Privacy Policy
What happens to your data when you use updatelabs.it: what we collect, why, how long we keep it and what you can ask us for. This is the notice required by article 13 of the European Regulation 2016/679 (GDPR).
Who handles your data
The data controller is Update Labs, the sole proprietorship of Davide Scalera, based in Lecce, Italy, VAT number 16605771001. For anything about this notice or about your data, write to info@updatelabs.it and Davide will answer.
We have not appointed a data protection officer, as our activity does not fall within the cases where one is required.
What we collect
- In the contact form: your name, email, phone number, your company name if you add it, your message and, on the Contact page, the offer you are interested in. What goes in the message is up to you: you don’t need to share sensitive details for us to understand your case.
- In the Update Check: your answers to the questions, which are about your role and your company (how many people work there, how old it is, its sector, how it is organised), the result the site works out from them, then your name, email, phone number and, if you add it, your company name.
- In the funded-training assessment: your name, email, phone number and company in the form that opens it, then your answers and the result. The email carrying the link to the assessment includes a code whose only job is to tie your answers to your request.
- In the checklist form on each lab page: your name, email, phone number and the lab you asked from.
- Every form also records the language of the page, so we can reply in the same one.
- Technical data that the hosting server records when a page is opened, such as the IP address, the browser and the page requested. It keeps the site running and protects it from abuse.
The site uses no cookies, no third-party statistics, and does not follow you around other sites; its fonts are served by the site itself, with no calls to outside services. The only thing it stores in your browser is the language: the one you pick or, on your first visit, English if your browser is not set to Italian. That stays on your device and never reaches us.
Why we process it, and on what legal basis
- To answer you when you write, and to prepare a proposal if you ask for one. We rely on your request, which is a pre-contractual step, and on the consent you tick in the form (articles 6.1.b and 6.1.a).
- To send you what you asked for (the Update Check result, the assessment link and its result, the checklist) and to get back to you about it. Here the basis is the consent you tick in the form (article 6.1.a), and you can withdraw it at any time.
- To keep the site running and to retain the records the law requires us to keep, such as accounting records if we end up working together. The basis is our legitimate interest in a secure site, and legal obligation (articles 6.1.f and 6.1.c).
We don’t sign you up to any newsletter and we don’t use your data for advertising. Providing your data is optional. Without it we cannot answer you or send you what you asked for, and that is the only consequence.
Who else sees it
We don’t sell your data or pass it to anyone. We handle it ourselves, with two suppliers acting as processors on our instructions.
- Netlify, which hosts the site, collects the form submissions and runs the function that prepares the automated emails.
- Resend, which sends the automated emails, such as the one carrying your result or your checklist.
Both suppliers are based in the United States, and the transfer relies on the standard contractual clauses approved by the European Commission. Form submissions also reach us by email, so they pass through the provider of our mailbox. Beyond them, your data may be seen by our accountant and by the advisers who assist us, where legal obligations require it.
How long we keep it
Contact requests and form data, answers included, stay with us for twenty-four months from our last exchange, then we delete them. If we work together in the meantime, the records of that work are kept for as long as the law requires, which for accounting purposes in Italy is ten years.
Server logs are kept for the short period set by the hosting service and serve security only.
What you can ask us for
You can ask to see the data we hold about you, to correct it, to delete it, to restrict how it is used, to receive in a file what you gave us, and you can object to the processing. Where we asked for your consent you can withdraw it at any time, and that does not make what we did beforehand unlawful.
An email to info@updatelabs.it is enough. We reply within a month; if the request is complex we will tell you and ask for more time, as the Regulation allows.
If you believe we are handling your data badly, you can complain to the Italian data protection authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or to the supervisory authority of the country you live in, or go to court.
Children, automated results, changes
The site addresses companies and professionals: we do not knowingly collect data from anyone under sixteen.
The Update Check result and the assessment result are worked out by the site from your answers. They are a pointer to help you get your bearings, not decisions with legal effects on you, and we don’t use them to profile you for advertising.
If we change this notice we change the version and the date below, and the page stays reachable from the footer of every page.