Back to websiteLegal / 02
This notice explains transparently which personal data are processed when you visit the website and submit a registration request.
Email verification is required to process membership and event requests. Submitted forms are also stored in a private recovery backup. Umami loads only after explicit consent.
Represented by managing director Félix Eduard Weiss.
Email: contact@formsofarchitecture.com
Forms of Architecture e. V. is in formation. Until registration, this website is operated under the responsibility of ARC-DEL GmbH.
When the website is accessed, technically necessary connection data are processed, in particular the IP address, date and time, requested address, transferred data volume, HTTP status, referrer, browser and device information. This is necessary to deliver the website, prevent disruption and protect system security.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is secure and reliable operation. The website, member space and administration run on our VPS managed through CloudPanel. Log data are retained only for as long as necessary for operation, troubleshooting and abuse prevention, then deleted or anonymised unless legal obligations or the establishment, exercise or defence of legal claims require longer retention.
The page address determines the language; no browser storage is needed for this. If you make a privacy choice, we store foa-consent-v1 with timestamps and a 180-day validity, and umami.disabled to disable analytics. The site remains usable when browser storage is blocked.
You can delete these entries in your browser or change your choice through “Privacy settings” in the footer.
After your explicit consent, we load Umami from monitoring.filippoceli.com to collect anonymous usage statistics. Without consent, the script is not loaded and no connection to the Umami server is made.
We process your profile and event registrations to manage your FOA access and participation. A community account or event registration does not automatically grant association membership. Optional information is voluntary.
Your email address is verified through a link sent by Resend. The FOA team reviews new accounts. Your account and registrations are then stored in our own database. New submissions are no longer transferred to Twenty. You can update your profile and cancel registrations in the member space. Profiles and participant lists are not public; they are accessible only to you and authorised FOA administrators.
If you create a password, we store its Argon2id hash, never the password itself. Your optional cropped profile photo is stored privately and is visible only to you and authorised FOA administrators. You can change your password or remove your photo in your profile. Password reset links expire after 20 minutes and can be used once.
Sign-in uses essential session cookies restricted to the respective subdomain. Access expires after at most seven days for members and one hour for administrators. Please do not enter sensitive data in free-text fields.
Sign-in links are valid for 20 minutes; confirmation links from the website form are valid for 24 hours. Each can be used once. Used or expired tokens are deleted during the next daily cleanup; submitted details in the token are removed immediately after successful confirmation.
Accounts and registrations are stored to operate the community. Technical activity logs and the latest verified website request with its complete submitted details are retained for up to 365 days. Imported historical forms retain their original deletion date. Contact contact@formsofarchitecture.com to request account deletion or access to your data.
To protect against data loss, we also keep a private SQLite recovery copy of current accounts, consents and registrations. Submitted website forms, including requests awaiting email confirmation, and previous versions of records are retained there for up to 365 days; earlier expiry dates for imported forms are preserved. This copy excludes passwords, password hashes, sign-in tokens and session cookies. Unverified requests remain identified as unverified and do not activate membership. Daily server backup archives are retained for 14 days.
We send essential messages about your access, requests and events, including reminders. Newsletters require your voluntary opt-in; you can unsubscribe in your profile or through the link in every newsletter. Essential account messages are unaffected.
Completed email contents are removed after 90 days and technical webhook events after 30 days. Delivery failures and complaints may suppress further newsletters to the affected address.
Authorised FOA administrators can access the data required to manage the community. We use Plus Five Five, Inc. (“Resend”) to deliver emails, processing email addresses, message content and delivery information. The database runs on our VPS.
For details of Resend’s processing, see the provider’s privacy policy.
Links to LinkedIn, Instagram and TikTok are simple links. You leave our website only when you click them; the respective provider is responsible for subsequent processing. Archivo, IBM Plex Mono and Inter are served locally from our web server, so visiting the site does not create a connection to Google Fonts.
Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
Supervisory authority at the controller’s registered office: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany, mailbox@datenschutz-berlin.de.
Without the fields marked as required, a registration request cannot be processed. There is no legal obligation to provide the information. No decision based solely on automated processing, including profiling within the meaning of Article 22 GDPR, takes place.
We use appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. This notice will be updated when functions, providers or legal bases change. The version published on this page is the applicable version.