Data protection
Privacy
This notice covers our website, newsletter, email enquiries and Facebook and Instagram accounts.
Controller
Archil Chikovani
Koenigsberger Str. 14
69502 Hemsbach
Germany
Email: info@tbilisiabstract.com
Telephone: +49 176 93178605Website delivery and security
This website is hosted using ChatGPT Sites. OpenAI Ireland Ltd. processes personal data on our behalf to host, maintain, secure and support the website. When you access the site, technical request data may be processed, including your IP address, the requested page, date and time, browser and device information, and referrer. ChatGPT Sites also provides us with aggregate access analytics consisting of unique-visitor and page-view counts. We do not receive raw server logs from OpenAI.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are providing the website, maintaining its security and reliability, understanding aggregate use, and preventing misuse. Recipients are OpenAI and the technical service providers it uses for Sites. OpenAI may use sub-processors and may process data outside the European Economic Area. Where required, the safeguards described in the ChatGPT Sites Data Processing Addendum apply, including the EU Standard Contractual Clauses or an adequacy decision. You may contact us for information about or a copy of the relevant safeguards.
Technical data is retained only for as long as needed to deliver, secure and support the service, investigate misuse, or meet legal obligations. The exact period depends on the type of record and the applicable operational or legal requirement.
Contact by email
If you contact us by email, we process your email address, message and any information or attachments you send so that we can answer you. The legal basis is Article 6(1)(b) GDPR when your message concerns a contract or steps before entering into one, and otherwise Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries.
Our mailbox is provided by Namecheap, Inc. as a service provider. You can read its privacy policy. We delete correspondence when it is no longer needed for the enquiry, unless legal retention duties or the establishment, exercise or defence of legal claims require longer storage.
Providing information by email is voluntary. Without the information needed to understand and answer your enquiry, we may not be able to respond.
Newsletter
Our newsletter shares research projects, artists and updates from TAB. If you subscribe, we process your email address, subscription and confirmation records, delivery information and unsubscribe status. We use Kit Inc., USA, to manage subscriptions and send emails. Providing your email address is voluntary. Without it we cannot send the newsletter; our website and gallery information remain available without subscribing.
Confirmation and withdrawal
We ask for your consent at signup and send a confirmation email before activating your subscription. You can withdraw consent at any time by using the unsubscribe link in an email or contacting info@tbilisiabstract.com. Withdrawal applies to future processing and does not affect the lawfulness of earlier processing.
Email opens and link clicks
Kit records whether and when an email is opened and which links are clicked, linked to your subscriber record. This includes the confirmation email. It uses an embedded tracking image and individually identified links; technical information such as IP address, time and email-client or device information may also be processed. We use these statistics to understand interest in our newsletter and improve our communications. Open counts may be affected by email-client privacy features.
The signup asks you to agree to receiving emails and to this measurement. We rely on consent under Article 6(1)(a) GDPR and, where device storage or access requires it, Section 25(1) TDDDG. The current signup does not offer a separate tracking-free newsletter option. To stop future newsletter measurement, unsubscribe or contact us; unsubscribing also ends newsletter delivery. You can read programme announcements on this website without subscribing.
Kit, international transfers and retention
Kit and its service providers process subscriber information, including in the United States. Kit describes its processor obligations, subprocessors and international-transfer safeguards in its Data Processing Addendum, including the Data Privacy Framework and Standard Contractual Clauses where applicable. Its privacy policy explains its separate service-usage processing. Contact us for information about the applicable safeguards or a copy.
We keep subscription information while you subscribe. After withdrawal, we keep only information needed to respect your unsubscribe request, demonstrate consent or withdrawal, meet legal duties or handle legal claims, for as long as those purposes require. Consent evidence and unsubscribe suppression are handled on the basis of Article 6(1)(f) GDPR, with the interests of preventing unwanted email and defending legal claims; legally required retention relies on Article 6(1)(c) GDPR.
The website sends the form to Kit only when you submit it. Our signup page does not load Kit scripts, external fonts or an embedded Kit form before submission. Kit receives technical request information when your submission reaches its service. The rights and contact options below also apply to newsletter processing.
Archil Chikovani, whose contact details appear above, operates the Tbilisi Abstract Berlin Facebook Page and @tbilisiabstract on Instagram. We use these accounts to share information about our cultural programme and respond to enquiries. You can also contact us by email without using either platform.
Messages, comments and interactions
When you contact or interact with our accounts, we can see information the platform makes available to us, such as your username, public profile details, comments, reactions and messages, including attachments. Public comments and reactions may also be visible to others. We process this information to answer enquiries, manage conversations and moderate our pages. We use Meta Business Suite to manage the connected accounts and their inboxes; authorised account managers can access those conversations.
For our handling of enquiries about a contract or steps before entering into one, the legal basis is Article 6(1)(b) GDPR. Otherwise, we rely on Article 6(1)(f) GDPR for our communication and moderation, with the legitimate interests of answering questions about TAB and maintaining a relevant, safe discussion space. Providing information is voluntary; we may be unable to answer without the details needed to understand your enquiry. Please do not send sensitive personal information through social messages.
Audience statistics and Facebook Page Insights
Meta provides aggregate statistics about visits and interactions. We use these to understand interest in our programme and improve our communications. Our stated interest in using these statistics is the assessment and improvement of our cultural communications under Article 6(1)(f) GDPR. This does not determine the legal basis for Meta's separate processing.
For the collection of event data and its aggregation into Facebook Page Insights, we and Meta Platforms Ireland Limited have joint responsibilities under Article 26 GDPR as described in Meta's Page Insights Controller Addendum. Under that arrangement, Meta takes primary responsibility for the specified transparency, security and data-subject-rights obligations; we remain responsible for our own obligations. We receive aggregate Insights, not the underlying event records. The Page Insights information explains the arrangement. You can exercise your rights against either controller; you do not have to contact Meta first. We forward relevant Insights requests to Meta promptly and within seven calendar days, as required by the Addendum. This Facebook arrangement is not a claim that the same terms cover every Instagram activity.
Meta's processing and international transfers
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, provides Facebook and Instagram in the European Region. Meta also processes information for its own purposes, including operating its services, personalisation, security and advertising. This can include activity, device and cookie information, including information about visitors without an account. Meta's privacy policy describes its processing, recipients, legal bases, retention and privacy controls. Our website's statements about cookies and tracking do not describe what happens on Meta's platforms.
Meta may process data outside the European Economic Area, including in the United States. It describes the use of applicable adequacy decisions, the EU–US Data Privacy Framework for covered transfers, and Standard Contractual Clauses or other permitted mechanisms in its international-transfer information. You can request information about the relevant safeguards through the contact options in Meta's privacy policy. We do not control Meta's infrastructure or its separate retention periods.
Retention and your choices
We keep correspondence under our control while it is needed to answer an enquiry, then delete it unless legal retention duties or legal claims require longer storage. Public contributions may remain with the relevant post while it is available; you can remove your own contributions or ask us to review removal. Deletion by us does not necessarily erase copies retained by Meta or other users. Meta's retention criteria are explained in its privacy policy.
The rights and contact options below also apply to our social-media processing. You may object to processing based on our legitimate interests. You can contact us at info@tbilisiabstract.com or use Meta's privacy-policy contact options for its processing. As of the date of this notice, we have not launched paid social campaigns or uploaded customer lists for advertising. Changes to those activities require a further review of this notice.
Your rights
Subject to the legal conditions, you may request access, correction, deletion, restriction or portability of your personal data. You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Where processing is based on consent, you may withdraw that consent at any time for the future. To exercise your rights, contact info@tbilisiabstract.com.
You may lodge a complaint with a data-protection authority. The authority responsible for private-sector controllers based in Baden-Württemberg is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany, email poststelle@lfdi.bwl.de.
Cookies and external services
Our website code does not use advertising, third-party website analytics tools, embeds, external fonts or nonessential browser storage. The newsletter form and email measurement are described above. ChatGPT Sites provides the aggregate access analytics described above as part of the hosting service. Technologies that are strictly necessary to deliver and secure the website may be used without consent under Section 25(2) TDDDG where the legal conditions are met.
Automated decisions
We do not make decisions about you based solely on automated processing with legal or similarly significant effects, or create our own individual advertising profiles. Meta's separate processing is described in its privacy policy.
Last updated: 11 September 2026
Facebook and Instagram
Archil Chikovani, whose contact details appear above, operates the Tbilisi Abstract Berlin Facebook Page and @tbilisiabstract on Instagram. We use these accounts to share information about our cultural programme and respond to enquiries. You can also contact us by email without using either platform.
Messages, comments and interactions
When you contact or interact with our accounts, we can see information the platform makes available to us, such as your username, public profile details, comments, reactions and messages, including attachments. Public comments and reactions may also be visible to others. We process this information to answer enquiries, manage conversations and moderate our pages. We use Meta Business Suite to manage the connected accounts and their inboxes; authorised account managers can access those conversations.
For our handling of enquiries about a contract or steps before entering into one, the legal basis is Article 6(1)(b) GDPR. Otherwise, we rely on Article 6(1)(f) GDPR for our communication and moderation, with the legitimate interests of answering questions about TAB and maintaining a relevant, safe discussion space. Providing information is voluntary; we may be unable to answer without the details needed to understand your enquiry. Please do not send sensitive personal information through social messages.
Audience statistics and Facebook Page Insights
Meta provides aggregate statistics about visits and interactions. We use these to understand interest in our programme and improve our communications. Our stated interest in using these statistics is the assessment and improvement of our cultural communications under Article 6(1)(f) GDPR. This does not determine the legal basis for Meta's separate processing.
For the collection of event data and its aggregation into Facebook Page Insights, we and Meta Platforms Ireland Limited have joint responsibilities under Article 26 GDPR as described in Meta's Page Insights Controller Addendum. Under that arrangement, Meta takes primary responsibility for the specified transparency, security and data-subject-rights obligations; we remain responsible for our own obligations. We receive aggregate Insights, not the underlying event records. The Page Insights information explains the arrangement. You can exercise your rights against either controller; you do not have to contact Meta first. We forward relevant Insights requests to Meta promptly and within seven calendar days, as required by the Addendum. This Facebook arrangement is not a claim that the same terms cover every Instagram activity.
Meta's processing and international transfers
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, provides Facebook and Instagram in the European Region. Meta also processes information for its own purposes, including operating its services, personalisation, security and advertising. This can include activity, device and cookie information, including information about visitors without an account. Meta's privacy policy describes its processing, recipients, legal bases, retention and privacy controls. Our website's statements about cookies and tracking do not describe what happens on Meta's platforms.
Meta may process data outside the European Economic Area, including in the United States. It describes the use of applicable adequacy decisions, the EU–US Data Privacy Framework for covered transfers, and Standard Contractual Clauses or other permitted mechanisms in its international-transfer information. You can request information about the relevant safeguards through the contact options in Meta's privacy policy. We do not control Meta's infrastructure or its separate retention periods.
Retention and your choices
We keep correspondence under our control while it is needed to answer an enquiry, then delete it unless legal retention duties or legal claims require longer storage. Public contributions may remain with the relevant post while it is available; you can remove your own contributions or ask us to review removal. Deletion by us does not necessarily erase copies retained by Meta or other users. Meta's retention criteria are explained in its privacy policy.
The rights and contact options below also apply to our social-media processing. You may object to processing based on our legitimate interests. You can contact us at info@tbilisiabstract.com or use Meta's privacy-policy contact options for its processing. As of the date of this notice, we have not launched paid social campaigns or uploaded customer lists for advertising. Changes to those activities require a further review of this notice.