Privacy

Provisional version · Last updated: 29 October 2026

1. Data controller

2. Website and hosting

To operate and secure this website, we process IP addresses, access times, pages visited, and browser and device information. The legal basis is our legitimate interest in providing a reliable website (Article 6(1)(f) GDPR).

Hosting: OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. OpenAI processes data on our behalf with other service providers under its Data Processing Addendum. Transfer safeguards are available on request. ChatGPT Sites provides access statistics and uses Cloudflare security cookies (__cf_bm, cf_clearance), which are not controlled by our cookie banner.

3. Cookie settings

Your choice is stored in your browser together with its timestamp and version for up to 180 days (section 25(2), no. 2 TDDDG; Article 6(1)(c) GDPR). You can withdraw consent at any time by selecting “Cookie settings” and then “Reject”. Withdrawal does not affect the lawfulness of processing carried out beforehand.

To check our consent management, we count decisions as daily totals without user identifiers or behavioural profiles (Article 6(1)(f) GDPR). Technical connection data arises during transmission. Totals older than 90 days are deleted the next time the statistics are accessed.

4. Google Analytics

Only with your consent do we use Google Analytics 4 to analyse website usage (Article 6(1)(a) GDPR; section 25(1) TDDDG). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data processed includes page views, cookie identifiers, and browser, device and usage data. The IP address is transmitted when the connection is established.

Analytics cookies expire after no more than 60 days, and user and event data is retained for two months, in both cases without automatic renewal. Aggregated standard reports are excluded from these retention periods. Google Signals and personalised advertising are disabled. Withdrawing consent stops measurement and deletes analytics cookies.

Google processes data on our behalf, where applicable also through Google LLC in the United States. Google cites the EU-US Data Privacy Framework and Standard Contractual Clauses as bases for transfers. Details: processing terms, transfer safeguards, privacy policy.

5. Contact and internal sign-in

We use contact details and messages to handle your enquiry: under Article 6(1)(b) GDPR for contractual enquiries, otherwise on the basis of our legitimate interest in business communication under point (f). Once the enquiry has been dealt with, we delete this data unless a retention obligation under point (c) or a legitimate reason for retention applies.

Our email provider is Host Europe GmbH, c/o Spaces, Gertrudenstraße 30–36, 50667 Köln, Germany, using Microsoft 365 Email Essentials. A data processing agreement is in place with Host Europe. Host Europe uses Microsoft for Exchange mailboxes and groupware. Information on subprocessors and security measures is available in Host Europe’s data protection documents, documents 17–19. Further information: Host Europe privacy policy.

Germany is configured as the storage location for customer data at rest covered by Microsoft’s data residency commitment. Processing in third countries remains possible under the contractual terms. Microsoft provides EU Standard Contractual Clauses for this purpose and cites its certification under the EU-US Data Privacy Framework. Details of transfers, storage and deletion are set out in the Microsoft Data Protection Addendum.

Solely for access to internal statistics, we check the user identifier and email address during ChatGPT sign-in to control access (Article 6(1)(f) GDPR). These details are not stored in the statistics. Visiting the public website does not require sign-in.

6. Insights and invitations by email

Email distribution through Mailchimp is being prepared; registration on this website is not yet enabled. The intended process is as follows:

With your consent, you will receive insights, fresh perspectives and invitations from la Tablée. by email (Article 6(1)(a) GDPR). We need your email address for this purpose. Registration is voluntary and only takes effect once you click the link in a confirmation email (double opt-in). To document consent, we process the consent wording and the time and IP address of registration and confirmation (Article 6(1)(c) in conjunction with Article 7(1) GDPR).

The provider is The Rocket Science Group LLC, trading as Mailchimp, 405 N Angier Ave. NE, Atlanta, GA 30308, United States. Mailchimp processes registration and distribution data on our behalf, including in the United States and through subprocessors. Its Data Processing Addendum provides for the EU-US Data Privacy Framework and, where necessary, Standard Contractual Clauses for transfers to the United States. Further information: Mailchimp privacy policy.

Distribution is planned without individual open or click tracking. Technical distribution information, such as delivery errors and unsubscribe status, is processed to manage the mailing list (Article 6(1)(f) GDPR; our interest in reliable delivery and respecting unsubscribes).

You can withdraw consent at any time using the unsubscribe link in each email or by contacting info@latablee.eu. Withdrawal does not affect the lawfulness of previous processing. We use your data for distribution until you withdraw consent. Afterwards, only necessary consent records and a suppression entry are retained insofar as required for evidence, the defence of legal claims or the prevention of further mailings (Article 6(1)(c) or (f) GDPR). Data is deleted once this purpose no longer applies and no retention obligation remains.

7. Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You can withdraw consent at any time with effect for the future. You may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR), and to direct marketing at any time.

To exercise these rights, contact info@latablee.eu. You can lodge a complaint with a data protection supervisory authority, in particular the Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany.