Privacy Notice

1. Data controller

The data controller is:

Privacy contact: info@lab-digital.it.

2. Data processed, purposes and legal bases

• Contact form Name and email (required); phone and message (optional), to reply to requests. Basis: GDPR Art. 6(1)(b) (pre-contractual steps at the data subject’s request) and, where applicable, Art. 6(1)(f) (legitimate interest in handling communications).
• Technical browsing / hosting data Technical data typical of requests to the site (e.g. IP address, date/time, URL, user-agent, referrer), for security and operation of the hosting service. Basis: GDPR Art. 6(1)(f).
• Usage statistics Aggregated or pseudonymised data on pages viewed, approximate geographic origin, referrers and traffic metrics, via the GoatCounter service, without profiling cookies. Basis: GDPR Art. 6(1)(f) (legitimate interest in measuring site use).
• Legal obligations Compliance with legal or tax obligations where necessary. Basis: GDPR Art. 6(1)(c).

We do not carry out automated decisions under GDPR Art. 22 or advertising profiling on the site.

3. Cookies

This site does not use profiling or advertising cookies. Cookies or technical tools strictly necessary for hosting infrastructure may be used. Usage statistics are not based on tracking cookies.

4. Recipients

Data may be disclosed, within the purposes above, to the providers of the services we use to run the site and our communications: hosting and forms (Netlify), statistics (GoatCounter), email, calendar and document storage (Google Workspace), and productivity tools and artificial intelligence assistants used to organise our work (e.g. Notion, Anthropic Claude, Cursor). Some of these providers act as processors; others process data under their own terms and privacy notices. For Anthropic Claude, we have switched off the use of content for training AI models. We do not sell personal data.

5. Transfers outside the EEA

Some providers may also process data outside the European Economic Area. Where required, such transfers take place under the safeguards in Chapter V GDPR (e.g. an adequacy decision and/or Standard Contractual Clauses).

6. Retention

Data are kept for as long as needed for the purposes for which they are collected and thereafter for any legal obligations or to protect rights. Contact-form messages are kept for as long as needed to handle the request and any resulting relationship.

7. Your rights

Within the limits of the GDPR you may exercise the rights of access, rectification, erasure, restriction, portability, objection and the other rights in Arts. 15–22 by contacting info@lab-digital.it.

You have the right to lodge a complaint with the competent supervisory authority. For a controller established in Portugal: CNPD — Comissão Nacional de Proteção de Dados (www.cnpd.pt).

8. Nature of providing data

Browsing the site is free. Name and email in the form are required for us to contact you; without them we cannot handle the request. Phone and message are optional.

9. Governing law and jurisdiction

Unless mandatory rules of law provide otherwise, this notice and the related processing are governed by Portuguese law and the GDPR. Exclusive jurisdiction: the courts of Loures (Portugal).

10. Data processed on behalf of clients

When we work on our clients’ accounts, websites or lists (advertising platforms, e-commerce, email marketing, analytics), the client is the controller of that data: the client decides the purposes and means of processing and chooses the platforms on its own accounts, which operate under contracts made directly with the client. Lab Digital acts as a processor, only on the client’s instructions and within the scope of the engagement. This notice does not cover that processing. We do not use client data for our own purposes; where possible we work on aggregated or anonymised data and avoid putting raw personal data from client accounts and lists into AI tools.

11. Updates

We may update this notice. The date at the top of the page shows the current version.