Privacy Notice

The controller responsible for the processing described in this notice is Power of Life Labs GmbH, Oberdorfweg 9, 8704 Herrliberg, Switzerland (the “Controller”).

Enquiries concerning data protection may be addressed to hello@power-of-life-labs.com.

This notice applies to personal data collected through this website. It covers two processing activities: the submission of introductions by chefs, and the registration of interest in a city by prospective guests.

The Controller does not conclude bookings or process payments through this website. Should either be introduced, this notice will be amended before the corresponding data is collected.

Categories of data: name, electronic mail address, city and up to five optional links to your work. Earlier introductions may also contain a description you supplied through a previous version of the form.

We record submission time, recruitment stage, our decision, conversation and follow-up status, relevant internal notes, and the identity of the personnel conducting the review. If we arrange a conversation, we also process the correspondence and scheduling information you provide.

Purpose: to respond personally, explore a possible collaboration, and organise our conversations with chefs. An automatic receipt is not an acceptance or a personal reply.

Where the EU or UK GDPR applies, the basis for responding to your request and exploring a collaboration is taking steps at your request before entering into a contract. Necessary internal follow-up, record-keeping and abuse prevention rely on our legitimate interests in managing enquiries and protecting the service. We do not use introductions for unrelated marketing.

Access is limited to personnel of the Controller responsible for reviewing introductions.

A rate limit of three submissions per electronic mail address per hour is applied to prevent misuse of the form.

Categories of data: electronic mail address, the city or town you specify (and country or region where supplied), the wording and version of your consent, submission and confirmation times, and any withdrawal. We also mark our own test submissions so they do not count as public demand.

Purpose: to notify you about FOMUSE dinners beginning in your chosen city. We also count interest by city to help plan where to launch; this internal planning does not publish your address.

Legal basis for notifications: consent, given by affirmative action and confirmed through a verification message. Announcements are not sent before confirmation. A confirmation may be resent if you request it. Where the EU or UK GDPR applies, aggregate demand planning and abuse prevention rely on our legitimate interests in planning the service and keeping it secure.

Consent may be withdrawn at any time, with effect for the future, by means of the link contained in every message sent by the Controller. Withdrawal does not affect the lawfulness of processing carried out before it.

Registration of interest does not constitute a representation that the Controller will commence operations in the specified city or on any particular date.

Hosting: Hetzner Online GmbH, Germany. The application and database use our Hetzner server allocated to Finland; the configured database-backup destination is Hetzner Object Storage in Nuremberg, Germany.

Electronic mail: METANET AG, Switzerland, provides our mailbox and SMTP service. Sending an email also involves the recipient’s chosen email provider.

Our hosting and mail providers process data to provide these services, including through their authorised subprocessors. Authorised personnel of the Controller have access where necessary. Data may also be disclosed where required by law. We do not sell personal data or share it for advertising, third-party analytics or profiling.

The Controller does not employ analytics, tracking, advertising or session-recording technologies of any kind.

Our own hosting, database-backup and mailbox arrangements involve Switzerland, Finland and Germany. Finland and Germany are in the EU/EEA. Switzerland recognises these countries as providing adequate protection; the EU and the UK recognise Switzerland as adequate, and the UK recognises the EEA. These adequacy arrangements cover the corresponding transfers between our listed locations; they are not a blanket approval of every onward transfer.

Your email provider may process messages in other countries under its own arrangements. Where a provider we engage makes a transfer not covered by an applicable adequacy decision, appropriate safeguards are required, such as approved contractual clauses. You may contact us for information about the safeguards applicable to your data.

Closed, unsuccessful chef introductions become due for deletion one calendar month after review and follow-up have ended. An hourly cleanup removes the introduction, internal notes and related stored delivery records. Open conversations, outstanding invitations or calls, and agreed collaborations are not treated as closed unsuccessful introductions. Collaboration records have their own applicable retention obligations.

Unconfirmed city signups become due for deletion after 30 days. Confirmed signups remain while we are planning notifications for that city, until you withdraw consent or we decide not to pursue it. We review whether that purpose still applies rather than treating consent as permission to keep an address indefinitely.

Withdrawal stops eligibility for notifications immediately. Cleanup removes the full signup and associated confirmation credentials and stored messages, retaining only the email address, the city scope and withdrawal time needed to prevent further messages for that signup. This limited suppression is kept for as long as needed to honour your choice, on the basis of our legitimate interest in preventing unwanted mail and meeting our obligations. A message already being transmitted may complete before cleanup.

These periods concern the live application. Daily database backups are configured to retain the latest seven copies; this is a copy limit, not a guaranteed seven-day age if a backup fails. Separate correspondence in our mailbox and older one-off recovery copies must also be considered when handling an erasure request. Backups are restricted to recovery, not used to restore marketing consent; deletions and withdrawals must be reapplied before a restored database resumes sending email. We may retain information necessary to meet a specific legal obligation or establish, exercise or defend a legal claim, and will explain any applicable exception.

Technical processing can include IP addresses, request times, browser and connection information, delivery status and diagnostic errors. It is used to operate the website, troubleshoot delivery and protect against abuse, not to build advertising profiles. Where the EU or UK GDPR applies, this relies on our legitimate interests in a secure, functioning service.

Application container logs are size-limited and rotated. Infrastructure and mail-service logs are governed by the relevant provider’s operational retention settings; information needed to investigate a specific incident may be kept until that investigation is resolved. Contact us for information about logs relevant to your request.

This website sets no cookies. It stores nothing on the device of a visitor: no cookies, no local storage and no session storage. It employs no analytics, advertising or tracking technology of any kind.

For that reason this website presents no cookie banner. There is nothing for a visitor to consent to, and a request for consent to something that does not occur would be misleading.

One exception arises outside the visitor experience: a single strictly necessary cookie is set when personnel of the Controller authenticate in order to review chef introductions. It is not accessible to scripts executed in the browser and is never set for a visitor.

Fonts, images, audio and video are served through our own website, not embedded from external media or font services. Our infrastructure providers necessarily handle those requests. Following an external link takes you to a separate service with its own privacy practices.

The Controller does not carry out automated decision-making producing legal effects or similarly significant effects concerning data subjects, and does not engage in profiling.

Depending on the law applicable to your data, you may request access, correction, deletion, restriction of processing and data portability. For people whose data is covered by the EU/EEA GDPR or UK GDPR, these rights are subject to the conditions and exceptions in that law. Swiss data-protection rights also apply where relevant.

Where we rely on legitimate interests, you may object on grounds relating to your particular situation. We must then stop unless we demonstrate an overriding lawful reason or need the data for legal claims. You may object to direct marketing at any time; we will stop using your data for that purpose.

Where processing is based on consent, that consent may be withdrawn at any time without giving reasons.

Requests may be submitted to hello@power-of-life-labs.com. The Controller may request information reasonably necessary to verify the identity of the requesting person.

A data subject who considers that the processing of their personal data infringes applicable law may lodge a complaint with a competent supervisory authority.

In Switzerland: the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.

In the United Kingdom: the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

In the EU/EEA, where the GDPR applies: you may complain to a supervisory authority, particularly in the country where you normally live, work, or believe an infringement occurred. You do not have to complain in Germany simply because a backup is hosted there. The European Data Protection Board lists the national authorities.

This notice is effective as of 2 October 2026. The Controller will amend it before collecting personal data for any purpose not described above, and will publish the amended version at this address.