Privacy Policy

1. Controller

Alexander Pieper
Tabletop Lodge
Doberaner Str. 63
13051 Berlin, Germany
E-mail: hello@tabletop-lodge.de

2. The short version

This is a static website. It sets no cookies of its own, uses no analytics, and contains no tracking pixels or ad networks. Fonts and photographs are served from our own hosting. The only third-party content is imagery from Google's servers and — on the Collection page, and only if you click play — an embedded YouTube video. Personal data is processed only in the limited cases described below.

3. Hosting (AWS S3 & CloudFront)

This website is hosted as static files in an Amazon S3 bucket (region: e.g. eu-central-1, Frankfurt) and delivered through Amazon CloudFront, a content delivery network operated by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg ("AWS").

When you access the site, AWS processes connection data that your browser transmits automatically: IP address, date and time of the request, requested URL, referrer URL, browser type and version, and operating system. This data is technically necessary to deliver the website and is also written to access logs, which we use solely to ensure the stability and security of the service. Log files are deleted after 30 days.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in providing a fast, secure website. CloudFront may serve content from edge locations outside the EU/EEA so that the site loads quickly worldwide; AWS is certified under the EU-U.S. Data Privacy Framework, and we have concluded a data processing agreement (Art. 28 GDPR) with AWS including the EU Standard Contractual Clauses.

AWS privacy notice: aws.amazon.com/privacy

4. YouTube thumbnails & embedded videos

Several pages, including the Collection, show preview images (thumbnails) of our YouTube videos. These images are loaded directly from Google's image servers (i.ytimg.com). When such a page loads, your browser contacts Google's servers and transmits your IP address; Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) may process this data, including in the United States. Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in presenting our video content.

On the Collection page you can also play a video without leaving our site. To protect your privacy we use a two-click solution: no YouTube player and no Google resource for the player is loaded until you actively click the play button. Only then do we load an embedded player from youtube-nocookie.com — Google's privacy-enhanced mode, which does not set cookies for tracking purposes unless and until you actually start a video. Playing the video transmits your IP address and interaction data to Google/YouTube and may set cookies on your device; from that point YouTube's own privacy policy applies. The player never loads automatically, and you are free not to use it.

Legal basis for loading the embedded player: Art. 6 (1) (a) GDPR — your consent, which you give by clicking the play button. You can withdraw this consent at any time with effect for the future by not playing further videos. Google is certified under the EU-U.S. Data Privacy Framework. Google privacy policy: policies.google.com/privacy

5. Contact by e-mail

If you contact us by e-mail, we process the personal data you provide (your e-mail address and the content of your message) solely to handle your enquiry. Legal basis: Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual steps, otherwise Art. 6 (1) (f) GDPR. We delete correspondence once the enquiry is settled, unless statutory retention duties require otherwise.

6. External links & affiliate links

This site links to external services (YouTube, Instagram, TikTok, Discord, Amazon, and others). No data is transmitted to these providers by merely viewing our pages — only when you click such a link. Some Amazon links are affiliate links (Amazon Associates program): if you click one, Amazon sets cookies on amazon.de to attribute purchases; this happens on Amazon's site under Amazon's privacy policy, and we receive no personal data about you from it — only aggregate commission statistics.

7. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). To exercise these rights, contact us at the address above.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin — datenschutz-berlin.de

8. Changes to this policy

We will update this policy whenever the site's data processing changes — for example when the shop launches or a newsletter is introduced. Last updated: July 2026.