Privacy Policy

1. Data Controller

The data controller responsible for data processing on this website is:

2. What Data We Collect

2.1 Information You Provide

• Contact information (name, email) when you subscribe to our newsletter via HubSpot
• Information you provide when contacting us

2.2 Information Collected Automatically

• Technical information: IP address (anonymized), browser type, operating system, referring URL
• Usage data: pages viewed, time spent, navigation paths
• This data is collected only with your consent via cookies, or without cookies via privacy-friendly analytics (Umami)

3. Purpose and Legal Basis

3.1 Based on Consent (Art. 6(1)(a) GDPR)

• Google Analytics: website usage analysis (only after explicit cookie consent)
• Newsletter: marketing communications via HubSpot (only after opt-in)

3.2 Based on Legitimate Interests (Art. 6(1)(f) GDPR)

• Umami Analytics: cookieless, privacy-friendly website analytics to improve our website (no personal data is stored)
• Ensuring the security and functionality of our website

4. Cookies and Tracking Technologies

We use the following categories of cookies and tracking technologies:

You can manage your cookie preferences at any time via the "Manage Cookies" option in our cookie banner.

5. Third-Party Services and Data Processors

We use the following third-party services to operate this website:

• Google Analytics (Google LLC, USA) — Website analytics. Data is transferred to the USA under Standard Contractual Clauses (Art. 46(2)(c) GDPR). Only activated with your consent.
• Umami Analytics (Umami Software Inc.) — Privacy-friendly, cookieless analytics. No personal data is collected or stored.
• HubSpot (HubSpot Inc., USA) — Newsletter signup form and contact management. Data is transferred to the USA under Standard Contractual Clauses. Only activated with your consent.
• GitHub Pages (GitHub Inc., USA) — Website hosting. Access logs may be processed by GitHub.

6. International Data Transfers

Some of our service providers are based outside the European Economic Area (EEA). When personal data is transferred to countries outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions.

7. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected. Newsletter subscriber data is retained until you unsubscribe. Analytics data is retained according to the respective service provider's retention policies (Google Analytics: 14 months; Umami: aggregated, non-personal).

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) — Request a copy of your personal data
• Right to rectification (Art. 16) — Request correction of inaccurate data
• Right to erasure (Art. 17) — Request deletion of your personal data
• Right to restrict processing (Art. 18) — Request restriction of processing
• Right to data portability (Art. 20) — Receive your data in a machine-readable format
• Right to object (Art. 21) — Object to processing based on legitimate interests
• Right to withdraw consent (Art. 7(3)) — Withdraw consent at any time (e.g., via cookie settings)

To exercise any of these rights, please contact us at contact@labs.ai. We will respond to your request within one month.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption for all data in transit, and access controls for administrative systems.

10. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal data from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated policy on this page and updating the "Last updated" date.

12. Supervisory Authority

You have the right to lodge a complaint with the competent supervisory authority. In Austria, this is:

13. Contact

If you have questions about this Privacy Policy or our data practices, please contact us: