Privacy Policy
Effective date: 12 October 2026
This policy applies to www.privatelabs.net. The Private Labs platform is covered by the privacy policy presented when you sign in to it.
Data controller
Private Labs S.r.l.
Via Carloforte, 60 — 09123 Cagliari, Italy
C.F., P.IVA and Registro Imprese di Cagliari: 04082120926
info@privatelabs.net
Data we collect
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| First name, last name, work email, company | Contact form | Replying to your enquiry and arranging a demonstration | Art. 6(1)(b) GDPR — steps taken at your request before entering into a contract |
| Pages viewed, time on page, approximate city, device, browser, referrer | Google Analytics | Measuring use of the site | Art. 6(1)(a) GDPR — consent |
Providing contact details is voluntary; without an email address we cannot reply. Analytics is collected only if you accept it in the cookie banner, and consent may be withdrawn at any time through the Cookie Policy.
This site keeps no web server access logs.
Recipients
| Recipient | Role | Data |
|---|---|---|
| Amazon Web Services EMEA SARL | Processor — hosting and email delivery | Contact form submissions |
| Google Ireland Ltd / Google LLC | Processor — analytics | Analytics data, where consented |
Contact form submissions are delivered to a Private Labs mailbox and are accessible to the staff who handle enquiries. Personal data may also be disclosed where required by law, or to establish, exercise or defend a legal claim. We do not sell or rent personal data.
Transfers outside the EEA
Contact form data is processed in the AWS eu-west-3 (Paris) region and does not leave the EEA.
Analytics data may be transferred to the United States by Google. Google LLC is certified under the EU–US Data Privacy Framework, so these transfers rely on the European Commission’s adequacy decision. For visitors in the EU, Google derives an approximate location from the IP address on servers located in the EU and then discards it; IP addresses are not logged or stored in Google Analytics 4.
Retention
| Data | Period |
|---|---|
| Contact form submissions | 24 months from the last exchange, unless a contract governs |
| Analytics data | 14 months |
| Diagnostic logs of the contact function | 30 days |
| Record of your cookie choice | 6 months |
Your rights
Under Articles 15 to 22 GDPR you may request access to, rectification, erasure, restriction or portability of your personal data, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time; withdrawal does not affect processing already carried out.
Requests should be sent to info@privatelabs.net and are answered within one month, as required by Article 12(3) GDPR.
Complaints
You may lodge a complaint with the Garante per la protezione dei dati personali (garanteprivacy.it) or with the supervisory authority of your country of residence or work.
Automated decision-making
This site carries out no automated decision-making or profiling producing legal effects.
Changes
Changes to this policy are published on this page with a new effective date. Where a change requires it, consent is requested again.