Privacy Policy
Last updated: 11 October 2026
Who is responsible for your data
TAB* — Technology · Aviation · Business — is an association in formation. Its registration in Malta is in progress. Until that registration is complete, the people jointly responsible for personal data collected through this website are:
- Paolo Sommariva, President
- Lima Azhieva, Director
You can reach us at info@tab.flights.
Once TAB* is registered as an association in Malta, the association becomes the controller in our place, and this page will be updated with its legal name, registration number and registered address. The way your data is handled will not change.
What we collect, and why
We collect only what you send us. We do not buy data, and we do not track you across other websites.
If you use the contact form
We store your name, email address, company, subject and message.
We use it to answer you. The basis is our legitimate interest in replying to people who write to us. We keep these messages for 24 months after the conversation ends, then delete them.
If you apply for membership
We store your organisation, website, registered address, country, VAT number, contact name, email, the membership category you chose, and any comments you add.
We use it to assess the application and to contact you about it. The basis is that this is a step you have asked us to take before entering an agreement.
These details are stored in our own database and are also sent to HubSpot, the customer relationship system we use to manage applications and correspondence. HubSpot stores them in the European Union.
If your application succeeds, we keep the record for as long as the membership lasts. If it does not, we keep it for 24 months so that we have a record of the decision, then delete it.
There is nothing to pay when you apply. TAB* is completing its registration in Malta, and membership fees and payment details follow once that is done.
If you create an account
The Hub, our members' area, is still being built. When accounts open, we will store your email address and a one-way encrypted version of your password through our authentication provider, together with your name and organisation and the role your account holds.
The basis is the agreement between us. We keep it for as long as you have an account, and for 24 months after you close it.
When you search the member directory
The directory lets you describe a problem in your own words. The text you type is sent to an AI model, through our host's AI gateway, which turns it into a numerical representation so it can be matched against member profiles. It is not used to train that model. We keep a normalised copy of recent searches and their results for a short time, so the same search does not have to be processed twice.
We also store a one-way hash derived from your connection, with a count of recent searches. We cannot work out who you are from it. It exists only to stop the directory being harvested by automated tools, and these records are deleted after 30 days.
The basis for both is our legitimate interest in running and protecting the directory.
The news index
The industry news index holds headlines, short summaries written by us, publication dates and links to the original publishers. It contains no personal data about you, and reading it does not require an account.
Cookies and visitor statistics
When you sign in, we store a session in your browser so that you stay signed in. It is necessary for the site to work and does not require your consent. Signing out clears it.
Our host records basic visitor statistics for this site — pages viewed, country, device type and the site you arrived from — in aggregate.
We do not run advertising trackers, heatmaps or session recording. If we ever add anything non-essential, we will ask for your consent first, and nothing will run until you agree.
Who else handles your data
Three providers process data on our behalf, under contract and only on our instructions:
- Lovable — builds and hosts the website
- Supabase — runs the database and the sign-in system
- HubSpot — stores membership applications and our correspondence with you, in the European Union
Our database runs in the United Kingdom (London). The United Kingdom is covered by a European Commission adequacy decision, which means personal data may be transferred there from the European Union without additional safeguards.
The member directory search additionally passes the text you type to Google's embedding model, through Lovable's AI gateway, as described above.
We do not sell your data, we do not share it with members, and we do not pass it to anyone else unless the law requires it.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the data we hold about you
- correct it if it is wrong
- delete it
- limit what we do with it
- stop processing it where we rely on legitimate interest
- hand it over in a portable form
Write to info@tab.flights and we will answer within one month.
If you are not satisfied, you can complain to the data protection authority in the country where you live or work. Once TAB* is registered in Malta, that will be the Office of the Information and Data Protection Commissioner (IDPC) in Malta.
Changes to this page
When this page changes in a way that matters, we update the date at the top. The move from "association in formation" to the registered association will be recorded here.