Čeština

Legal notice: this platform is operated by OBJECT:PARADISE, z.s., a registered association (zapsaný spolek) under Czech law, IČO: 09829911, registered office in Prague, Czech Republic — the data controller under the GDPR.

1. Who We Are

O:P:TV is an independent digital archive and community platform operated by OBJECT:PARADISE, z.s. (IČO: 09829911), a registered association based in Prague, Czech Republic. We are the data controller for the processing described in this policy. Our mission is to preserve experimental poetry, film, and performance art, and to foster active collaboration within the underground arts community.

Contact for anything in this policy: info@objectparadise.com. We answer data-rights requests within one month.

2. What We Process, Why, and On What Legal Basis

• Your account and community features — email address, password (held by Firebase Authentication, never visible to us), your first and last name as your display name, and anything you add to your profile (avatar, bio, website, locations, portfolio photos, associated acts), plus the content you create: playlists, comments, emoji reactions, public chat messages, and private messages. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) — this is the service you sign up for. The registration checkbox confirms you have read this policy; it is not the legal basis for running your account.
• Optional features you switch on yourself — showing your city on the poet map, and email notifications (new-message alerts, weekly digests, and alerts when you are credited in a video, an event, or other O:P media). Legal basis: consent (Art. 6(1)(a)), withdrawable at any time in Settings.
• The archive and the Poet Directory — names, performance footage, event credits, photographs, and short artist histories of poets and performers who appeared at OBJECT:PARADISE events, whether or not they hold an account here. Legal basis: our legitimate interest (Art. 6(1)(f)) in preserving and contextualizing this archive, processed with the safeguards for archiving in the public interest (Art. 89(1)) and balanced by the removal rights in section 6.
• Moderation and security — an append-only, administrator-only audit log of moderation actions (takedowns, verifications, deletions), plus rate-limiting counters. Legal basis: legitimate interest in keeping the platform safe and accountable.
• Naming you in a photograph — publishing your name on a photograph you appear in, and collecting those photographs onto your profile. Legal basis: consent (Art. 6(1)(a)), given and withdrawn per photograph at Photographs of you. This is deliberately a narrower basis than the archive as a whole above: keeping a photograph of an evening is one thing, and building an index of a named individual is another, so the second one asks. Until you choose, your name is not published in those person-indexed galleries. This is separate from the documentary captions on our event and project pages, which are written by O:P as part of the account of an evening and rest on legitimate interest — see sections 6 and 6a — and section 6c for the two kinds of photograph, and which of them may be published as a picture without asking.
• Photographs you send us — the file, its caption, whom you tag in it and whom you credit as its photographer, held for an editor's review and, if approved, published as described in section 6c. Legal basis: consent for the sending (Art. 6(1)(a)); the published photograph then rests on the basis its kind carries. Any registered account may send one; nothing you send is published without review.
• Optional analytics — see section 4. Legal basis: consent.

3. Where Your Private Data Lives

Your email address, notification settings, and sign-in history are kept in a separate, private part of our database, linked only to your own login. Only you (when signed in) and O:P administrators can see them; our database security rules enforce this on the server, not just in the interface. Sign-in history stores only a coarse device label (browser and system family) and a timestamp — no IP address and no precise device fingerprint.

4. Cookies, Local Storage & Analytics

• No tracking cookies. The site itself sets no cookies. It uses your browser's local storage for functional things only: keeping you signed in, remembering volume levels, your room layout, and your consent choice. These are strictly necessary for features you use and need no consent.
• Google Analytics — opt-in in Europe, opt-out elsewhere. We use Google Analytics 4 (with IP anonymization) to understand traffic and discoverability. If you are in the EEA, the UK or Switzerland — or if we cannot tell where you are — you get a consent banner on your first visit and Analytics does not load at all until you accept it; choosing "essential only" means it never loads. Everywhere else Analytics runs from the start and you turn it off whenever you like, via Cookie Preferences. We also honour the Global Privacy Control browser signal everywhere: if your browser sends it, Analytics does not start on its own.
• Change your mind any time. Reopen the consent banner via Cookie Preferences — in your account Settings or in the policy footer shown across the site. It is there in every country, whether or not you were shown a banner to begin with. Withdrawing consent is as easy as giving it.

5. Public Content, Chat, Messaging & The O:P Bot

• Public by default: your display name, avatar, profile page (bio, website, locations, portfolio, associated acts), playlists, comments under tapes, emoji reactions, and messages in the public "Discourse" chat. Gallery photos appear publicly only after review by the O:P team.
• Private messages (DMs): restricted to their participants by server-enforced security rules. Two honest exceptions: (1) messages in the "O:P Team" support channel are readable by administrators — that channel exists to talk to us; (2) as with virtually any hosted service, our infrastructure operators could technically access stored data — as a matter of policy we do not read, monitor, or scan private member-to-member messages.
• Messages to unclaimed poets: you can write to a poet who has no account yet. Those messages wait in that name's inbox (capped at ten) and become readable by the person who later verifies and claims that name. Don't send anything you wouldn't want the real, verified person to read.
• The O:P Bot: when you summon the bot with @OP in public chat, your question, your display name, and the last few public chat messages are sent to Google Gemini (Google's AI service) to generate the answer. Your email, account ID, and IP address are not included. Bot answers can be inaccurate.
• Encryption: all transmissions are encrypted in transit (TLS) and at rest (AES-256 on Google Cloud / Firebase). Private messages are not end-to-end encrypted; that is what allows delivery notifications to work.
• Unsend and edit: the words are deleted, not hidden; leftover copies are gone within 15 days; anyone who already saw a message may have saved it.
• Attachments are never reachable through a link that works for anyone else.
• Photos are resized and their location data removed before they're stored.
• People who leave or are removed from a group keep the messages sent before that moment.

6. The Archive, the Poet Directory & People Without Accounts

The archive documents live performances, and the Poet Directory connects artists with their archival footprint. This means we publish limited personal data — names, footage, event credits, photographs, and short artist histories — about people who may never have created an account here. This information comes from OBJECT:PARADISE's own event documentation and records. We rely on the archiving-in-the-public-interest exemption (Art. 14(5)(b) GDPR) to publish it without notifying each person individually — and this section, which is permanently public, is the safeguard that goes with it. You keep absolute control over your representation:

• Curatorial Request: a request button appears under every video, on every poet profile, and in the Poet Directory. Use it to ask that your name be anonymized, that specific footage of you be taken down, or that you be removed from the directory entirely — no account needed.
• We review and honor these requests promptly, balancing historical preservation with personal privacy, and confirm the outcome by email.

6a. Photographs That Identify You

What this section covers, and what it does not. A name can sit beside a photograph on this site in two quite different ways, and only one of them is governed by the choices described here.

• Identifying you in a community photograph — this is the part that asks. A community photograph is people from the network together, off any event’s record. Your name attached to one, the link from that name to your profile, and the gathering of those photographs into your own profile gallery is an index of a named individual, and we build it only with your consent (Art. 6(1)(a) GDPR), given per photograph on Photographs of you — and the photograph itself stays private until everyone identified in it has agreed.
• Being named in an archive photograph — documentation, like the event pages. An archive photograph documents an OBJECT:PARADISE event, happening or project, and the names on it are the record of who took part, published on the same basis as an event page’s own caption (below). What you govern on one is your own profile: whether the photograph appears in your gallery. The Curatorial Request route in section 6 is the way to ask that a name or a photograph come off the record itself.
• Event and project pages — editorial documentation, and not governed by your setting. Our event, project and report pages are OBJECT:PARADISE’s own written account of what the collective did: photographs and captions composed by us as part of the record of an evening. Those captions do name people who performed or took part, and they are published on our legitimate interest (Art. 6(1)(f)) in documenting and preserving the collective’s history, with the safeguards for archiving in the public interest (Art. 89(1)). They are prose, not tags: they do not follow your photo-consent setting, and untagging yourself does not rewrite them. What does apply to them is your right to object and the Curatorial Request route in section 6 — the right way to ask that a name or a photograph come off such a page. We honour those requests.

How the consent part works now. Being tagged in a photograph is a record we keep internally. It does not, by itself, put your name into the person-indexed galleries or onto your profile. Your name appears there only after you have told us it may, by making a choice and saving it on Photographs of you.

• Nothing in those galleries is published until you save a choice. If you have never opened that page, your name is not shown on the public copy of any photograph in the person-indexed galleries — not as a credit, not as a link — and no photograph appears in your profile gallery. Silence is not agreement. (A caption written into an event or project page is the separate, editorial case described just above.)
• The page suggests a default; it does not act on one. When you open it, “Visible on your profile” is pre-selected for each photograph, because that is what most people want and we would rather the archive were shared than hidden. Nothing is written until you press Save my choices. A pre-selected control that took effect on its own would not be consent, and we do not treat it as one.
• You choose per photograph, for yourself only — and what the choice does depends on which of two kinds the photograph is. An archive photograph documents an OBJECT:PARADISE event, happening or project; it is public by default, as documentation, everyone in it is named as part of that record, and your choice governs only whether it appears on your own profile. A community photograph — people from the network together, off any event’s record — is private until everyone identified in it has agreed to be named; only then does it appear on the profiles of the people in it and in the archive in photographs. Everyone else identified in the same photograph chooses separately. You can untag yourself at any time; on a community photograph that makes it private again for everyone, because the agreement it needed is no longer complete.
• Changing your mind costs exactly what agreeing cost. One action per photograph, in either direction, on the same page (Art. 7(3) GDPR). We will never make the more private option harder to reach than the more public one.
• We keep the record of your decision — what you chose, when, and what it was before — because that record is the evidence of the permission we rely on to publish (Art. 7(1)). It is included in your data export, and deleting your account deletes it, which removes your name from those galleries within about a minute.
• When your choice takes effect. It is saved immediately. Taking your name off is applied the next time anyone loads a gallery. Putting it on — or a community photograph becoming visible once everyone in it has agreed — reaches every page within about a minute; nobody presses anything.

What untagging does not do, stated plainly. Untagging removes your name from the person-indexed galleries and takes the photograph off your profile gallery. It does not reach the rest of the site: many photographs also sit on an event or project page, named in that page’s own caption, and untagging neither rewrites those captions nor removes the photograph from the archive. Removing a name also does not remove a face: a photograph still shows whoever is in it. That is why the control is called “untag your profile” and not “make this private”. If you want a photograph taken down from the site altogether, or your name removed from an event page’s own text, use the Curatorial Request route in section 6 above — it is unchanged, it needs no account, and it is the right route for a removal rather than an untagging. Which photographs may show your face without asking, and which may not, is set out in section 6c.

Your extended gallery and the archive in photographs. A photograph you have agreed to be named on can appear in two more places: your extended gallery (everything you have agreed to show, reached from your profile) and the archive in photographs, where it appears with your name because you agreed to that name. You can take any single photograph out of your extended gallery without untagging yourself from it, on Photographs of you; untagging removes your name from it everywhere this section covers.

People without accounts. If you have never signed in, you cannot have made a choice, so your name is not published on any photograph in the person-indexed galleries, and you have no profile gallery. Nothing is required of you. You may still be named in the caption of an event or project page, on the basis described above; the Curatorial Request route in section 6 is open to you without an account. If instead you would like a photograph shown with your name, claim your profile or write to us.

Photographs you send us. If you submit a photograph of your own, an O:P administrator reviews it before anything is published, and the people you tag in it are asked in exactly the same way you are. Submitting a photograph never creates an account for anybody named in it.

6b. Tapes, and Why They Are Archival Record

Every tape in the archive is a document of something the collective staged or took part in — a concert, a reading, a performance, an interview, an intervention, a happening. The people in a tape are named in its credits because the credit is the record: who read, who played, who spoke. We publish tapes and their credits under the archiving basis in section 6 (Art. 6(1)(f) with the Art. 89(1) safeguards), the same footing as a programme, a poster or a review of the evening. We do not ask each performer for consent to be credited on a tape of their own performance, and we say so here rather than implying otherwise. What we do offer is the same route as for everything else in the archive: the Curatorial Request on every tape, for a credit to be corrected, a name anonymized, or footage taken down — and we honour those requests.

6c. The Two Kinds of Photograph

A photograph in our archive is one of two things, and we treat them differently. Whoever sends us a photograph tells us which kind it is; an editor checks that answer, along with the photograph itself, before anything is published.

• Archival photographs document an OBJECT:PARADISE event, happening or project. They are the record of the evening, on the same footing as the tapes in section 6b: we publish the picture and the names of the people in it under the archiving basis without asking each of them, because the picture and its caption together are a document of the collective’s own work — the same footing as the caption of an event page (section 6a). An archival photograph appears in the archive in photographs; what each person in it decides is whether it also appears in their own profile gallery. The Curatorial Request route in section 6 is the way to ask that a name or the photograph itself come off the record.
• Community photographs are people from the archive together, off the record of any event — a table after a reading, a walk, a room. They are not archival record and we do not claim the archiving basis for them. A community photograph is published only once every person identified in it has agreed to be named on it (Art. 6(1)(a)); until then the file itself is private, not merely unlisted, and it appears nowhere — not on any profile and not in the archive in photographs. If any one of them later withdraws, the photograph becomes private again for everyone, because the agreement it needed is no longer complete.

Both kinds go to an editor before they are published. We approve photographs on whether they are factual, whether they are of a quality the archive can carry, and whether they sit with the rest of the archive. We do not publish everything we are sent, and a photograph we decline is deleted rather than kept.

What this means for you, in one place. A picture of an evening we staged may show you and name you without asking, because the picture and its caption are the record of the evening; what you decide is whether it sits in your own profile gallery. A picture of you that is not the record of an evening will not be published at all until everyone in it, you included, has agreed to be named on it. In every case, the Curatorial Request in section 6 can have the photograph taken off the site altogether, and no account is needed to make one.

7. Who Receives Data & International Transfers

We sell nothing to anyone. Data is shared only with the service providers that run the platform:

• Google (Firebase / Google Cloud): authentication, database (EU region — Frankfurt), file storage, hosting, and serverless functions (some run in Google's US region), plus Google Gemini for the O:P Bot and Google Analytics if you consent. Fonts load from Google Fonts.
• The Internet Archive (archive.org): hosts the video and audio tapes — your browser streams them from archive.org directly.
• OpenStreetMap (Nominatim): converts the city you optionally enter into map coordinates; CARTO serves map tiles.
• YouTube embeds appear on a few pages and load only when you view those pages.

Where these providers process data outside the EEA (chiefly the USA), transfers rest on the EU–US Data Privacy Framework and/or Standard Contractual Clauses with the provider.

8. How Long We Keep Things

• Account data, profiles, playlists, messages: until you delete them or delete your account (section 9). Deleting your account removes them immediately; leftover copies are gone within 15 days, and messages you sent to a group are removed for everyone, including anyone who left the group earlier (admin logs: see Moderation audit logs below).
• Curatorial and privacy requests: for as long as needed to fulfil them and demonstrate that we did.
• Moderation audit logs: access-restricted to administrators, never public, retained for the operational life of the platform for accountability, and destroyed no later than one year after the service is decommissioned. When an account is deleted, O:P's admin logs keep that person's name and email for 24 months. Only O:P admins can see them.
• Archival content (footage, credits, directory entries): retained indefinitely as an archive in the public interest, subject always to your removal rights in section 6.

9. Your Rights (GDPR)

You own your participation here. Self-service, no email needed:

• Access & portability: the "Download My Data" button in Settings exports everything we store about you — profile, private data, playlists, comments, chat, and messages — as both a readable text file and machine-readable JSON.
• Rectification: edit your name, avatar, bio, and profile on your profile page; change your email address in Settings (a verification link is sent to the new address).
• Erasure: the "Delete My Account" button in Settings permanently removes your login, private data, playlists, and messages, and anonymizes your public comments to "[deleted]". No admin involvement, no waiting.

By request to info@objectparadise.com:

• Right to object: because parts of the archive rest on legitimate interest, you may object at any time to our processing of your data, including your presence in the archive and directory — the Curatorial Request button (section 6) is the fastest route.
• Restriction: ask us to freeze processing of your data while a dispute or check is resolved.
• Withdraw consent: any consent (map, notifications, analytics) can be withdrawn at any time in Settings or via Cookie Preferences, without affecting past processing.

Complaints: you have the right to lodge a complaint with a supervisory authority — in our case the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz), or the authority where you live.

We make no automated decisions with legal or similarly significant effects about you (Art. 22). The O:P Bot answers questions; it decides nothing about people.

10. Age

O:P:TV accounts are for people aged 15 or over (the Czech age of digital consent). If we learn an account belongs to someone younger, we will delete it.

11. Community Rules

This is a community archive, and the community half of this policy is simple:

• Be respectful and constructive in public chat, comments, and messages. No harassment, hate, spam, or impersonation.
• Go by your real first and last name — it is how the archive links people to their work.
• Gallery uploads must be your own photos from OBJECT:PARADISE events and must not expose others in ways they wouldn't welcome; all uploads are reviewed by the O:P team before appearing.
• The O:P team may remove content or suspend accounts that break these rules. Moderation actions are recorded in the audit log (section 8). If you think we got it wrong, write to info@objectparadise.com and a human will look again.

12. Changes to This Policy

When this policy changes materially, we update the date at the top and announce it on the site before the change takes effect. The archived history of this page is available on request.

13. Contact

OBJECT:PARADISE, z.s.
IČO: 09829911
Prague, Czech Republic
Email: info@objectparadise.com