This Privacy Policy explains how BCD Collective ("we", "us", "our") processes personal data in connection with your visit to our website at bcdcollective.de / bcdcollective.framer.ai (the "Website"), in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
We are a lean, three-person collective, and this Website is deliberately simple: beyond a contact form, it does not run a newsletter or any third-party advertising or tracking scripts. This policy is correspondingly short — but it is a legally binding notice, not a placeholder.
2. Who is responsible for your data (the "Controller")
BCD Collective: Beau Chaitan, Carmen Lösche, Digney Eisner
We have not appointed a Data Protection Officer, as this is not legally required for a business of our size and processing activities under Art. 37 GDPR / § 38 BDSG.
3. What data we process when you visit this Website
The Website generates technical data automatically as you browse, and also lets you reach us directly through a contact form.
3.1 Hosting / server log data
This Website is hosted on Framer's infrastructure. As with virtually any website, Framer's servers automatically process technical data to deliver the site to your browser and keep it secure, such as:
IP address (typically truncated/anonymised at the infrastructure level)
Browser type and version
Operating system
Referring URL
Date and time of access
Requested file/page
Purpose: technically delivering the Website, ensuring stability and security, preventing abuse. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating a functional, secure website. Recipient / processor: Framer, Inc. and its affiliates (website hosting provider). Where this involves a transfer of data outside the EU/EEA, Framer has stated it relies on the European Commission's Standard Contractual Clauses as a transfer safeguard. Details are available in Framer's own privacy statement at framer.com/legal/privacy-statement. Retention: log data is retained by Framer only as long as necessary for the purposes above, per Framer's own policies; we do not separately export or store this data ourselves.
3.2 Website analytics (Framer Analytics)
We use Framer's built-in analytics tool to understand overall traffic to the Website (e.g. number of visitors, which pages are viewed, general geography and device type).
Framer Analytics does not use cookies, does not create persistent identifiers, and does not collect any data that identifies you individually — the figures we see are aggregated and anonymised. Because no personal data or tracking technology is involved, no cookie consent banner is required for this specific tool.
Purpose: Understanding aggregate usage of the Website to improve it. Legal basis: to the extent any processing of technical/anonymised data is involved, Art. 6(1)(f) GDPR (legitimate interest in understanding and improving the Website).
We do not use Google Analytics, Meta/LinkedIn Pixel, Hotjar, or any other third-party tracking, advertising, or remarketing tool. If this changes in future, we will update this policy and, where legally required, implement a cookie consent banner before any such tool is activated.
3.3 Contact form
The Website includes a contact form so you can reach us without opening your own email client. This form is built using Framer's native Form component. We have not built or configured our own backend for it.
When you submit the form, the information you enter: your name, email address, and message is:
transmitted to and stored by Framer in your site's form submissions dashboard; and
forwarded to us by automated email notification.
We only use this information to read and respond to your inquiry. We do not use it for marketing, and we do not add you to any list unless you separately ask us to.
Purpose: Enabling you to contact us, and responding to your enquiry. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract, where relevant) and/or Art. 6(1)(f) GDPR (our legitimate interest in receiving and responding to enquiries via our Website). Recipient / processor: Framer, Inc. and its affiliates process and store form submissions on our behalf, in the same way described for hosting in Section 3.1 (including as regards international transfer safeguards). Retention: We keep the correspondence only as long as necessary to handle your enquiry and any resulting business relationship, per Section 5 below. Framer's own retention of the underlying submission record is governed by Framer's policies and BCD Collective account settings on the Framer dashboard.
4. Cookies
This Website does not currently set any cookies that require your consent. If we introduce features in future that do require cookies (e.g. embedded videos, chat widgets, marketing tools), we will update this policy accordingly and request your consent via a cookie banner before those cookies are set, in line with the German TTDSG and GDPR.
5. Contacting us
When you reach out to us through the contact form (Section 3.3) directly, we will process the personal data you include (e.g. your name, email address, and the content of your message) in order to respond to you.
Purpose: Responding to your enquiry and, where relevant, taking steps towards a potential contract. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract, where your enquiry relates to our services) and/or Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries directed to us). Retention: We keep correspondence only as long as necessary to handle your enquiry and any resulting business relationship, and in line with applicable statutory retention obligations (e.g. German commercial/tax law retention periods where a contract results).
6. External links
Our footer links out to our LinkedIn page. This is a standard hyperlink, not an embedded widget, no data is transmitted to LinkedIn simply by visiting our Website. Once you click through and leave our site, LinkedIn's own privacy policy applies to your use of their platform.
7. Your rights under the GDPR
In relation to your personal data, you have the right to:
Access the personal data we hold about you (Art. 15 GDPR)
Rectify inaccurate data (Art. 16 GDPR)
Erase your data ("right to be forgotten") (Art. 17 GDPR)
Restrict processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing based on legitimate interest (Art. 21 GDPR)
Withdraw consent at any time, where processing is based on consent (Art. 7(3) GDPR), without affecting the lawfulness of processing before withdrawal
Lodge a complaint with a supervisory authority — in particular the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), or the supervisory authority in your own EU member state
To exercise any of these rights, contact us via our “contact page”.
8. International data transfers
Where our hosting provider processes data outside the European Economic Area, appropriate safeguards (such as the EU Standard Contractual Clauses) are used to protect your data, as described in Section 3.1.
9. Children
This Website is directed at business professionals and is not intended for, nor knowingly directed at, children.
10. Changes to this policy
We may update this Privacy Policy if our processing activities change (for example, if we add a newsletter, or analytics/marketing tool). The "Last updated" date at the top will reflect the most recent revision.