Privacy & cookie policy
Last updated: 2 October 2026
Who is responsible
The controller of your personal data is Jorge Taus Valle, trading as Tavalle, 100, rue Auguste Tremont, L-2624 Luxembourg.
For any question about your data, write to [email protected] with “Privacy” in the subject.
What we collect and why
- Demo request form: your name, e-mail, company, phone, the product you are interested in, your message, the language of the page, and the IP address and time of the request. We use them to answer you, organise the demo and follow up on your request. They are saved as a contact in our own CRM and sent to our sales mailbox. Legal basis: steps taken at your request before a contract, and our legitimate interest in following up business enquiries (GDPR art. 6(1)(b) and (f)).
- E-mails you send us: your address and the content of your message, to answer you (same legal basis).
- Technical logs: IP address, date and time, page requested and browser type, to deliver the website and protect it against abuse (legitimate interest, art. 6(1)(f)).
- Google Analytics statistics: only if you accept analytics cookies (consent, art. 6(1)(a)) — see “Cookies” below.
We do not sell your data, we do not build advertising profiles and we do not make automated decisions about you.
How long we keep it
- Demo requests and correspondence: up to 3 years after our last contact. If you become a customer, for the duration of the contract, and invoices for 10 years as required by Luxembourg accounting law.
- Technical logs: up to 3 months.
- Google Analytics data: at most 14 months.
- Your cookie choice: 6 months, then we ask again.
Who receives it
Only the service providers we need to run the website and answer you, each bound by a data processing agreement:
- Hetzner Online GmbH (Germany) — hosting of the website and our Tavalle business app, on servers in Helsinki, Finland.
- Cloudflare, Inc. — domain name, DNS, content delivery and protection against attacks.
- Google Ireland Ltd — our e-mail (Google Workspace) and, only with your consent, Google Analytics.
Cloudflare and Google may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
Cookies
tavalle.com uses no advertising cookies. The fonts are served from our own server, so your browser does not contact Google Fonts. Analytics cookies are only set if you accept them:
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| tavalle-consent (browser storage) | tavalle.com | Remembers your cookie choice | 6 months | Necessary |
| tavalle_lang | tavalle.com | Remembers the language you picked, so the home page opens in it | 1 year | Necessary |
| _ga | Google Analytics | Tells visitors apart for statistics | 2 years | Analytics (consent) |
| _ga_ZTB23EL8NN | Google Analytics | Keeps track of the current visit | 2 years | Analytics (consent) |
You can change or withdraw your choice at any time with the “Cookie settings” link at the bottom of every page. You can also delete or block cookies in your browser settings.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use (including follow-up e-mails), and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to [email protected]; we answer within one month.
You can also complain to the Luxembourg data protection authority: Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux — cnpd.lu.
Security
Connections are encrypted (HTTPS), access to our systems is limited to the people who need it, and data is backed up every night.
Data in the Tavalle applications
This policy covers tavalle.com and our own contacts. Data that our customers store in their Tavalle app is processed on their behalf, under the terms of their contract.
Changes
We may update this policy. The date at the top shows the latest version.