Privacy Policy

Who we are

This website and its administration system are operated by Agent Bauer, Västerlånggatan 66, Stockholm, Sweden ("we", "us"). We are the data controller for the personal data described here. For any privacy matter, contact ann@agentbauer.com.

Visiting the public site

The public site sets no tracking cookies and runs no advertising or third-party analytics. We keep simple daily counters — how many times a page was viewed or a film was played — that contain no personal data at all: no IP addresses, no identifiers, only totals. A single preference (your chosen grid layout) is stored in your own browser and never sent to us.

The site is delivered by Cloudflare, our hosting provider, which processes visitors’ IP addresses in transit as a technical necessity of serving any website, under its own data processing terms. We do not store visitor IP addresses ourselves.

Portfolio content

The photography and film shown here is professional work published by us together with the artists we represent. If an image or film depicts you and you believe it should not be shown, contact us and we will review and, where required, remove it.

Contacting us

If you email or call us, we process the contact details and content you choose to share in order to answer you. Correspondence is kept no longer than the ongoing matter and our legitimate business records require.

The admin system (artists and staff)

Accounts are created by invitation only. For account holders we process: name, email address, optional phone number, and password (stored only as a secure hash) or sign-in links sent by email; session cookies that are strictly necessary to keep you signed in; invitations (the invited address and whether it was used); a log of edits made in the admin (who changed what, when) kept for accountability and security; a log of system emails sent (delivered or failed); and the portfolio material you upload.

The legal bases are the performance of our agreement with you (managing your portfolio and representation), and our legitimate interest in keeping the system secure and its changes traceable.

Where your data is processed

All data is stored with Cloudflare (database, media storage, video delivery and email sending), under Cloudflare’s data processing addendum, which includes the EU standard contractual clauses for any transfer outside the EU/EEA. We do not sell or share personal data with anyone else.

Retention

Account data is kept while the account exists and removed when the account is deleted. Deleting a login does not delete an artist’s portfolio, which is governed by the representation agreement. Uploaded files are removed from storage when deleted in the admin. Aggregate counters contain no personal data and are kept for site statistics.

Your rights

Under the GDPR you may request access to, correction or deletion of your personal data, restriction of or objection to its processing, and a copy of data you have provided in a portable format. Write to ann@agentbauer.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se).

Changes

We may update this policy as the site evolves; the date above shows the current version. Material changes affecting account holders are announced in the admin.