Privacy
Privacy Policy
This website sets no cookies, uses no analytics or tracking, and loads no fonts, videos or maps from third parties. We process personal data only to deliver these pages and to reply to you.
1. Controller
Hangzhou Chuncao Mingnian Technology Co., Ltd. (杭州春草明年科技有限公司), represented by Tianyang Wu
Room 502-378, Building 2, Zhejiang Private Enterprise Development Building, No. 23 Fuye Lane, Yingfeng Subdistrict, Xiaoshan District, Hangzhou 311215, Zhejiang Province, People’s Republic of China
Email: seed@thecolere.org
Our company is based in the People’s Republic of China and has no establishment in the EU. Where we address people in the EU, we comply with the General Data Protection Regulation (GDPR). Enquiries are handled by Tianyang Wu in China. See also the Imprint. The German version of this policy prevails.
2. Visiting the website (hosting by Cloudflare)
The website is delivered through Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes the technical data this requires: IP address, date and time, the address requested, browser and operating system details, and the referring page. The purpose is to deliver the pages and to protect them from attacks and abuse. The connection is encrypted with TLS.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure, reachable website. Cloudflare acts as our processor under its data processing agreement. We do not store or analyse access logs ourselves. Cloudflare deletes technical log data once it is no longer needed for operation and security (cloudflare.com/privacypolicy).
Email address protection
On the home pages, Cloudflare encodes email addresses in the page source so they cannot be harvested automatically. A small script from our own domain decodes them in your browser. It sets no cookies and stores nothing on your device.
Error reports (Network Error Logging)
Cloudflare may ask your browser to send a technical report to Cloudflare if a connection fails (including IP address, the address requested and the type of error). Nothing is reported when pages load normally. The legal basis is Art. 6(1)(f) GDPR.
3. Contact by email
Emails to addresses at thecolere.org are received by Cloudflare Email Routing and forwarded to our mailbox at Google (Gmail; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), where they are stored. We send replies from this mailbox through the email delivery service Resend (see section 4). We process your email address, your name, the content of your message and the usual metadata.
The purpose is to answer your enquiry and, where relevant, to prepare and carry out a collaboration. The legal basis is Art. 6(1)(b) GDPR where a contract or its preparation is concerned, and otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries).
The mailbox is a Google account for which Google does not offer a data processing agreement. Google therefore also processes the messages as an independent controller under its own privacy policy (policies.google.com/privacy). The legal basis for forwarding and storage is Art. 6(1)(f) GDPR (our interest in a reliable mailbox).
4. Contact form
When you use the form, we process your name, email address, organisation (optional), your message and the language you chose. A function running on Cloudflare passes these details to the email service Resend (Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA), which turns them into an email to seed@thecolere.org; your IP address is not passed on to Resend. Section 3 applies from there. The website itself does not store form data.
Resend acts as our processor and keeps message content and delivery logs in the USA for 30 days. We need your name, email address and message in order to reply; without them the form cannot be sent. You are under no legal or contractual obligation to give us this data, and you can always write to us by email instead. The legal bases are the same as in section 3.
Spam protection
The form contains a field that people do not see and checks how quickly it was filled in. Nothing is stored on your device for this.
5. WhatsApp and WeChat
The QR codes on this site are images on our own server; nothing is loaded from WhatsApp or WeChat when you view the page. If you contact us through WhatsApp (WhatsApp Ireland Limited, Meta) or WeChat (Tencent), those providers also process your data under their own terms: whatsapp.com/legal/privacy-policy-eea, wechat.com/en/privacy_policy.html. We use the content only to communicate with you; legal bases as in section 3.
6. Recipients and transfers outside the EU
- Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA: hosting, email forwarding. Processor. cloudflare.com/privacypolicy
- Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA: delivery of form messages and our replies. Processor. resend.com/legal/privacy-policy
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA: storage of our mailbox. Independent controller (see section 3). policies.google.com/privacy
Cloudflare, Resend and Google LLC are certified under the EU-U.S. Data Privacy Framework, so transfers to them in the USA rely on the European Commission’s adequacy decision of 10 July 2023 (Implementing Decision (EU) 2023/1795). The data processing agreements of Cloudflare and Resend also include the EU standard contractual clauses (Implementing Decision (EU) 2021/914).
We read and answer your messages in the People’s Republic of China, for which there is no EU adequacy decision. When you write to us, you send your message directly to us as the controller; our further processing is subject to the GDPR and to China’s Personal Information Protection Law (PIPL).
7. How long we keep data
- Enquiries that do not lead to a collaboration are deleted 12 months after the last contact.
- For projects, correspondence on contracts and invoices is kept for as long as statutory retention rules require (under Chinese law, up to 30 years for accounting records). Other project correspondence is deleted 3 years after the project ends.
- Resend deletes form messages and delivery logs automatically after 30 days.
- If you ask us to delete your data, we do so within 30 days and confirm it to you, unless a retention duty applies.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An email to seed@thecolere.org is enough.
Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state where you live or work.
We do not use automated decision-making or profiling.
Last updated: 2 November 2026