Privacy Policy for TheAutomationLab.AI

Last Updated: 14th March 2025

This Privacy Policy describes how Performance Labs SL (hereinafter referred to as “we,” “us,” or “our”) collects, uses, and shares personal data of visitors to our website, The AI Automation Lab.AI (hereinafter referred to as the “Website”). This policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable Spanish and European data protection laws.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Performance Labs SL Paseo de la Castellana 194, Ground Floor B 28046 Madrid, Spain VAT: ESB56217169 Email: [email protected]

2. Types of Personal Data We Collect

We may collect the following types of personal data from visitors to our Website:

• Technical Data: This includes your IP address (which may be considered personal data in some contexts), general location data (derived from IP), browser type, operating system, referring website, pages visited, and the date and time of your visit. This data is typically collected by Google Analytics.
• Contact Data: If you contact us via the email link provided on our Website, we will collect your email address and any other information you choose to include in your email.
• Booking Data: If you book an appointment through our third-party booking platform, CalendarHero, they will likely collect your name and email address, and potentially other information you provide during the booking process, as per CalendarHero’s privacy policy.

3. How We Collect Personal Data

We collect your personal data through the following methods:

• Google Analytics: We use cookies and similar tracking technologies placed on your device by Google Analytics when you access our Website.
• Email Contact: We collect your email address when you voluntarily click on our mailto: link and send us an email.
• CalendarHero: When you choose to book an appointment, you will be redirected to CalendarHero’s platform, where you will directly provide your information according to their privacy policy.

4. Purposes of Data Collection and Legal Bases

We process your personal data for the following specific purposes and based on the following legal bases:

• Google Analytics:
  • Purpose: To analyze website traffic, understand how users interact with our Website, track the effectiveness of marketing efforts, and improve the Website’s content and user experience.
  • Legal Basis: Legitimate Interests (our interest in understanding and improving our Website). We will ensure that non-essential cookies are only used with your consent, obtained through a cookie banner.
• Email Contact:
  • Purpose: To respond to your inquiries and communicate with potential clients.
  • Legal Basis: Legitimate Interests (our interest in responding to inquiries and conducting business) and potentially Contractual Necessity if your email relates to a potential or existing service agreement.
• CalendarHero:
  • Purpose: To allow users to book appointments with us and to manage those appointments.
  • Legal Basis: Likely Contractual Necessity (to facilitate the booking of appointments at your request). We encourage you to review CalendarHero’s privacy policy for details on their data processing.

5. Cookies and Similar Tracking Technologies

Yes, our Website uses cookies related to Google Analytics. These are primarily analytics cookies used to track and analyze website usage. These cookies help us understand how visitors interact with our Website, which pages are visited most often, and how users navigate the site. This information is used to improve the functionality and user experience of our Website.

We will provide you with a cookie banner upon your first visit to our Website, allowing you to manage your cookie preferences and consent to the use of non-essential cookies. More detailed information about the cookies we use will be available in our Cookie Policy (which may be a separate document or a section within this Privacy Policy).

6. Sharing Personal Data with Third Parties

We may share your personal data with the following third parties for the purposes described below:

• Google Analytics: We share website usage data with Google for analytics purposes. Google’s servers are located globally, including outside the European Economic Area (EEA). We rely on Google’s compliance mechanisms, such as Standard Contractual Clauses where applicable, to ensure adequate protection of your data when transferred outside the EEA.
• CalendarHero: When you book an appointment, your information (name, email, etc.) is shared with CalendarHero to facilitate the booking process. Please refer to CalendarHero’s privacy policy for information on how they process your data and where their servers are located.
• Email Provider: If you contact us via email, your email and its content will be stored on our email provider’s servers. The location and security of these servers depend on our chosen email provider.

We will not share your personal data with other third parties unless required by law or with your explicit consent.

7. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected and as required by applicable laws. Specifically:

• Google Analytics Data: We will adhere to Google Analytics’ data retention settings, which can be configured by us. We will aim for a retention period that is appropriate for our analytical needs and compliant with GDPR recommendations (e.g., 14 months).
• Email Correspondence: We will typically retain email correspondence for as long as necessary to handle your inquiry and potentially for record-keeping purposes related to our business operations and legal obligations. We will periodically review and delete emails that are no longer necessary.
• CalendarHero Data: The retention period for data collected by CalendarHero is governed by their own privacy policy. Please refer to their policy for more information.

8. Security Measures

We take reasonable technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. These measures include ensuring the security of our website hosting environment. For third-party services like Google Analytics, CalendarHero, and our email provider, we rely on their respective security measures to protect your data. While we strive to protect your personal data, please understand that no method of transmission over the internet or method of electronic storage is completely secure.

9. Special Categories of Personal Data

We do not knowingly collect or process any special categories of personal data as defined in GDPR (such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation).

10. Data of Children

Our Website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under the age of 16. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will take steps to delete that information.

11. International Data Transfers

As mentioned in Section 6, personal data collected by Google Analytics is likely transferred to and stored on servers located outside the EEA. We ensure that such transfers are subject to appropriate safeguards in accordance with GDPR, such as reliance on Standard Contractual Clauses provided by Google.

Regarding CalendarHero and our email provider, please refer to their respective privacy policies for information on their data transfer practices and the safeguards they have in place.

12. Your Rights under GDPR

Under GDPR, you have certain rights regarding your personal data, including:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure (“Right to be Forgotten”): You have the right to request that we delete your personal data under certain circumstances.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data under certain circumstances, including processing for direct marketing purposes.

How to Exercise Your Rights:

To exercise any of these rights, please contact us via email at [email protected] or by mail at the address provided in Section 1. We will respond to your request in accordance with applicable data protection laws. We may need to verify your identity before processing your request.

13. Contact Information for Privacy Inquiries

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

Email: [email protected] Address: Performance Labs SL, Paseo de la Castellana 194, Ground Floor B, 28046 Madrid, Spain

14. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or legal requirements. We will post any changes on our Website and update the “Last Updated” date at the top of this policy. We encourage you to review this Privacy Policy periodically for any updates.