Privacy
Policy.

1. Data controller

Paradox Lab S.r.l. is an innovative startup in the process of incorporation. For any question regarding this notice or the processing of your personal data you can contact us at the email address above.

2. Personal data processed

We collect and process the following categories of personal data:

• Contact data — first name, last name, email address, phone number, organisation name, provided voluntarily through the contact form.
• Browsing data — IP address, browser type, operating system, pages visited, date and time of access, collected automatically by the website's systems.
• Communications — the content of messages sent through the contact form or by email.

We do not collect special categories of data (sensitive data) under art. 9 GDPR. The mobile apps (Spagnolo Lampo) and the TesiOra service have their own privacy notices, available on the stores and on launch.tesiora.ai.

3. Purposes and legal basis

• Handling contact requests — replying to messages sent through the form or by email. Legal basis: pre-contractual measures (art. 6(1)(b) GDPR) and legitimate interest (art. 6(1)(f)).
• Security and operation of the website — ensuring the correct technical operation of the website and preventing abuse. Legal basis: legitimate interest (art. 6(1)(f)).
• Statistics and marketing — measuring website and campaign performance, subject to consent. Legal basis: consent (art. 6(1)(a)). Active only if you accept analytics and marketing cookies.
• Legal obligations — complying with applicable legal obligations. Legal basis: legal obligation (art. 6(1)(c)).

4. Retention period

Data provided through the form is kept for the time needed to handle the request and in any case no longer than 24 months from the last contact. Browsing data is kept for 12 months, unless needed to investigate offences.

5. Recipients

Data may be processed by authorised staff of the controller and by suppliers acting as processors (hosting, email, analytics tools). Data is not disclosed or sold to third parties for commercial purposes.

6. Transfers outside the EU

Some suppliers may process data in non-EU countries. In that case the transfer is based on European Commission adequacy decisions or standard contractual clauses.

7. Cookies

The website uses technical cookies needed for its operation (for example the chosen language). Analytics and marketing cookies are installed only with your consent, through the banner. You can change your choice by deleting your browser cookies.

8. Your rights

You can exercise at any time the rights under arts. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent, by writing to the controller's email address. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante).

9. Updates

This notice may be updated; the version in force is the one published on this page with the date shown above.