Privacy & Cookie Policy

This policy explains how Intellectum Lab — a brand operated by Gazolin Production SRL — collects, uses, and protects personal data when you visit intellectumlab.com (the “Site”). It applies to the Site only; separate notices may apply to client engagements under signed Data Processing Agreements.

1. Who we are (data controller)

For website data, we are the data controller under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the UK GDPR.

2. Personal data we collect

We collect the minimum data needed to operate the Site and respond to enquiries:

• Contact data you submit — when you email us or schedule a call (name, email address, company, the content of your message).
• Usage data — pages viewed, referring URL, approximate location (country/region from IP), device type, browser. Collected only with your consent via analytics cookies. IP addresses are anonymised before storage.
• Technical logs — standard web-server logs (IP, timestamp, request) kept short-term for security and abuse prevention. Used under our legitimate interest in keeping the Site secure.
• Consent records — your cookie consent choice, stored locally in your browser so we don’t have to ask again on every page.

We do not collect special category data (health, religion, political views, etc.) through the Site. We do not sell personal data, and we do not use cookies for advertising or cross-site tracking.

3. Purposes & legal bases

4. How long we keep your data

• Enquiry emails — kept while we are in contact and for up to 24 months after the last interaction, then deleted or anonymised.
• Analytics — Google Analytics 4: up to 14 months. Matomo: up to 13 months.
• Server logs — up to 90 days.
• Consent record — up to 12 months in your browser, then we ask again.

5. Sharing & processors

We share personal data only with carefully selected processors who act on our instructions under a written agreement (GDPR Art. 28). Current processors used on the Site:

• Google Ireland Limited — Google Analytics 4 (anonymised IP). Hosted by Google in the EU/US. Used only with your consent.
• Matomo — self-hosted by us on EU infrastructure (analytics.gazolin-production.com). No data is shared with third parties.
• Hetzner Online GmbH / our hosting provider — Site hosting, EU data centres.
• Cal.com — meeting scheduling, loaded only on pages where you actively schedule a call.

We do not share personal data with brokers, advertisers, or any party not listed above. We may disclose data when legally required (court order, regulator request).

6. International transfers

Where any processor (e.g., Google) transfers data outside the European Economic Area (EEA) or the UK, transfers are protected by the European Commission’s Standard Contractual Clauses (SCCs) and supplementary measures including IP anonymisation. You can request a copy of the safeguards by contacting us.

7. Your rights

Subject to applicable law, you have the right to:

• Access a copy of the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”) where applicable.
• Restrict or object to processing based on legitimate interest.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with a supervisory authority (see Section 12).

To exercise any right, email viktor@intellectumlab.com. We respond within 30 days (extendable to 90 days for complex requests, with prior notice). There is no charge for the first reasonable request.

8. Cookie policy

A cookie is a small text file (or similar local-storage item) saved by your browser. We use three categories:

8.1 Strictly necessary

Required for the Site to function. Cannot be disabled.

8.2 Analytics (consent required)

Help us understand how the Site is used. Set only after you click “Accept all” or enable Analytics in Cookie preferences. IP addresses are anonymised.

8.3 Marketing

We do not currently use marketing or advertising cookies. This category is reserved so that, if we add such tools in the future, your choice will continue to be respected.

8.4 Managing cookies

You can change your choice at any time using the “Cookie preferences” link in our footer, or below. You can also clear cookies through your browser settings.

9. Regional notices

10. Security

We apply technical and organisational measures appropriate to the risk: HTTPS only, encrypted backups, access on a least-privilege basis, regular dependency audits, and incident-response procedures. As an FSQS Registered Supplier (ID 10101341), our governance is independently assessed across 22 areas including information security, business continuity, and data protection — aligned with DORA Article 28, the EU AI Act, and the GDPR.

11. Changes to this policy

We may update this policy to reflect changes in law, technology, or our practices. The “Last updated” date at the top tells you when the current version was published. Material changes will be highlighted on the Site, and we will re-prompt for cookie consent when categories change.

12. Contact & complaints