About TECA

Workshops

FAQ

Join Nexus

Privacy Policy

Effective date: 10 February 2025

Controller: Association “Digital Fabrication Laboratory” (Association FabLab)

ID: 4202763800004

Address: Braće Begić 42, 71000 Sarajevo, Bosnia and Herzegovina

Contact (privacy): info@tecalab.eu

 

1) What this policy covers

This Privacy Policy explains how we collect, use, share, and protect personal data when you use the TECA Platform at tecalab.eu.

 

2) Roles

FabLab is the data controller for processing on the Platform.

We use Hetzner as a hosting service provider (processor). Data is stored/processed in the EU/EEA.

 

3) Personal data we collect
Account and profile data
  • Name (first/last), city/country
  • Artistic alias (optional)
  • Profile picture and cover image (user-provided)
  • Artistic statement/bio (user-provided)
  • Social links (optional)
Platform activity data
  • Projects and related uploads (images/video/artwork and descriptions)
  • Forum posts/comments and other contributions
  • Direct messages and related metadata (sender/recipient/timestamps)
Technical and security data
  • IP address, device/browser information
  • Security logs and timestamps
  • System events needed for abuse prevention, troubleshooting, and platform integrity
What we do not request
  • We do not request phone numbers. Please avoid posting phone numbers or sensitive personal data in free-text fields.

 

4) Who can see your data (visibility rules)
  • Your profile and Platform content are visible only to logged-in TECA Platform members and administrators.
  • Profiles are not visible on the public website.
  • The public TECA website shows only administrator-approved projects. A public project page contains the approved project media and description. If you include your name or artistic alias in the public description, it becomes publicly visible.

 

5) Why we process personal data (purposes and legal bases)

We process personal data to:

  • Provide accounts, access, and Platform functionality (performance of a contract).
  • Enable collaboration features, messaging, forums, and project creation (performance of a contract).
  • Maintain security, prevent abuse/fraud, and ensure Platform integrity (legitimate interests).
  • Comply with legal obligations when applicable (legal obligation).

If we ever introduce optional communications (e.g., newsletter), we will use consent (opt-in) and provide an easy unsubscribe option.

 
6) Sharing of personal data

We share personal data only when necessary:

  • Hosting/processor: Hetzner (EU/EEA).
  • Within the Platform: information you add to your profile and content is visible to other logged-in members according to the Platform rules.

We do not sell personal data.

If we add additional service providers in the future, we will update this policy.

 
7) International transfers

We store/process Platform data in the EU/EEA (subject to the service providers we use).

 
8) Data retention
  • Account/profile data and user content: retained until you delete your content/account or your account is removed.
  • Direct messages: retained until deleted by users/admins or account closure, subject to backups.
  • Backups: retained up to 90 days.
  • Security/server logs: retained up to 180 days.

When you request deletion, content is removed from active access promptly; complete removal occurs after the backup retention window.

 
9) Security

We apply organisational and technical measures appropriate to the risk, including access controls, HTTPS encryption in transit, and monitoring to help prevent unauthorised access and misuse.

 
10) Your rights

Depending on your location and applicable law (including GDPR where applicable), you may have rights to:

  • Access your personal data
  • Correct inaccurate data
  • Delete data (subject to retention/backups)
  • Restrict or object to certain processing
  • Data portability (where applicable)
  • Lodge a complaint with a competent data protection authority

To exercise rights, contact info@tecalab.eu.

 
11) Children

The Platform is not intended for users under 16. If we learn we processed data from someone under 16, we will take steps to delete the account and associated data (subject to backups).

 
12) Changes

We may update this policy from time to time. The latest version will be published on tecalab.eu with an updated effective date.