Privacy Policy

At Aneslab Solucions SL (operating commercially as Lab Solucions; hereinafter, «Lab Solucions») we are committed to ensuring that your personal data is protected and is not used for purposes other than those indicated in this Privacy Policy. For this reason, in this section we inform users and interested parties of everything concerning the processing of their personal data, thus complying with the applicable data protection regulations: General Data Protection Regulation (EU) 2016/679 of 27 April, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, «GDPR») and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the safeguarding of digital rights (hereinafter, «LOPDGDD»).

This Privacy Policy applies to the data processing operations carried out by Lab Solucions through this website (hereinafter, the «Website»). We recommend that you read it carefully before using the Website or providing data through it. You may contact us with any questions through the email address: info@aneslab.net.

Table of contents

• Who is the controller of your data
• What requirements must be met to provide us with personal data
• What data processing operations we carry out through the Website
• Processing of the AI chat
• Newsletter
• To whom we disclose your personal information
• Existence of international transfers
• What your rights are and how to exercise them
• How we protect your information
• Modifications to this policy

1. Who is the controller of your data?

Your personal data will be processed by Aneslab Solucions SL (Lab Solucions), with the following contact details:

• Tax ID: B27687532
• Address: C/ Riu Muga 14, ground floor c, 17003 Girona (Girona), Spain
• Contact phone: +34 638 828 504
• Contact email: info@aneslab.net

2. What requirements must be met to provide us with personal data?

2.1. Minimum age. To provide us with personal data, you must be at least 14 years of age and/or, where applicable, have sufficient legal capacity to use this Website.

2.2. Accuracy. When you provide us with your data, you guarantee that the data and information provided is real, truthful, up to date and, moreover, belongs to you and not to third parties. You must also notify us of any modification in the data provided.

2.3. Age and accuracy check. Lab Solucions reserves the right to verify the age and identifying information at any time, if necessary, and in the event of detection of fraud, to delete the data provided.

3. What data processing operations do we carry out through the Website?

3.1. When you contact us through the contact form

3.2. When you subscribe to the newsletter

3.3. Navigation of the Website (cookies)

On this Website we use cookies or other tracking and monitoring tools to collect information about how users use the Website.

For more information on the processing carried out through these tools, please visit our Cookie Policy.

3.4. Lab Solucions profiles on social networks

Lab Solucions may have a presence on the main social networks (such as LinkedIn, X, Instagram or YouTube, among others).

When you follow any of our pages on the social networks, the processing of data will be governed by the terms of use, privacy policies and access rules belonging to the corresponding social network and previously accepted by you.

Lab Solucions, in this regard, will process the data for the purposes of properly administering the presence on the social network, informing you of activities, products or services, as well as for any other purpose that the rules of the social networks permit.

Please note that we have no influence over the information that the social network collects or how it processes it, so we recommend that you stay informed of the purpose and scope of the information collection carried out through these social networks.

4. Processing of the AI Chat

Lab Solucions offers an AI-powered chat on the Website to handle commercial enquiries and collect leads. This section details how data is processed in this specific processing operation.

What is processed

• The messages the user writes during the conversation.
• If the user gives explicit consent, contact data (name or organisation, email and, optionally, phone).

Legal basis for processing

Explicit consent of the user obtained within the same conversation before the data is sent to our internal system.

Controller

Aneslab Solucions SL, Spanish tax ID B27687532, Girona.

Purpose

• Commercial response to the case raised by the user.
• Preparation of an initial indicative quote.
• Follow-up by the Lab Solucions human team.

Technology used

• The chat runs on European Azure OpenAI Service (West Europe region, Netherlands).
• No direct human access to conversations outside the Lab Solucions team.
• Sensitive data, if provided by the user, is processed with our anonymisation architecture.

Retention period

• Conversations and qualified leads are retained for as long as necessary for commercial management.
• The user may request erasure at any time by writing to info@aneslab.net.

User rights

• Access, rectification, erasure, objection, restriction and portability of their data.
• To exercise these rights, write to: info@aneslab.net.
• You may also lodge a complaint with the Catalan Data Protection Authority (APDCAT) or the Spanish Data Protection Agency (AEPD).

International transfers

None. All chat infrastructure operates within the European Economic Area (EEA).

Automated decisions

• The chat does not take decisions with legal effects or similarly significant effects on the user.
• Any quote or commercial offer is always reviewed and issued by a human from the team.

5. Newsletter

On the Website blog you can subscribe to our newsletter to receive by email the new articles and content we publish about artificial intelligence applied to business.

Purpose: periodic delivery by email of new blog content and, occasionally, information about Lab Solucions services directly related to that content.

Legal basis: the data subject's consent (art. 6.1.a GDPR), given through a double opt-in procedure: upon subscribing you will receive an email with a confirmation link, and the subscription is only activated once you confirm it. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

Data processed: email address, language preference, subscription date and confirmation date.

Retention: data is kept while the subscription is active. When you unsubscribe, the address is kept flagged as unsubscribed solely to ensure we do not send you further communications.

Recipients: we use Resend (email delivery provider) and Notion (subscriber list management) to manage the newsletter, with the safeguards set out in the international transfers section of this policy.

Unsubscribe: every newsletter email includes an immediate unsubscribe link. You can also request removal by writing to info@aneslab.net.

6. To whom do we disclose your personal information?

As a general rule, Lab Solucions will not disclose your data to third parties. However, we inform you of the disclosures we may make, of a general nature:

• Service providers essential to operate the service (for example, IT hosting companies such as Vercel or transactional-email platforms such as Resend). These entities have signed the corresponding confidentiality agreements and will only process your data in accordance with our instructions, and may not use it for their own purposes or outside the service they provide to us.
• Public authorities: We may disclose to the competent public authorities the data and any other information in our possession or accessible through our systems when there is a legal obligation to do so, as well as when required.
• In the event of a corporate transaction: In the event of a merger, acquisition, sale of all or part of its assets or any other type of corporate transaction involving a third party, we may share, disclose or transfer users' data to the successor entity.
• To third parties following aggregation or anonymisation: We may disclose or use aggregated or anonymised data (i.e. data that cannot be linked to an identified or identifiable natural person) for any purpose.
• To third parties with your consent or another legitimate basis: If we wish to share data with third parties outside the scope of this Privacy Policy, your consent will be sought or you will be informed of the legitimating basis.

This Privacy Policy refers only to the collection, processing and use of information by us through interaction with our Website. Access to third-party websites that you may reach through links from the Website have their own privacy policies over which we have no control.

7. Is your personal data transferred to third countries outside the European Economic Area?

Some of our service providers may be located in countries outside the European Economic Area (EEA).

The location of these companies outside the EEA implies the existence of an international transfer of your personal data. However, Lab Solucions has applied measures so that these transfers do not give rise to a lower level of protection.

In this regard, the service providers located outside the EEA have a valid mechanism in place to carry out international transfers: (i) either they are located in a country declared to provide an adequate level of protection by the European Commission; (ii) or they have signed the corresponding Standard Contractual Clauses approved by the European Commission («SCCs»).

The main international transfers we carry out are listed below:

Our main artificial-intelligence infrastructure is hosted on Microsoft Azure (European region), with no international data transfer.

8. What rights can you exercise as a data subject?

You may exercise the rights guaranteed by law in relation to the processing of your personal data by contacting us through the email address info@aneslab.net.

Any rights request we receive will be resolved as soon as possible and, in any case, within the maximum period established by law (one month, extendable to two months for complex cases). In some cases, it will be necessary to request a copy of your identity document if it is necessary to verify your identity.

The rights you have as a data subject are the following:

• Right to withdraw consent. You may revoke your consent in relation to all processing operations based on it at any time. However, the withdrawal of consent will not affect the lawfulness of the processing based on the consent prior to its withdrawal.
• Right of access. You have the right to know which data are being processed and to obtain a copy, as well as to obtain information regarding the origin and recipients of the data, the purposes for which they are processed, the retention period and the rights provided for by the regulations.
• Right of rectification. You have the right to obtain the rectification of your personal data or to complete it when incomplete.
• Right of erasure. You have the right to request the erasure of your personal data if it is no longer necessary for the purpose for which it was collected or, where appropriate, if we are no longer authorised to process it.
• Right to data portability. You have the right to request the portability of the data in the case of processing operations based on your consent or on the performance of a contract, provided that the processing has been carried out by automated means.
• Right to restriction of processing. In certain cases provided for by the regulations, you may request that we limit the use of your data.
• Right to object. You have the right to object at any time to the processing of your personal data based on our legitimate interest.
• Unsubscribing from commercial communications. Remember that at any time you may object to receiving this type of communications by sending us an email to info@aneslab.net or by following the instructions at the foot of each email.
• Right to lodge a complaint with the Supervisory Authority. Remember that, at any time, and in the event that you consider that we have violated your right to the protection of your data, you may turn for protection to the Spanish Data Protection Agency (www.aepd.es).

9. How do we guarantee the confidentiality of your information?

The security of your personal data is a priority for us. For this reason, Lab Solucions has implemented the technical and organisational security measures necessary to ensure the effective use and processing of the personal data provided, safeguarding the intimacy, privacy, confidentiality and integrity thereof and making use of the technical means necessary to prevent the alteration, loss, unauthorised access or processing of the data, according to the state of the art at each moment.

Consequently, we comply with the security standards recommended to protect it. Nevertheless, it is impossible to fully guarantee its security due to the very nature of the internet.

We commit to acting swiftly and diligently should the security of the data be at risk or compromised, and to inform you about it if relevant.

10. Modifications of this policy

Lab Solucions may modify the content of the privacy policy at any time, especially when there are legislative, jurisprudential or interpretative modifications by the competent authorities.

If the revised version includes a substantial change affecting the processing of your data, we will notify you at least 30 days in advance by publishing a notice on our website or by communicating it to you via email.