Privacy notice

Who is responsible

The data controller for this website is Anna Ranica, based in Italy. For privacy questions or rights requests, email madprodbg@gmail.com. LAB/02 is the project name, not a separate legal entity.

What browsing involves

The server receives technical connection data to deliver and protect the website. Access logs can include IP address, date and time, requested URL and query string, HTTP status, referrer, browser information and response timing. Do not put personal or confidential information in URLs. These logs are used for operation, fault diagnosis and security, not advertising, profiling or marketing analytics.

The legal basis is the legitimate interest in operating a reliable, secure public website (Article 6(1)(f) GDPR). Connection data are necessary to serve a page; without them the website cannot work. We do not attempt to identify visitors from logs or link them to demo entries.

Project applications

If you submit an application, we process the selected service, project idea, indicative budget and timing, name, email address and optional business or project name. The purpose is to assess fit, request any necessary context and decide whether to propose a scope. The legal basis is taking steps at your request before a possible contract (Article 6(1)(b) GDPR). No automatic acceptance, scoring or payment takes place.

The application is encrypted at rest and available only in the private operator workspace. It receives a fixed deletion date 90 days after submission; changing its workflow status does not extend that date. A daily deletion task is required operationally in addition to deletion checks performed when the workspace is used. A confirmation is sent to the address supplied, and a minimal notification without the idea or contact details is sent to the operator. Transactional messages contain no open or click tracking.

There are no integrated analytics, advertising pixels, fingerprinting or embedded third-party media. Images and fonts are served by this website. Display preferences remain in page memory and reset on reload or tab closure.

Hosting, recipients and retention

The site is hosted by alwaysdata, France. Its infrastructure processes connection data to serve and secure the site. Access to account logs is restricted to the operator and authorised hosting personnel. No automatic expiry is currently configured for account technical logs: they remain in the hosting account until manually removed or the account is closed. A limited retention period and deletion procedure still need to be finalised. This is an unresolved operational limitation, not a claim of GDPR compliance.

The current Small hosting plan includes rolling infrastructure backups for seven days. A backup is not used as an active visitor database. The provider may also have independent legal obligations; see alwaysdata privacy information and its data processing terms. This website does not sell visitor data.

If you email us

Sending an email is voluntary. We receive your address, message and any information you choose to include through Gmail, provided by Google. Please send only what is necessary and avoid sensitive data or identity documents unless a proportionate verification is specifically needed.

Ordinary correspondence is processed to answer your request, based on the legitimate interest in responding to a message you initiated (Article 6(1)(f)). Privacy-rights requests are handled to meet legal obligations (Article 6(1)(c)). Correspondence is reviewed and deleted within twelve months after the request closes, unless a specific legal obligation or dispute requires longer retention. There is no newsletter subscription or marketing reuse.

Google may process email information outside the EEA under its applicable terms and safeguards. See Google privacy information, including its international-transfer information. This is not a promise of EU-only processing. Copies in your own mailbox are controlled by you and your provider.

Human communication and AI

English is our primary working language; we do not speak every language. The intended service uses human-written communication, with Claude and ChatGPT as translation aids, not automated project-selection tools. No video calls or recordings are offered.

Application data and privacy emails are not automatically sent to either AI provider. AI translation for real correspondence remains disabled until the relevant supplier terms, data minimisation, lawful basis and transfer safeguards have been assessed and this notice has been updated. No automated decisions with legal or similarly significant effects are made about applicants.

Your rights

Subject to the applicable conditions, you can request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. We may need proportionate information to locate a record or verify a request; we do not collect extra identification solely to identify anonymous visitors. Write to madprodbg@gmail.com. We normally respond within one month; any permitted extension will be explained.

You may complain to the Italian Garante or another competent EEA supervisory authority. See the GDPR. Material changes to the service will be reflected in this notice before new collection starts.