Privacy Policy
This policy explains what personal data we process when you visit this website or join the Cobundle waitlist, and what rights you have under the EU General Data Protection Regulation (GDPR). Last updated: 6 November 2026.
1. Controller
Beslic Labs Inh. Gabriel Beslic
Homburger Landstrasse 455
60433 Frankfurt am Main, Germany
Email: info@cobundle.io
We are not required to appoint a data protection officer. For any privacy question, write to the address above.
2. Hosting and server logs
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel automatically processes the data your browser sends: IP address, date and time of the request, the page requested, referrer URL, browser and operating system. This is technically necessary to deliver the website and keep it secure and stable. Logs are kept only briefly and then deleted. When you submit the waitlist form, your entry is also processed on Vercel’s servers on its way to Brevo (see section 5); it is not stored there.
Legal basis: our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR). We have a data processing agreement with Vercel. Vercel is certified under the EU-US Data Privacy Framework, so transfers to the USA rest on the European Commission’s adequacy decision (Art. 45 GDPR), with standard contractual clauses as an additional safeguard.
3. Analytics
We use Vercel Web Analytics to count page views and see which pages are useful. It sets no cookies and stores nothing on your device. Visitors are told apart by a hash of the request data that is discarded after 24 hours, so we can’t identify you or follow you across days or other websites. We only see aggregated figures such as page, referrer, country, browser and device type.
Legal basis: our legitimate interest in understanding and improving our website (Art. 6 (1) (f) GDPR).
4. Cookies and fonts
This website sets no cookies of its own and uses no advertising or tracking cookies. Fonts are served from our own server, so loading a page does not connect you to Google or any other font provider.
5. Waitlist
When you join the waitlist, we process your email address and whether you want to join as a sponsor or a host. We use this only to contact you about early access and the launch of Cobundle. Legal basis: steps taken at your request (Art. 6 (1) (b) GDPR). We don’t send you a newsletter or advertising.
The data is stored with our email provider Brevo (Brevo SAS, formerly Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), which processes it on our behalf under a data processing agreement and stores it in the EU. Emails we send you about early access contain no open or click tracking.
We review the list regularly and delete your data once we no longer need it for this purpose, and at the latest when you ask us to. You can leave the waitlist at any time by writing to info@cobundle.io.
6. Booking a call with Cal.com
You can book a call with us through Cal.com, Inc., USA, in two ways: through a calendar shown after you join the waitlist, or through the “Book a meeting” link, which opens our booking page on cal.com. The calendar after signup only loads once you click “Load calendar”. Until you click it or the link, no data is sent to Cal.com. When you load the calendar, Cal.com receives your IP address and the email address you entered, so it is filled in for you. If you book, Cal.com also processes the details you enter (such as name and chosen time) and may store technically necessary data in your browser to run the booking.
Legal basis: steps taken at your request (Art. 6 (1) (b) GDPR); storage in your browser is strictly necessary for the service you asked for (§ 25 (2) no. 2 TDDDG). Cal.com acts on our behalf under a data processing agreement; transfers to the USA are covered by standard contractual clauses (Art. 46 (2) (c) GDPR). Booking data is deleted once the call is done and no longer needed.
7. Contacting us by email
If you email us, we use your message and address to answer you (Art. 6 (1) (b) or (f) GDPR) and delete them once your request is resolved, unless we must keep them by law.
8. Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), and to receive it in a portable format (Art. 20). Where we rely on legitimate interest, you can object to the processing at any time on grounds relating to your particular situation (Art. 21, see below). To use any of these rights, write to info@cobundle.io.
Right to object (Art. 21 GDPR). Where we process your data based on our legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation. We will then stop processing it unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. An informal email to info@cobundle.io is enough.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.
9. Security
This website is only served over an encrypted connection (TLS), so data you send us can’t be read by third parties in transit.
10. Do you have to provide data?
No. You can browse this website without giving us any personal data. Your email address is only needed if you want to join the waitlist. We don’t use automated decision-making or profiling.