This notice covers Joya Forum at joya.forum. Forum is designed as a small editorial publication, not an advertising or behavioural-tracking product. Reading public stories does not require a Joya account.
Controller
The controller responsible for Joya Forum is Johannes Burkhart, trading under the business name Joya, Gewerbepark Neudahn 1/2, 66994 Dahn, Germany. You can contact Joya at hello@joya.social.
Hosting and technical access data
Forum is hosted and delivered through Netlify. When you visit the site, technically necessary information such as your IP address, request time, browser and device information, requested pages, and server or security logs may be processed so the site can be delivered securely and reliably.
Articles, images and storage
Published Forum articles and media are stored using Supabase. Requests for article data and images can therefore involve technical connection data such as IP address, request metadata, and timestamps. Public Forum content does not require you to create an account.
Fonts
Forum currently loads Instrument Serif and Inter through Google Fonts. When those font files are requested, your browser connects to Google infrastructure and may transmit technical information including your IP address and browser details.
Cookies and local storage
The public editorial site does not use advertising cookies or behavioural analytics cookies. The protected publishing Desk uses a strictly functional, HTTP-only session cookie after an authorised administrator signs in. It is used only to maintain that administrative session.
External links and sharing
Forum contains links to Joya Social and offers sharing options for services such as WhatsApp, Facebook, LinkedIn, email, and your device's native share sheet. Information is sent to those services only when you choose to open or use them. Their own privacy terms then apply.
Why we process this data
Technical processing required to publish, secure, maintain, and protect Forum is carried out on the basis of Joya's legitimate interests under Article 6(1)(f) GDPR. Where processing requires consent, it will not be introduced without an appropriate consent mechanism.
Retention
Technical logs and operational records are retained only for as long as they are needed for delivery, security, troubleshooting, or applicable legal obligations. The Forum administrator session expires after eight hours unless it ends earlier.
Your rights
Subject to the conditions of the GDPR, you may have rights of access, rectification, erasure, restriction, data portability, and objection. You may also withdraw consent for future processing where consent is the legal basis. Requests can be sent to hello@joya.social.
Supervisory authority
You also have the right to complain to a data-protection supervisory authority. The authority responsible for Joya is the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany.
Changes
This notice will be updated if Forum's hosting, analytics, publishing, or other data-processing practices materially change.