Core Privacy Principles at DISSCO

We prioritize visitor confidentiality and artistic integrity. We do not sell personal identification data. Interactive soundscapes and audio oscillators operate strictly within your browser memory. Advertising via Google AdSense is implemented transparently with full user consent controls.

1. Information We Collect

Depending on how you interact with our platform, we may collect the following categories of information:

  • Direct Communication Data: When you submit an artist portfolio, curatorial proposal, press inquiry, or contact message via our contact form, we collect your name, email address, inquiry department, portfolio URLs, and message content.
  • Ticketing & Attendance Data: If you purchase admissions through our Box Office interface, we collect attendee names, ticket tier selections, and transaction references necessary to generate encrypted QR access passes. Payment card data is processed directly by PCI-compliant payment gateways and is never stored on DISSCO servers.
  • Automated Technical & Device Data: When browsing our pages, standard server logs may automatically record your IP address, browser user-agent, operating system, referring URLs, and timestamps to diagnose technical errors and ensure server stability.

2. Client-Side Browser Storage & Web Audio Processing

DISSCO incorporates advanced client-side web technologies to provide immersive sensory experiences without cloud surveillance:

  • HTML5 Web Audio Synthesizer: Our ambient drone synthesizer and frequency oscillators generate mathematical audio signals locally within your browser tab using the Web Audio API. No audio recordings, microphone access, or acoustic telemetry leave your device.
  • Local Storage (localStorage): We use local storage purely for client-side state persistence: saving your cookie and ad consent choice (dissco_ad_consent), audio synthesizer mute/volume states, and authenticated administrator session tokens. Local storage keys are never shared with unauthorized external entities.

3. Cookies & Google AdSense Advertising Disclosures

We partner with Google AdSense to display advertisements on our website. This revenue enables DISSCO to maintain free global access to our cultural archives, curatorial articles, and artist showcases.

In compliance with Google Publisher Policies and global privacy regulations, please be advised of the following:

  • Third-Party Vendor Cookies: Google, as a third-party vendor, uses cookies to serve ads on DISSCO.
  • DoubleClick DART Cookie: Google’s use of advertising cookies (including the DoubleClick cookie) enables it and its partners to serve ads to our users based on their visits to DISSCO and/or other websites across the Internet.
  • Personalized vs. Non-Personalized Ads: Visitors may manage their ad personalization preferences at any time. If you choose "Essential Only" on our consent banner, we instruct Google AdSense to serve non-personalized ads (which do not use cookies for ad personalization, though they may still use cookies for frequency capping, aggregated ad reporting, and fraud detection).

How to Opt Out of Personalized Advertising

You have the right to control how third-party advertising networks use your data. You may opt out of personalized advertising by visiting:

4. Legal Basis for Processing (GDPR & DPDP Act)

If you are located in the European Economic Area (EEA), the United Kingdom, or India, we process personal data under the following legal bases:

  • Consent: Where you have granted explicit consent for cookies and personalized advertising.
  • Contractual Necessity: To deliver tickets, fulfill exhibition admissions, or respond to direct curatorial inquiries initiated by you.
  • Legitimate Interests: To maintain platform security, prevent fraudulent bot traffic, and optimize site performance without overriding fundamental rights.

5. Data Retention & Security Safeguards

We retain contact messages and ticket transaction logs only for the duration required to fulfill curatorial review, resolve ticketing queries, or satisfy statutory accounting requirements in India.

We implement TLS 1.3 cryptographic transport security, strict Content-Type nosniff headers, and hardened access restrictions. However, no transmission over the Internet can be guaranteed 100% invulnerable; visitors submit confidential portfolios at their own discretion.

6. Your Privacy Rights

Depending on your physical residency, you hold specific statutory rights regarding your personal information:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or outdated information.
  • Right to Erasure ("Right to be Forgotten"): Request that we delete your contact or submission records from our databases.
  • Right to Restrict or Object: Object to processing of your data for direct marketing or analytics.
  • Non-Discrimination: We will never deny services, alter prices, or degrade website functionality because you exercised your statutory privacy rights.

7. Protection of Minors

DISSCO is intended for general cultural audiences and is not directed at children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly harvest personally identifiable details from minors. If you believe a child has provided us with personal information, please notify us immediately for swift deletion.

8. Updates to this Policy

We may revise this Privacy Policy periodically to reflect technological adjustments, new exhibition features, or evolving advertising standards. Any updates will be published on this page with an updated "Last Revised" date. Continued engagement with DISSCO after modifications signifies your acknowledgment.

9. Data Controller & Privacy Inquiries

For any questions, requests regarding your personal data, or concerns regarding our advertising compliance, please reach out to our privacy desk:

DISSCO Privacy Governance

Attn: Privacy Inquiries
DISSCO Digital Platform — Mumbai, India
Email: hello@disco.art (Subject: [Privacy Inquiry])
Requests are handled in accordance with applicable data protection principles.