Legal

Privacy Policy

GDPR Compliant | Effective Date: April 2025

1. Data Controller

The data controller responsible for this website is:
Mehran Taleblou
Operating as: Leblou AI Analytics
Email: info@leblou-ai-analytics.com

2. What Data We Collect and Why

2.1 Website Access (Server Logs)

When you visit this website, our hosting provider (Strato AG, Germany) automatically records server log data. This includes your IP address (stored in anonymised or full form depending on server configuration), browser type, pages visited, date and time of access, and referring URL. This data is required for the technical operation of the website. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating a secure website. Retention: 7 days maximum.

2.2 Newsletter Subscription (Substack)

If you subscribe to "The Leblou Weekly Brief," your email address (and optionally your name) is processed by Substack Inc. (548 Market Street, San Francisco, CA 94104, USA). Legal basis: Art. 6(1)(a) GDPR — your explicit consent. You may withdraw consent and unsubscribe at any time via the unsubscribe link in every email. Substack's privacy policy: substack.com/privacy.

2.3 Email Contact

If you email us, your email address and message content are stored to respond to your inquiry. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in responding to communication. Retention: deleted after the inquiry is fully resolved, unless legal retention obligations apply.

3. Data We Do NOT Collect

• No tracking cookies or advertising cookies
• No analytics tools (no Google Analytics, no Hotjar, no Facebook Pixel)
• No remarketing or behavioural tracking
• No third-party advertising networks
• No fingerprinting or cross-site tracking

4. International Data Transfers

Newsletter data is processed by Substack Inc. in the United States. This transfer is based on EU Standard Contractual Clauses (Art. 46 GDPR). No other international transfers of personal data take place.

5. Data Security

This website uses HTTPS encryption (SSL/TLS) to protect data in transit. Our hosting provider Strato AG operates under German and EU data protection standards.

6. Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right of access (Art. 15) — obtain confirmation of what data we hold
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — request deletion of your data
• Right to restriction (Art. 18) — restrict how we process your data
• Right to data portability (Art. 20) — receive your data in a portable format
• Right to object (Art. 21) — object to processing based on legitimate interest
• Right to withdraw consent (Art. 7(3)) — withdraw newsletter consent at any time
• Right to lodge a complaint (Art. 77) — with your national supervisory authority

To exercise your rights: info@leblou-ai-analytics.com

German supervisory authority: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) — www.bfdi.bund.de

7. Social Media

Links to TikTok and Instagram on this website are simple hyperlinks. No data is transmitted to these platforms by merely visiting this website. Data is only processed by these platforms when you click through and visit them directly. Their respective privacy policies govern data processing on their platforms.

8. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Updates will be published on this page with a revised effective date.

Last updated: April 2025