com.

6. Right to complain

You may lodge a complaint with a supervisory authority. For Berlin this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

7. Changes

We update this policy when the site changes. Last updated: [TO CONFIRM].