Privacy Policy / Datenschutzerklärung
Data Controller
Freshlab Iberia S.L.U. · info@freshlab.es · +34 722 715 740
Freshlab as a data processor
When we process personal data on behalf of our clients, for example through the kAIra Tools platform, training or the installation of local AI on-premise, Freshlab acts as a data processor under Article 28 GDPR. You can find the details, security measures and the model agreement on the Data Processing page.
Data we collect
This website does not set tracking cookies and does not use profile-based analytics. For anonymous visit analysis we use Cloudflare Web Analytics (see below). When using the contact form, we collect: name, company, email, area of interest and message. This data is processed directly on our own server in Spain, without intermediaries. Spam protection is handled via Cloudflare Turnstile (see below).
Hosting and static resources
This website is hosted on servers of cdmon (10DENCEHISPAHARD, SLU, C/ Girona 96 local 2, 08380 Malgrat de Mar, Barcelona, Spain) with data centres in Spain. Stylesheets, icons (Font Awesome) and fonts (Orbitron, Plus Jakarta Sans, Inter) are served locally from our own server, without third-party CDNs. The only permanently loaded external script is Cloudflare Web Analytics; on the contact page, Cloudflare Turnstile is additionally loaded. Server access logs may temporarily contain your IP address, requested URL, timestamp, browser and operating system for security and diagnostic purposes. A data processing agreement under Art. 28 GDPR is in place with cdmon.
Contact form
The contact form is processed via our own PHP script hosted on cdmon (10DENCEHISPAHARD, SLU, Spain). Submitted data is transmitted encrypted (HTTPS) to the server, validated and sent as an internal email to info@freshlab.es, whose mailbox is also hosted by cdmon. cdmon acts as a processor under Art. 28 GDPR and is based in Spain (EU), so no transfer to third countries takes place. No external form provider is involved. Data is retained for a maximum of 12 months from the last contact.
Security verification (Cloudflare Turnstile)
The contact form uses Cloudflare Turnstile to protect against automated spam. Cloudflare Turnstile analyses browser behaviour to distinguish human users from bots, without displaying visible captchas. Cloudflare may process certain technical data (browser signals, anonymised IP) for this purpose. Cloudflare acts as a processor. For more information, see Cloudflare's privacy policy at cloudflare.com/privacypolicy/.
Website statistics (Cloudflare Web Analytics)
We use Cloudflare Web Analytics for anonymous analysis of page visits. This service uses no cookies, does not track users across sessions, and stores no personal data. All data is processed completely anonymously. No consent banner required. Cloudflare, Inc. is based in the USA and is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses (SCCs) additionally serve as a safeguard for any international data transfer. More info: cloudflare.com/web-analytics/
Own analytics (AI 2026 presentation and book page)
The "AI 2026" presentation page logs each visit to a file on our own servers. The following is stored: date and time, city, region and country (obtained from Cloudflare's geolocation headers), internet provider or company name (ISP/org field), selected language, sections visited, and approximate duration. The IP address is never stored. No cookies or persistent identifiers are used. The book companion page (freshlab.es/ai-book) uses the same self-hosted log plus a pseudonymous visitor identifier generated from a non-reversible hash that rotates every day, with no way to link visits across different days, solely to count unique visitors. Here too, the IP address is never stored. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) for statistical analysis of access to our materials and publications. Data is retained for a maximum of 6 months.
Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your personal data, as well as the right to data portability. To exercise these rights, contact us at info@freshlab.es. You also have the right to lodge a complaint with a supervisory authority; for our company this is the Spanish Data Protection Agency (AEPD, aepd.es).
Data retention
Contact data is retained for as long as necessary to handle your enquiry, and for a maximum of 3 years from last contact.
Cookies
This website only uses localStorage to save your language preference. No tracking cookies or analytics are used.
Legal basis for processing
The processing of contact form data is based on Art. 6(1)(b) GDPR (taking pre-contractual steps at the data subject's request) and Art. 6(1)(f) GDPR (Freshlab Iberia's legitimate interest in responding to business enquiries). The language preference stored in localStorage does not constitute personal data processing within the meaning of GDPR, as it is neither transmitted to nor processed on external servers.
Última actualización: Marzo 2026 · Legal Notice · Home