CorLab AI Agent
This Tech Assistant is designed to support you with clear insights into our company, our work, our services and the people behind our progress.
Powered by CorLab Tech © 2025
Privacy Policy
Updated at October 7th, 2026
CorLab Tech, owns and operates this website (our "Website"). We respect the privacy of users of our Website ("you" or "your") and have adopted this Privacy Policy (this "Policy") to explain what information we collect from or about you through our Website and how we use, maintain, protect, and disclose that information. If you have any questions about this Policy or our privacy practices, please contact us:
Via Email: [email protected]
Via Phone: +373 (68) 160 961
This Policy applies only to information we collect through our Website. It does not apply to information we collect through other channels. It is a notice explaining what we do with your personal data, not an agreement you enter into: your rights under it do not depend on accepting anything, and nothing here asks you to.
Our Terms and Conditions, linked at the bottom of every page, govern your use of this Website. They are a separate document: this Policy is not part of them, and agreeing to them is not how your data is processed lawfully — the bases for that are set out below.
This Website is meant for adults acting in a business capacity, and you must be at least 18 to use its forms. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to [email protected] and we will delete it.
We collect personal data from you when you submit it through a form on this Website.
What you give us. How much depends on which form you use. The two short forms — one in the opening section of the home page, one in the footer — ask for your email address and nothing else. The "get in touch" form and the project enquiry ask for your name, your company, a phone number, an email address and whatever you choose to write in the message; the project enquiry also records the answers you give to its questions about the work you have in mind. Nothing on this Website is a required field unless the form says so.
What we record alongside it. With whatever you send we store the date and time of the submission, which form it came from, the marketing source that brought you to this Website where the link you followed carried one (a "UTM" parameter), and a record of the confirmation you gave when submitting, including the exact wording you confirmed.
Spam protection. Submissions are checked by Cloudflare Turnstile, which assesses whether a submission comes from a person rather than an automated script. That check processes technical data about your browser and connection.
Analytics, and only if you agree. This Website can load Google Tag Manager (container GTM-PQ7N2RSV), which in turn loads a Google analytics tag. It is not needed for the Website to work, so it loads only after you press Accept on the banner that appears on your first visit; press Reject, or close the page without choosing, and it is never loaded and no request is made to Google. You can change your mind at any time from the Cookie settings link in the footer.
When it does load, Google receives technical data about your visit — pages viewed, approximate location derived from your IP address, your browser and device — and Google LLC is established in the United States. Our lawful basis for this is your consent, which you can withdraw as described above.
What the container loads is configured in Google Tag Manager rather than in this Website's code, and can change without the Website changing. At the date of this Policy it loads Google Analytics 4 (G-VT2EZMDXL2) and a Google Ads audience tag, which is used for advertising and can let Google associate your visit with an advertising profile it holds about you. If you refuse, none of it loads and none of this happens.
Cloudflare Web Analytics, which runs either way. Cloudflare delivers this Website, and it also measures how the site performs — which pages are opened, how quickly they load, which country the request came from and which site referred it. It is switched on in Cloudflare's own settings and inserted by Cloudflare as it serves the page, not by this Website's code, which is why the Accept and Reject buttons do not control it.
It is built not to identify anyone: it sets no cookies, stores nothing on your device and does not follow you between websites, and we see only totals, never individual visitors. We rely on our legitimate interest in knowing whether our own website works. If you would rather we did not, write to [email protected] — see "Your right to object" below.
We do not make automated decisions about you, and we build no profile of you ourselves.
We do not ask for special categories of data - information about your race, political opinions, religion, health, or sexual orientation - and we have no use for them. Please do not type them into a form; if you do, they reach us anyway and we will delete them.
We use the information we collect through our Website for the following purposes:
- To reply to you - we use the email address you submit to answer your enquiry and to carry on that conversation.
- To operate and improve our Website - including understanding how it is used so that we can improve its content and performance.
- To protect the security and integrity of our systems - including keeping our forms free of automated abuse.
- To comply with legal and regulatory obligations - including responding to lawful requests from public authorities and enforcing our Terms and Conditions.
In General. We respect your right to make choices about the ways we collect, use, and disclose your information. We may ask you to indicate your choices at the time and on the page where you provide your information.
Cookies and local storage. This Website sets no cookies of its own. It stores a few preferences in your browser so that it can remember them between visits — the colour theme you chose, whether you dismissed the top banner, and the choice you made about analytics. That information stays in your browser, is not sent to us and does not identify you; you can clear it through your browser settings. If you agree to analytics, Google Tag Manager and the tag it loads may set their own cookies, which is part of what you are agreeing to. Cloudflare, which delivers this Website and protects it from automated abuse, may also set cookies for that purpose.
Changing your analytics choice. The Cookie settings link in the footer brings the banner back so that you can accept or refuse again. Refusing stops the tag loading from then on; a page already open in your browser keeps what it loaded until you reload it.
Previously Expressed Preferences. You may be able to change previously expressed preferences regarding how we use your information. To do so, please contact us using the contact information provided above.
We do not collect marketing consent through this Website, and we do not send marketing or promotional messages to the addresses submitted through its forms. The only emails you will receive from us in response to a submission are the ones a member of our team writes to answer you.
If this changes, we will ask for your consent separately and clearly at the point where we collect it, by means of an option that is not pre-selected and that you are free to decline without losing the ability to contact us. You would be able to withdraw that consent at any time, and every marketing message would carry a one-click way to stop receiving them.
Everything you send us travels over an encrypted connection, and the submissions themselves are stored in the European Union. Access to them is limited to the people who need it to answer you, and is protected by individual accounts. Submissions are checked for automated abuse before they are stored, and the system that stores them is backed up so that it can be recovered.
No system is perfectly secure, and we do not pretend otherwise. If a breach occurs that is likely to put your rights at risk, we will notify the supervisory authority within 72 hours of becoming aware of it and tell you directly where the law requires it.
Our Website may contain links to third-party websites or other online platforms. Clicking on these links may allow third parties to collect or share information about you. These links are provided for your reference and convenience only and do not imply any endorsement of the products sold or information provided through these websites, nor any association with their operators. We do not control these websites and are not responsible for their data practices or privacy statements. Any information you provide to third parties on their websites is covered under their privacy and data collection policies and is not covered by this Policy. We urge you to review the privacy policy posted on any site you visit before using the site or providing any personally identifiable information.
If you are located in the European Union, Iceland, Liechtenstein or Norway (the "EEA"), in accordance with Article 13 of the European Union General Data Protection Regulation 2016/679 (the "GDPR"), this section of the Policy (together with other relevant section of this Policy) provides information about the collection, use, processing, and sharing of data about you.
For the purposes of this section, "personal data" means any information relating to an identified or identifiable natural person. CorLab Tech is the data controller for the personal data processed through this Website. Questions about this Policy, and requests about your own data, go to [email protected].
We process the personal data of visitors to this Website who are located in the EEA for the purposes set out above. The lawful basis for each purpose may be different. Please contact us if you would like to know the specific legal basis which applies in connection with a particular processing operation. In general, the lawful bases that we rely on are the following:
For the forms on this Website we rely on Article 6(1)(b) of the GDPR, because answering your enquiry is a step taken at your request before entering into a contract, and on Article 6(1)(f), our legitimate interest in replying to enquiries addressed to us and in keeping our forms free of automated abuse.
Consent is the basis for one thing only: the analytics tag described above, which loads if and only if you press Accept, and which you can refuse or withdraw at any time without losing anything else on this Website.
We do not rely on consent for the forms. The box you tick when you submit one is a confirmation that you have read this Policy and understand what we will do with your email address. It is not a consent, and there is therefore nothing for you to withdraw; your right to ask us to erase your data is set out under "Rights of Data Subjects" below and does not depend on it.
- Contractual necessity - We will process your personal data where necessary for us to meet our contractual commitments to you.
- Legitimate interests - we weigh our interest against the impact on you before relying on this, and we do not rely on it where that impact outweighs it. On this Website the list is short and specific:
- answering an enquiry someone has chosen to send us;
- keeping our forms free of automated abuse;
- keeping the Website and the systems behind it secure;
- establishing, exercising or defending legal claims.
- An earlier version of this Policy listed interests such as pricing our services, defining types of customer and growing the business. Those describe a company that profiles the people who contact it. We do not, which is why they are gone.
- Consent - In accordance with applicable law, we may seek your consent or explicit consent to process personal data collected on this Website or volunteered by you. For example, in relation to our marketing and promotional activities.
- Compliance with laws and regulations - We will process your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.
The submissions you send us through this Website are stored on servers operated by Microsoft Azure in its Poland Central region, within the European Union. They are not transferred outside the EEA for storage.
Cloudflare, Inc., Twilio Inc. (SendGrid) and — where you have agreed to analytics — Google LLC are established in the United States. The alerts we send our own team through them carry no personal data. Technical data about your connection does pass through Cloudflare, because Cloudflare is what delivers this Website to you. Where personal data reaches either company outside the EEA, that transfer is made under the European Commission Standard Contractual Clauses contained in their data processing terms.
We may transfer your personal data between entities within the CorLab Tech group and/or to the third parties noted above. We may transfer your personal data outside the EEA relying on appropriate or suitable safeguards or specific derogations recognized under applicable data protection law, including the GDPR.
The European Commission has approved standard data protection clauses ("Standard Contractual Clauses"), which provide safeguards for personal data transferred outside of the EEA. We use Standard Contractual Clauses when transferring personal data from a country in the EEA to a country outside the EEA. Please contact us if you would like further information.
If you are located in the EEA you have the right to ask us for a copy of the personal data we hold about you; to have it corrected if it is wrong; to have it erased; to object to our processing of it; to have our processing of it restricted; and to receive it, or have it sent to another controller, in a structured, commonly used and machine-readable format.
To exercise any of these rights, write to [email protected]. We will answer within one month. If a request is particularly complex, or if you have made several, we may extend that period by a further two months, and we will tell you within the first month if we do.
Your right to object. Where we rely on legitimate interests — answering your enquiry, security, defending claims — you have the right under Article 21 of the GDPR to object at any time, on grounds relating to your particular situation. Write to [email protected] and tell us so. We will stop unless we can show compelling legitimate grounds that override your rights, or we need the data for legal claims; if we cannot, we stop and delete.
Erasure. Where you ask us to erase the personal data you submitted through this Website, we will erase it. We may keep the part of it that we still need in order to perform a contract with you, to comply with a legal obligation such as accounting and tax record-keeping, or to establish, exercise or defend legal claims. Those grounds are set out in Article 17(3) of the GDPR. Where we rely on one of them we will tell you which one and why, and we will erase everything that it does not cover.
Backups. Copies of our systems are kept so that we can recover from a failure, and are overwritten on a rolling basis. Data erased at your request is removed from the live system straight away and leaves our backups as those backups are overwritten. We do not restore erased data from a backup.
In addition, where we rely on consent to process your personal data, you have the right to withdraw consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.
If you have any complaints regarding our privacy practices, you have the right to make a complaint with your national data protection authority.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
We keep the personal data you submit through a form on this Website for 36 months from the date of your submission, after which it is deleted automatically.
If your enquiry leads to a contract, the data connected with that contract is kept for as long as the contract runs and afterwards for the period for which we are required to keep records, or for which we may need it to establish, exercise or defend legal claims.
You do not have to wait for that period to end. You can ask us to delete your data at any time, as described under "Rights of Data Subjects" above.
Backups. The database behind this Website is backed up on a schedule, and no backup is kept for longer than 30 days. A record we delete — whether because you asked us to or because the 36 months ran out — goes from the live system immediately and has left every backup within 30 days. We do not restore a backup in order to bring back data someone asked us to erase.
We will retain your personal data for as long as is necessary for the purposes listed in this Policy unless a longer period is required under applicable law, or is needed to resolve disputes or protect our legal rights or otherwise comply with legal obligations.
When assessing the data retention period, we take into account the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we process the data, and whether we can achieve those purposes through other means, and the applicable legal requirements.
The only thing we need from you on this Website is a way to reply. Without an email address we cannot answer an enquiry, and the form will say so. Nothing else is required, there is no order to cancel, and leaving a field empty costs you nothing.
Write to [email protected] to see, correct or delete the personal data we hold about you. We will answer within one month, and will tell you within that month if a complex or repeated request means we need up to two more.
We will not charge you for this. We may charge a reasonable fee, or decline, only where a request is manifestly unfounded or excessive — and if we do, we will say which it is and why, and you can complain to a supervisory authority about that decision.
As this Website changes, or as the law does, we may need to revise this Policy. The current version always sits behind the "Privacy Policy" link at the bottom of every page, and the effective date at the top says when it last changed.
Where a change materially affects how we use personal data we already hold, we will say so before it takes effect rather than relying on you to notice. Data we collected under an earlier version keeps the protections that version promised.
For your convenience, whenever this Policy is changed, we will update the "effective date" at the top of this page. Be sure you check the effective date to see if this Policy has been revised since your last visit.
You may access the current version of this Policy at any time by clicking the link marked "Privacy Policy" at the bottom of each page of this Website.
Facebook, Twitter, and other social media platforms provide tools that many of our customers use and enjoy, and we include links to various social media platforms on our Website. If you interact with these social media platforms through our Website, your experience on those platforms will be governed by the privacy and other policies of those platforms. We encourage you to choose your privacy settings on those sites accordingly.