Last updated: May 2026
Creator House is an independent live-in experience for creators and founders. It is operated by Tobias Loesch as an individual.
Contact for all privacy matters: tobias@creatorhouse.it.com
We are not a registered company. We do not have a data protection officer, as none is required under Art. 37 GDPR for our scale of operations.
This website is hosted by Vercel Inc., 340 Pine Street, San Francisco, CA 94104, USA. When you visit any page, Vercel's servers automatically record standard access data:
This data is used only for technical operation and security. It is not linked to you personally and is deleted automatically within 7 days.
Legal basis: Art. 6(1)(f) GDPR - legitimate interest in operating a functional and secure website. Transfers to the USA are covered by standard contractual clauses (SCCs) and Vercel's DPA: vercel.com/legal/dpa
This website uses self-hosted web fonts. Font files are served directly from our own hosting infrastructure (Vercel, see above) rather than from Google or any other third-party font provider.
No request is made to Google's servers when a page loads, and no data (including your IP address) is transmitted to Google for the purpose of font loading.
Some videos on this website are served from Vercel Blob Storage (Vercel Inc., see above). When a page containing these videos is loaded, your browser connects to Vercel's servers and your IP address is transmitted as part of that request.
Videos hosted in /assets/ are served directly by the same
Vercel infrastructure. No third-party video embed services (e.g. YouTube,
Vimeo) are used.
If you apply to Creator House via the website form, we collect:
This data is used solely to evaluate and respond to your application. It is not shared with third parties, used for marketing, or sold.
Legal basis: Art. 6(1)(b) GDPR - processing necessary for pre-contractual steps at your request (reviewing your application). No separate consent checkbox is required for this reason.
Retention: Application data is deleted within 6 months of a decision being made. If you are accepted, we retain basic contact details for alumni documentation for up to 3 years.
All applications are reviewed personally. No automated decision-making or profiling (Art. 22 GDPR) takes place.
You can withdraw your application at any time by emailing us. Your data will be deleted promptly upon request.
If you book a place at an event or trip, we collect additional data beyond a general application: identity document details (where required for visas, insurance, or travel logistics), dietary and health information (such as allergies, only where you choose to provide it), and payment information, which is processed by a third-party payment provider. We do not store full card numbers.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract); for health-related data, Art. 9(2)(a) GDPR (explicit consent).
Retention: up to 10 years, in line with statutory tax and accounting record-keeping requirements.
Photos and video of participants are taken at events and used for marketing and content purposes. By registering for an event, you agree to our Event Terms, which set out in full the rights we hold to use this material.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(a) GDPR (consent given by accepting the Event Terms).
We use Google Analytics 4 (Google Ireland Limited), a web analytics service. This processes your (truncated) IP address, device and browser information, and UTM parameters from the page URL, which are held for the duration of your session in your browser (sessionStorage).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring site usage) and, where required, Art. 6(1)(a) GDPR (consent). More information: policies.google.com/privacy. You can object to this processing using browser add-ons that block Google Analytics.
If you are located in the EU, EEA, or UK, you have the following rights regarding your personal data:
To exercise any of these rights, email us at tobias@creatorhouse.it.com. We will respond within 30 days as required by Art. 12(3) GDPR.