Privacy Policy

  1. Introduction

In the following, we provide information about the collection of personal data when using:

our website katelabs.ai (landing page for the product Kate)

our profiles on social media.

Personal data is any data that can be related to a specific natural person, such as their name or email address.

1.1. Contact Details

The controller within the meaning of Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is:

Kate Labs
Email: privacy@katelabs.ai

1.2. Scope of Data Processing, Processing Purposes, and Legal Bases

We detail the scope of data processing, processing purposes, and legal bases below. In principle, the following come into consideration as the legal basis for data processing:

Art. 6 para. 1 s. 1 lit. a GDPR serves as our legal basis for processing operations for which we obtain consent (e.g., newsletter/waitlist subscription).

Art. 6 para. 1 s. 1 lit. f GDPR serves as the legal basis when we rely on legitimate interests, e.g., for cookies necessary for the technical operation of our website.

1.3. Data Processing Outside the EEA

Insofar as we transfer data to service providers or other third parties outside the EEA, the security of the data during the transfer is guaranteed by adequacy decisions of the EU Commission, insofar as they exist (Art. 45 para. 3 GDPR).
If no adequacy decision exists, the legal basis for transfer is usually standard contractual clauses (Art. 46 para. 2 lit. c GDPR).

1.4. Storage Duration

Unless expressly stated in this privacy policy, the data we store will be deleted as soon as it is no longer required for its intended purpose and no legal obligations to retain data conflict with deletion.

1.5. Rights of Data Subjects

Data subjects have the following rights against us with regard to their personal data:

Right of access,

Right to correction or deletion,

Right to limit processing,

Right to object to processing,

Right to data portability,

Right to revoke consent at any time.

Data subjects also have the right to complain to a data protection supervisory authority. Contact details of supervisory authorities are available here: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html
.

1.6. Obligation to Provide Data

When subscribing to our waitlist, you must provide an email address. Without this data, we cannot provide you with updates about Kate.

1.7. No Automatic Decision Making

We do not use fully automated decision-making processes according to Art. 22 GDPR.

1.8. Contact

When contacting us by email, the data you provide (e.g., your name and email address) will be stored in order to answer your request. The legal basis is our legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR).

  1. Newsletter / Waitlist

Interested parties can subscribe to our waitlist or newsletter by providing an email address. We process this data exclusively for sending updates about our product Kate.

The legal basis is your consent (Art. 6 para. 1 s. 1 lit. a GDPR). Consent can be revoked at any time, e.g., via the unsubscribe link in our emails. Processing prior to revocation remains lawful.

We use the tool Loops, provided by Loops, Inc., San Francisco, USA (privacy policy: https://loops.so/legal/privacy
). Loops processes email addresses and related data. Where data is transferred outside the EEA, such transfers are safeguarded through Standard Contractual Clauses in accordance with GDPR requirements.

  1. Data Processing on Our Website
    3.1. Informative Use of the Website

When you visit our website without actively providing data, we collect the following information automatically to ensure stability and security (Art. 6 para. 1 s. 1 lit. f GDPR):

IP address

Date and time of the request

Time zone difference to GMT

Access status / HTTP status code

Amount of data transferred

Website from which the request comes

Browser and operating system used

These log files are deleted after 14 days.

3.2. Web Hosting and Delivery

Our website is built and hosted with Framer. The provider is Framer B.V., Amsterdam, The Netherlands. Privacy policy: https://www.framer.com/legal/privacy-policy/
.

The legal basis is our legitimate interest in providing a secure and performant website (Art. 6 para. 1 s. 1 lit. f GDPR). Depending on location, Framer may rely on sub-processors and service providers outside the EEA; such transfers are secured via Standard Contractual Clauses.

3.3. Cookies

We only use technically necessary cookies, such as those required for website operation. No tracking or marketing cookies are set.

  1. Data Processing on Social Media Platforms

We maintain profiles on social media platforms (e.g., LinkedIn, X/Twitter) to present our organization and communicate with interested parties. The operators of these platforms may process user data for advertising purposes.

If users contact us via these platforms, we process the provided data in order to respond. Legal basis: Art. 6 para. 1 s. 1 lit. f GDPR.

X (Twitter): Operator X Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Privacy policy: https://x.com/de/privacy

LinkedIn: Operator LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Privacy policy: https://www.linkedin.com/legal/privacy-policy

  1. Changes to This Privacy Policy

We reserve the right to change this privacy policy with effect for the future. The current version is always available here.

  1. Questions and Comments

If you have any questions or comments regarding this privacy policy, please contact us at: privacy@katelabs.io

Last updated: October 2025