Privacy Policy
Controller
Sofilab GmbH, represented by Mathis Nitschke, Akademiestr. 3, 80799 Munich, Germany. Contact: info@sofilab.art.
No data protection officer has been appointed, as this is not legally required.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), objection (Art. 21), and data portability (Art. 20). You may revoke any consent given at any time with future effect. Complaints can be submitted to a data protection authority (e.g., bfdi.bund.de).
Server logs
When you visit this site, our hosting provider processes technical information — IP address, browser type, operating system, referrer, and timestamp — for security and to operate the service. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest). Logs are retained for a short period and not cross-referenced with other data.
Cookies and local storage
This site sets first-party cookies for audience measurement (see Analytics below). Beyond that, a small amount of data is stored in your browser’s local storage to remember technical preferences — your chosen theme (light/dark) and whether you have accepted loading embedded videos. No personal data is transmitted to us from local-storage entries. You can clear cookies and local storage at any time via your browser settings.
Analytics (Matomo)
We run a self-hosted instance of Matomo on matomo.sofilab.art to understand which articles are read and how visitors arrive. The journal shares a Matomo site with our other corpus.music subdomains (such as corpus.music, doc.corpus.music, app.corpus.music) so that one person moving between them is counted as a single visitor rather than as several. To do this, Matomo sets first-party cookies on the .corpus.music domain that hold a random visitor identifier and session timestamps; the visitor cookie expires after 13 months, the session cookie after 30 minutes. IP addresses are anonymized (last bytes truncated). If your browser sends the “Do Not Track” signal, Matomo switches to a cookieless mode for your visit: a page view is still counted for aggregate statistics, but no cookies are set and no persistent visitor identifier is created. No data is shared with third parties. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in audience measurement of our own content).
Embedded videos (YouTube, Vimeo, and similar)
Articles occasionally include videos from external platforms. To avoid transferring data to those platforms without your consent, embedded videos are replaced with a placeholder on page load. Only after you click the placeholder and confirm the consent dialog will the video be loaded — at which point a connection to the respective platform (e.g., Google LLC for YouTube, Vimeo Inc.) is established and that platform may set its own cookies and process your IP address. Your consent is stored in this browser’s local storage so future videos load directly; clear your browser data to revoke it. Legal basis: Art. 6 (1)(a) GDPR (consent). Data transfers to the U.S. rely on EU Standard Contractual Clauses where applicable.
Newsletter
If you sign up for our newsletter, we store your email address to deliver it. Registration uses a double opt-in process (you confirm via a link sent to your address). Delivery is handled by MailerLite as our processor under a data-processing agreement. Legal basis: Art. 6 (1)(a) GDPR. You can unsubscribe at any time using the link in every email.
Contact
If you write to us via email, we process your message and address to respond. Legal basis: Art. 6 (1)(f) GDPR, or (b) if your message relates to a potential contract.
Fonts and other assets
All fonts, icons, and static assets are served from our own domain. We do not load third-party fonts (such as Google Fonts) on page load.
Changes
We reserve the right to update this policy in response to legal changes or modifications to our services. The “last updated” date at the foot of this page reflects the most recent material change.
Objection
You may object to any processing based on Art. 6 (1)(f) GDPR at any time, unless compelling legitimate grounds override your interests.
Contact for privacy matters
Last updated: 24 May 2026