Legal
Privacy Policy
Privacy notice pursuant to EU Regulation 2016/679 (GDPR).
⚠ Fields in [square brackets] must be filled with actual legal details before final publication.
1. Data Controller
The data controller is:
[Legal Entity Name]
[Full Address]
VAT: [XXXXXXXXXX]
Email: info@g1alabs.it
Website: www.g1alabs.it
For any request regarding the processing of personal data, please write to: info@g1alabs.it
2. Data Collected and Purposes
We collect and process the following personal data:
Contact form
When you use the contact form, we collect your name, email address and message content. This data is used solely to respond to your request.
Navigation data
During browsing, third-party systems collect statistical data on site usage (pages visited, device, geographic origin, interactions) in anonymous or pseudonymous form. This data is used for statistical analysis and site improvement.
Technical cookies
The site uses only technical cookies necessary for correct operation.
3. Legal Basis
Processing of contact form data is based on the data subject's consent (Art. 6(1)(a) GDPR) and on pre-contractual measures (Art. 6(1)(b)).
Processing of analytics data is based on the legitimate interest of the controller in improving the service (Art. 6(1)(f)), with data minimisation and anonymisation safeguards.
4. Data Recipients
Your data may be processed by the following service providers, each with their own privacy policy:
• Google Analytics (Google LLC) — site usage statistics. Data processed in the USA with adequate safeguards (Standard Contractual Clauses). Privacy policy: policies.google.com/privacy
• Microsoft Clarity (Microsoft Corporation) — anonymous session recording and heatmaps. Privacy policy: privacy.microsoft.com
• Vercel Inc. — site hosting and infrastructure. Privacy policy: vercel.com/legal/privacy-policy
• Aruba S.p.A. — transactional email delivery via SMTP. Privacy policy: www.aruba.it/informazioni/privacy.aspx
No data is shared with third parties for marketing or profiling purposes.
5. Retention Period
Contact form data is retained for the time strictly necessary to manage the request, and for a maximum of 12 months thereafter.
Analytics data collected by Google Analytics and Microsoft Clarity is retained according to their respective retention policies (default: 14 months for GA4).
6. Your Rights
Under the GDPR (Arts. 15–22), you have the right to:
• Access — obtain confirmation of processing and a copy of your data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — restrict processing in certain cases
• Portability — receive your data in a structured format
• Objection — object to processing based on legitimate interest
To exercise your rights, write to: info@g1alabs.it
You also have the right to lodge a complaint with your national data protection authority.
7. International Transfers
Some providers listed in section 4 (Google, Microsoft, Vercel) may process data outside the European Union. Such transfers are carried out in compliance with the safeguards required by the GDPR, through Standard Contractual Clauses or other adequacy mechanisms recognised by the European Commission.
8. Changes to this Policy
This policy may be updated periodically. The current version is always available on this page. We invite you to check it regularly.
Last updated: May 2025