How we handle your details.

Participatory Art is run by its founders, Mathias Gullbrandson and Martin Källström, in Stockholm. Together we are responsible for the personal data described on this page.

Write to either of us with any question about your details: mathias@participatory.art or martin@participatory.art.

The contact form asks for your name, your email address and your message, and a phone number if you choose to give one. It also records which page of the site you sent it from. The form delivers your message by email to both founders. Nothing you write is stored in a database on the website.

To protect the form from abuse, Cloudflare briefly counts submissions per network address. That count is not kept with your message. Our own logs record only a delivery reference, never what you wrote or your address.

We use what you send us to answer you and to carry on the conversation you started. Our basis for this is our legitimate interest in replying to people who contact us and, where a conversation moves towards an assignment, the steps needed before an agreement. The same applies when you email us directly.

We build our work through people we know. Sometimes a colleague or collaborator in our network suggests someone we should talk to. In that case we hold only what is needed for a good first conversation: your name, your current role and organisation, who suggested you, and why they thought the conversation would be relevant.

We do not scrape networks or buy lists, and nothing is sent to you automatically. A person decides whether to get in touch. When one of us first contacts you, we tell you where your details came from and how to reach us about them.

If you would rather not hear from us, say so and we stop. We then remove your details, keeping only the minimum needed to make sure we do not approach you again.

This site sets no cookies of its own and uses no analytics or tracking. It is served through Cloudflare, which processes your network address to deliver the pages and to protect the site against attacks.

The typefaces are loaded from Google Fonts, so your browser also sends a request to Google when a page loads.

• Cloudflare hosts the site and delivers messages from the contact form.
• Google hosts our mailboxes through Google Workspace and serves the typefaces through Google Fonts.

We do not sell or share your details with anyone else. Where a provider processes data outside the EU, it does so under the safeguards the GDPR requires.

We keep enquiries and conversations for as long as the conversation, or any collaboration that grows out of it, is active, and we remove them when they are no longer needed. Suggested contacts we have not reached are reviewed regularly and removed.

You can ask us to delete your details at any time.

Under the GDPR you can ask what we hold about you, have it corrected or deleted, restrict how we use it, object to our use of it, and receive a copy in a portable format. Email either of us and we will respond.

If you are not satisfied with our answer, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, or to the supervisory authority where you live.

We update this page when our practice changes. The date at the top tells you when it was last revised.