Privacy Policy
Last updated: 14 September 2026
PURPLEHAZE Magazine is published by HAZE ART & MEDIA Group. Protecting the personal data of our readers, contributors and artists matters to us. This Privacy Policy explains what personal data we collect when you visit purplehazemag.com, why we collect it, on what legal basis, how long we keep it, and which rights you have under the General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for data processing on this website within the meaning of Art. 4 (7) GDPR is:
HAZE ART & MEDIA Group
Wilhemsaue 32
10713 Berlin, Germany
Represented by: Irina Rusinovich
Email: hello@purplehazemag.com
We have not appointed a Data Protection Officer, as we are not legally required to do so under Art. 37 GDPR and § 38 BDSG.
2. General information on data processing
We process personal data only where this is permitted by law or where you have given your consent. „Personal data“ means any information relating to an identified or identifiable natural person.
Depending on the situation, we rely on the following legal bases:
– Art. 6 (1) (a) GDPR: your consent, for example for analytics cookies or our newsletter;
– Art. 6 (1) (b) GDPR: performance of a contract or pre contractual steps, for example when you order a print issue or book a paid portfolio review;
– Art. 6 (1) (c) GDPR: compliance with a legal obligation, for example statutory retention periods under German commercial and tax law;
– Art. 6 (1) (f) GDPR: our legitimate interests, for example the secure and stable operation of this website.
Personal data is erased as soon as the purpose of storage no longer applies, unless statutory retention obligations require us to keep it longer.
3. Hosting and server log files
This website is hosted by IONOS. The provider processes personal data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
Each time this website is accessed, our hosting provider’s servers automatically record information that your browser transmits. This includes:
– the IP address of the requesting device;
– date and time of access;
– the page or file requested and the volume of data transferred;
– the referring URL;
– browser type and version, operating system and language settings.
This data is processed on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in delivering the website reliably, protecting it against attacks and diagnosing technical faults. Log files are stored for a maximum of 30 days and then deleted or anonymised.
4. Cookies and consent management
Our website uses cookies and comparable technologies such as local storage. Cookies are small text files stored on your device by your browser.
Some cookies are strictly necessary for the website to function, for example to remember your cookie preferences or to keep a form session alive. These are set on the basis of Art. 6 (1) (f) GDPR and § 25 (2) TDDDG, and do not require your consent.
All other cookies, in particular those used for statistics and for embedded third party content, are only set once you have given your consent via our consent banner, in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.
We use the consent management tool Complianz to obtain and document your consent. Complianz stores your choice locally in your browser and records an anonymised log of the consent given. You can withdraw or change your consent at any time with effect for the future, using the cookie settings link available on our website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
You can also configure your browser to refuse cookies or to delete cookies already stored. Please note that disabling all cookies may limit the functionality of this website.
5. Contact forms, submissions and email correspondence
Our website offers forms through which you can contact us, submit artwork, or apply to be featured in the magazine. When you use a form, we process the data you enter, typically your name, email address, links to your work, and the content of your message.
If your enquiry relates to a possible collaboration, submission or order, we process this data on the basis of Art. 6 (1) (b) GDPR. In all other cases, the legal basis is our legitimate interest in answering enquiries addressed to us, Art. 6 (1) (f) GDPR.
Data submitted through forms is transmitted to us by email and stored in our email system and, where applicable, in our editorial records. We erase this data once your enquiry has been dealt with conclusively and no statutory retention obligation applies, and in any case no later than 24 months after the last contact.
Artwork submissions. If you submit images, texts or other works to PURPLEHAZE Magazine, we process your name, contact details, artist biography and the submitted material in order to review, select, edit and, where agreed, publish your work in our print or online editions. The legal basis is Art. 6 (1) (b) GDPR. Where your work is published, your name and the information you have provided about yourself become publicly accessible. Published editorial content, including issues already printed and distributed, cannot be recalled or altered retroactively.
6. Newsletter
You can subscribe to our newsletter to receive news about new issues, open calls, exhibitions and editorial features. To subscribe we require at minimum your email address; any further details are optional.
We use the double opt in procedure. After you enter your address, we send you a confirmation email. Your subscription is only activated once you click the confirmation link. This allows us to verify that the address belongs to you. We store the time of registration, the time of confirmation and your IP address in order to document consent.
The newsletter is sent using Mail Chip , with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR. The provider processes your data on our behalf and may evaluate whether newsletters were opened and which links were clicked, in order to help us improve our content.
The legal basis is your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time by clicking the unsubscribe link contained in every newsletter, or by contacting us directly. Following unsubscription, your email address is deleted from the distribution list, unless you have expressly consented to further storage or we are legally required to retain it.
7. Orders and payments
If you order a printed issue, place a pre order, or purchase a paid service such as an expedited portfolio review, we process the data required to perform the contract. This typically includes your name, billing and delivery address, email address and details of the order.
The legal basis is Art. 6 (1) (b) GDPR. Where invoices and accounting records are concerned, we are additionally subject to statutory retention obligations under § 147 AO and § 257 HGB, which require us to retain the relevant documents for up to ten years. The legal basis in that respect is Art. 6 (1) (c) GDPR.
Payments are processed by PAYPAL or STRIPE When you choose to pay via this provider, the payment data you enter is transmitted to and processed by the provider as an independent controller in accordance with its own privacy policy. We do not receive or store your full payment card or bank account details. Please refer to the provider’s privacy policy for further information.
8. Google Analytics 4
Subject to your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).
Google Analytics uses cookies and similar technologies to help us understand how visitors use our website, for example which articles are read, how visitors arrive at the site and which pages they leave from. The information generated is transmitted to and stored by Google. IP addresses are shortened within the European Union before being processed, so that direct identification of individual visitors is not possible for us.
We use Google Analytics exclusively on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. No analytics cookies are set and no analytics data is collected before you give consent. We have implemented Google Consent Mode v2, which means that the measurement tools respect your choices in the consent banner. You can withdraw your consent at any time via the cookie settings on our website.
Google may transfer personal data to servers in the United States. Google LLC is certified under the EU US Data Privacy Framework, and transfers are additionally safeguarded by the European Commission’s Standard Contractual Clauses. We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR.
Further information is available in Google’s privacy policy at https://policies.google.com/privacy
9. Social media presence
We maintain profiles on social networks, including Instagram, in order to present our editorial work and to communicate with our community. When you visit one of our profiles, the operator of the respective network processes your data according to its own privacy policy, over which we have no influence. If you interact with us there, we may process the content of your messages and comments in order to respond, on the basis of Art. 6 (1) (f) GDPR.
Links from our website to social networks are plain hyperlinks. They do not transmit any data to the respective network unless you actively click them.
10. Transfers to third countries
Where personal data is transferred to countries outside the European Economic Area, we ensure an adequate level of protection, either through an adequacy decision of the European Commission, through certification under the EU US Data Privacy Framework, or through the Standard Contractual Clauses adopted by the European Commission, supplemented by additional safeguards where necessary.
11. Recipients of data
We only share your personal data with third parties where this is necessary, in particular with our hosting provider, our newsletter provider, our payment provider, our analytics provider, and, where a printed issue is shipped, with the printing house and logistics partner involved. All processors acting on our behalf are bound by data processing agreements pursuant to Art. 28 GDPR. Beyond this, we may be required to disclose data to public authorities where a legal obligation applies.
We do not sell personal data.
12. Data security
This website uses TLS encryption, recognisable by the „https“ prefix and the lock symbol in your browser’s address bar. We apply appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction and unauthorised access. Our security measures are reviewed and updated in line with technological developments.
13. Your rights
You have the following rights in relation to your personal data:
– Right of access (Art. 15 GDPR): to obtain confirmation of whether we process data about you, and to receive a copy of it.
– Right to rectification (Art. 16 GDPR): to have inaccurate data corrected or incomplete data completed.
– Right to erasure (Art. 17 GDPR): to have your data deleted, unless retention is required by law.
– Right to restriction of processing (Art. 18 GDPR).
– Right to data portability (Art. 20 GDPR): to receive the data you provided in a structured, commonly used and machine readable format.
– Right to object (Art. 21 GDPR): to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR.
– Right to withdraw consent (Art. 7 (3) GDPR): to withdraw any consent given, at any time and with effect for the future.
To exercise any of these rights, please contact us at hello@purplehazemag.com
You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59 61
10555 Berlin, Germany
www.datenschutz-berlin.de
14. Obligation to provide data
You are not legally or contractually obliged to provide us with personal data. However, without certain data we may be unable to enter into a contract with you, to process an order, to review a submission, or to answer your enquiry.
15. Automated decision making
We do not use automated decision making, including profiling, within the meaning of Art. 22 GDPR.
16. Changes to this Privacy Policy
We review this Privacy Policy regularly and update it where our services change or where new legal requirements apply. The version published on this page is always the current one. We recommend that you consult it from time to time.
