Privacy Policy of Generative Art Award 2023. July 15, 2023.

This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the websites, functions and content associated with it.


Responsible for data processing:
Sonja Vilches,
77830 Buehlertal, Germany
Generative Art Award

Safety measures

We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes in the data processing we carry out make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

Personal Data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

Types of data processed:

  • Contact details (e.g., name, email).
  • Content data (e.g., text input, images)

Purpose of processing:

  • To make the website, its functions and content available.
  • Implementation of the competition.
  • Answering contact requests and communicating with users.

Website Data

If you only use this website to obtain information and do not provide any data, then we only process the data that is required to display the website on the internet-enabled device you are using. These are in particular:

  • IP address.
  • Date and time of the request.
  • Amount of data transferred.
  • IP address.
  • The website from which the request is coming.
  • Browser type and browser version.
  • Operating System.
  • Browser type and browser version.

The legal basis for the processing of this data are legitimate interests in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR, in order to enable the presentation of the website in principle. In addition, you can use various services on the website, where further personal and non-personal data are processed.

Cooperation with processors and third parties

If we disclose data to other people and companies (processors or third parties) as part of our processing, transmit it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if transmission of the data to third parties, such as payment service providers, is required to fulfill the contract in accordance with Art. 6 Para. 1 lit. b DSGVO), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hostern, etc.).


We use PayPal to process the payment of the participation fee. The service provider is the American company PayPal Inc. The company PayPal Europe (S.a.r.l. et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg) is responsible for the European area.

This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 Para. 1 lit. f GDPR). In this context, we pass on the following data to PayPal, insofar as it is necessary for the fulfillment of the contract (Art. 6 Para. 1 lit b. DSGVO): First name, last name, address, email address, telephone number. The processing of the data specified under this section is not required by law or contract. Without the transmission of your personal data, we cannot carry out a payment via PayPal. PayPal carries out a credit check for various services such as payment by direct debit in order to ensure your willingness and ability to pay. This corresponds to PayPal's legitimate interest (according to Art. 6 Para. 1 lit. f GDPR) and serves to execute the contract (according to Art. 6 Para. 1 lit. b GDPR). Your data (name, address and date of birth, bank account details) will be passed on to credit agencies for this purpose. We have no influence on this process and only receive the result of whether the payment was made, rejected or pending verification. You can find more information on how to object to and remove PayPal from: Your data will be stored until the payment has been processed. This includes the time it takes to process refunds, claims management and fraud prevention.

PayPal processes your data in the USA, among other places. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks for the legality and security of data processing


We have integrated Jotform on this website. The provider is Jotform Inc., 111 Pine St. Suite, 1815 San Francisco, California 94111, USA (hereinafter Jotform). Jotform allows us to create online forms to collect messages, inquiries and other submissions from our website visitors. All input you make is processed on Jotform's servers. Jotform is used on the basis of our legitimate interest in the most user-friendly transmission of the competition entries (Art. 6 Para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 Paragraph 1 lit. The consent can be revoked at any time. The data you enter in the form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after the end of the competition). Mandatory legal provisions - in particular retention periods - remain unaffected. Data transfer to the US is secured by EU Standard Contractual Clauses that we have entered into with Jotform. Details can be found here:

Order Processing
We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR.

Deletion of Data

The data processed by us will be deleted or their processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements.

Your rights

As a data subject, you have the following rights:

  • You have a right to information about your personal data that the person responsible processes (Article 15 GDPR).
  • You have the right to have the data concerning you corrected if it is stored incorrectly or incompletely (Art. 16 GDPR).
  • You have the right to erasure (Art. 17 GDPR).
  • You have the right to request the restriction of the processing of your personal data (Article 18 GDPR).
  • You have the right to data portability (Art. 20 GDPR).
  • You have the right to object to the processing of your personal data (Art. 21 GDPR).
  • You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effect on you or significantly affects you in a similar way (Article 22 GDPR).
  • You have the right to complain to the competent supervisory authority if you suspect a violation of data protection law (Art. 77 GDPR). The supervisory authority at your usual place of residence, workplace or at the place of the suspected violation is responsible.