Privacy Policy

Privacy notice pursuant to EU Regulation 2016/679 (GDPR).

⚠ Fields in [square brackets] must be filled with actual legal details before final publication.

1. Data Controller

The data controller is:


[Legal Entity Name]

[Full Address]

VAT: [XXXXXXXXXX]

Email: info@g1alabs.it

Website: www.g1alabs.it


For any request regarding the processing of personal data, please write to: info@g1alabs.it

2. Data Collected and Purposes

We collect and process the following personal data:


Contact form

When you use the contact form, we collect your name, email address and message content. This data is used solely to respond to your request.


Navigation data

During browsing, third-party systems collect statistical data on site usage (pages visited, device, geographic origin, interactions) in anonymous or pseudonymous form. This data is used for statistical analysis and site improvement.


Technical cookies

The site uses only technical cookies necessary for correct operation.

3. Legal Basis

Processing of contact form data is based on the data subject's consent (Art. 6(1)(a) GDPR) and on pre-contractual measures (Art. 6(1)(b)).


Processing of analytics data is based on the legitimate interest of the controller in improving the service (Art. 6(1)(f)), with data minimisation and anonymisation safeguards.

4. Data Recipients

Your data may be processed by the following service providers, each with their own privacy policy:


Google Analytics (Google LLC) — site usage statistics. Data processed in the USA with adequate safeguards (Standard Contractual Clauses). Privacy policy: policies.google.com/privacy

Microsoft Clarity (Microsoft Corporation) — anonymous session recording and heatmaps. Privacy policy: privacy.microsoft.com

Vercel Inc. — site hosting and infrastructure. Privacy policy: vercel.com/legal/privacy-policy

Aruba S.p.A. — transactional email delivery via SMTP. Privacy policy: www.aruba.it/informazioni/privacy.aspx


No data is shared with third parties for marketing or profiling purposes.

5. Retention Period

Contact form data is retained for the time strictly necessary to manage the request, and for a maximum of 12 months thereafter.


Analytics data collected by Google Analytics and Microsoft Clarity is retained according to their respective retention policies (default: 14 months for GA4).

6. Your Rights

Under the GDPR (Arts. 15–22), you have the right to:


Access — obtain confirmation of processing and a copy of your data

Rectification — correct inaccurate or incomplete data

Erasure — request deletion of your data ("right to be forgotten")

Restriction — restrict processing in certain cases

Portability — receive your data in a structured format

Objection — object to processing based on legitimate interest


To exercise your rights, write to: info@g1alabs.it


You also have the right to lodge a complaint with your national data protection authority.

7. International Transfers

Some providers listed in section 4 (Google, Microsoft, Vercel) may process data outside the European Union. Such transfers are carried out in compliance with the safeguards required by the GDPR, through Standard Contractual Clauses or other adequacy mechanisms recognised by the European Commission.

8. Changes to this Policy

This policy may be updated periodically. The current version is always available on this page. We invite you to check it regularly.


Last updated: May 2025