Legal / Privacy notice, EU & EEA
Privacy notice, EU & EEA
Last updated 2026-07-14
This notice supplements the Privacy Policy for users in the European Union and the European Economic Area, under the General Data Protection Regulation (GDPR).
Controller
The operator of 1BURO (contact: hello@1buro.app) is the controller. Where an artist uses 1BURO to run their own newsletter or store their own contacts, the artist is the controller of that data and 1BURO is their processor under Art. 28 GDPR.
Legal bases (Art. 6 GDPR)
- Performance of a contract (Art. 6(1)(b)), account data and the content you add: processing them is what the service is.
- Legitimate interests (Art. 6(1)(f)), server and error logs, kept to secure and debug the service; the minimal, short-lived nature of these logs is the balance.
- Consent (Art. 6(1)(a)), subscribing to an artist's newsletter. You can withdraw consent at any time (every mailing carries an unsubscribe path), without affecting the lawfulness of processing before withdrawal.
We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.
Your rights (Art. 15–21 GDPR)
You have the right of access, and to rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. The app covers most of these directly, you can edit anything, export your complete account as a portable archive, and delete your account. For anything else, write to hello@1buro.app; we respond within one month.
You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, the list is at edpb.europa.eu.
International transfers
Our hosting and AI providers (Render, Anthropic, Cloudflare) process data in the United States. Transfers rely on the safeguards of Chapter V GDPR: certification under the EU–US Data Privacy Framework where the provider holds it, and the European Commission's Standard Contractual Clauses otherwise. Copies of the relevant safeguards can be requested at hello@1buro.app. If the account owner configures off-site backup, data also flows to the destination they chose.
Retention
As described in the Privacy Policy: for the life of the account, plus the backup cycle; statutory retention duties, where they apply, are honoured and then the data is erased.