Privacy notice
Privacy
Short version: no cookies, no analytics, nothing loaded from third parties unless you click play on a video. Don’t take our word for it: open your browser’s developer tools and check. The server keeps standard access logs. If you send a message, we use it to answer you, and for nothing else.
1. Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) is the operator of this website:
Sven Lehnert
Calle Numancia, 51
35010 Las Palmas de Gran Canaria, Las Palmas
Spain
Email: legal at octooai.com
No data protection officer is required for this website.
2. What this website does not do
- No cookies and no local storage set by this website.
- No analytics, tracking pixels or advertising tools.
- No third-party content that loads on its own: no external fonts, maps or social widgets. Fonts are served from this server. Videos load from YouTube only after you click them (section 6).
3. Hosting and server logs
This website is hosted with Cloudways, a service of DigitalOcean, LLC (USA), on a server in the USA. When you open a page, the server receives what every browser sends: IP address, date and time, the address requested, browser and operating system and, if your browser sends it, the page you came from. This is written to access logs, which are kept for about 30 days; error logs can be kept for a few months.
Purpose: delivering the website and protecting it from abuse. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). The host processes this data on our behalf. Transfer to the USA: DigitalOcean, LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR).
This website is a static information page. It runs separately from the lab’s AI systems; the website itself passes nothing you enter to an AI model.
4. Contact form
If you send the contact form, we receive what you enter: name, email address, organisation and topic (both optional) and your message. The server also keeps a one-way coded (hashed) form of your IP address for one hour to limit repeated submissions.
The message is stored on the web server described in section 3 and sent to our mailbox, which is hosted by Google (Google Workspace). We use it only to read and answer your message. Legal basis: steps prior to a possible contract at your request (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
Messages that do not lead to a project are deleted within 12 months. If a project follows, the data becomes part of the business correspondence and is kept for as long as the law requires.
5. Calls and briefings
If we agree on a call (the free first call or the paid Private AI Architecture Briefing), we send you a meeting invitation by email, and for the briefing a payment link. The payment and meeting providers used for that are named in the email before you use them.
6. Videos (YouTube, loaded on click)
Some pages show a video from the SOLLE AI channel on YouTube. Until you click the play button, you see a still image served from this server: nothing is loaded from YouTube or Google and no data is sent to them.
When you click, the video is loaded from youtube-nocookie.com, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. From that moment Google/YouTube receives your IP address and the usual technical data of your browser, and may set cookies or use similar technologies on your device. Google may also process this data in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. What Google does with the data is described in its privacy policy at policies.google.com/privacy.
Legal basis: your consent, which you give by clicking play (Art. 6(1)(a) GDPR). You can withdraw it at any time for the future (Art. 7(3) GDPR) by not starting further videos and by deleting the cookies YouTube has set in your browser.
7. Links to other websites
This site links to other websites, for example solle-ai.com, YouTube and Hugging Face. Nothing is sent to them until you click a link; after that, their own privacy policies apply.
8. Your rights
You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). Where we process data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation (Art. 21). Where we process data on the basis of your consent, you can withdraw it at any time with effect for the future (Art. 7(3)). To use these rights, write to the address in section 1.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); in Spain this is the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid (aepd.es).
9. Encryption
This site is served over HTTPS (TLS) only.
Last updated: September 30, 2026