Privacy Policy / Datenschutzerklärung
Data Controller
Freshlab Iberia S.L.U. · info@freshlab.es · +34 722 715 740
Data we collect
This website does not set tracking cookies and does not use profile-based analytics. For anonymous visit analysis we use Cloudflare Web Analytics (see below). When using the contact form, we collect: name, company, email, area of interest and message. This data is processed directly on our own server in Germany, without intermediaries. Spam protection is handled via Cloudflare Turnstile (see below).
Hosting and static resources
This website is hosted on servers of Alfahosting GmbH in Germany. Stylesheets, icons (Font Awesome) and fonts (Orbitron, Plus Jakarta Sans, Inter) are served locally from our own server, without third-party CDNs. The only permanently loaded external script is Cloudflare Web Analytics; on the contact page, Cloudflare Turnstile is additionally loaded. Server access logs may temporarily contain your IP address, requested URL, timestamp, browser and operating system. According to our hosting provider's official privacy policy, your IP address is automatically anonymised after 24 hours (last octet set to zero) and logs are completely deleted after a maximum of 7 days. Aggregated access statistics without personal data are additionally generated. A data processing agreement under Art. 28 GDPR is in place with Alfahosting.
Contact form
The contact form is processed via our own PHP script hosted on Alfahosting (Germany). Submitted data is transmitted encrypted (HTTPS) to the server, validated and sent as an internal email to info@freshlab.es, whose mailbox is hosted by EuroDNS S.A. (Luxembourg). Both Alfahosting and EuroDNS act as processors under Art. 28 GDPR and are based in the EU, so no transfer to third countries takes place. No external form provider is involved. Data is retained for a maximum of 12 months from the last contact.
Security verification (Cloudflare Turnstile)
The contact form uses Cloudflare Turnstile to protect against automated spam. Cloudflare Turnstile analyses browser behaviour to distinguish human users from bots, without displaying visible captchas. Cloudflare may process certain technical data (browser signals, anonymised IP) for this purpose. Cloudflare acts as a processor. For more information, see Cloudflare's privacy policy at cloudflare.com/privacypolicy/.
Website statistics (Cloudflare Web Analytics)
We use Cloudflare Web Analytics for anonymous analysis of page visits. This service uses no cookies, does not track users across sessions, and stores no personal data. All data is processed completely anonymously. No consent banner required. More info: cloudflare.com/web-analytics/
Own analytics (AI 2026 presentation and book page)
The "AI 2026" presentation page logs each visit to a file on our own servers. The following is stored: date and time, city, region and country (obtained via IP geolocation through ip-api.com), internet provider or company name (ISP/org field), selected language, sections visited, and approximate duration. The IP address is never stored. No cookies or persistent identifiers are used. The book companion page (freshlab.es/ai-book) uses the same self-hosted log plus a pseudonymous visitor identifier generated from a non-reversible hash that rotates every day, with no way to link visits across different days, solely to count unique visitors. Here too, the IP address is never stored. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) for statistical analysis of access to our materials and publications. Data is retained for a maximum of 6 months.
Your rights
You have the right to access, rectify, erase, restrict processing and object to the processing of your personal data. To exercise these rights, contact us at info@freshlab.es.
Data retention
Contact data is retained for as long as necessary to handle your enquiry, and for a maximum of 3 years from last contact.
Cookies
This website only uses localStorage to save your language preference. No tracking cookies or analytics are used.
Legal basis for processing
The processing of contact form data is based on Art. 6(1)(b) GDPR (taking pre-contractual steps at the data subject's request) and Art. 6(1)(f) GDPR (Freshlab Iberia's legitimate interest in responding to business enquiries). The language preference stored in localStorage does not constitute personal data processing within the meaning of GDPR, as it is neither transmitted to nor processed on external servers.
Última actualización: Marzo 2026 · Legal Notice · Home