Data usage in Layers in the Peace Machine

 

How We Use Your Data

Processing of Visitor Data in Layers in The Peace Machine


We collect and store stories written by visitors of the artwork, and use them to train AI models that influence, among other things, the artwork's appearance. After the year 2026, the stories written by participants and the source code of the artwork will be published for non-commercial use. We will not retain the trained AI models after the exhibition period of the artwork ends.

 

Privacy Policy for the Layer of Sharing Website

  • Ekho Collective / Kakofonia Osk

    Tukkutorinkuja 2 D 130

    00580 HELSINKI


  • Vertti Luostarinen

    vertti.luostarinen@ekho.fi

    050 582 3131

  • Participant register

  • The collected text material serves as part of the artistic content for the artwork Rauhankoneen kerroksia (Layers in the Peace Machine), which is being created as part of the European Capital of Culture Oulu2026 project. Ekho Collective has the right to process and modify the material as needed for the artwork. The texts will be published on an online platform and as part of the artwork. Later, the texts will be published online for free non-commercial use.

    We collect the IP addresses of the website's visitors to ensure data security and to manage user numbers.


  • We collect peace memories from participants in text form. We do not collect personal data or information that could be used to identify the participant; the responses are anonymous. The participant is responsible for having the rights to the story they share.

    The IP addresses of website visitors and cookies essential for the service's functions are processed based on legitimate interest to ensure data security and to collect statistical data on website visitors in cases where they can be considered personal data. Consent for third-party cookies will be requested separately if needed.

  • The data stored in the register is obtained directly from the person themselves through texts (peace memories) submitted via an online form.

    The data is stored on a server maintained by Ekho Collective, which is physically located at Oulu City Hall. The Oulu Cultural Foundation owns the text material, and Ekho Collective maintains the register. At the end of the project, the text material will be handed over to the Oulu Cultural Foundation and may also be transferred to third parties for non-commercial use in accordance with the CC-BY-NC-4.0 license via the huggingface.com website.

    Before this, any personal data will be removed from the text material using automated methods. Ekho Collective does not take responsibility for personal data that may end up in the published material. The data will not be used for automated decision-making, profiling, or commercial purposes.

    IP addresses are anonymized and stored encrypted on a server maintained by Ekho Collective in accordance with the EU's General Data Protection Regulation (GDPR). They are kept only for as long as necessary for data security and managing visitor numbers.

  • Personal data is not transferred or disclosed outside of the European Union or the European Economic Area.

  • The participant is responsible for their own story and its anonymity, and they confirm this by checking the box on the form that says, "By submitting, I confirm that I am the original author of this memory and have the right to publish it. I also confirm that the memory does not contain any personal or sensitive information about others.." Since no personal data register is created for the stories, the participant does not have the right to request the deletion or correction of their data.

  • A person in the register has the right to request the deletion of their material from the register ("right to be forgotten"). Likewise, registered individuals have other rights in accordance with the EU's General Data Protection Regulation, such as the right to restrict the processing of personal data in certain situations. Requests must be sent in writing to the data controller within a one-month deadline. If necessary, the data controller may ask the person making the request to prove their identity. The data controller will respond to the customer within the timeframe specified by the EU's General Data Protection Regulation (generally within one month).