Privacy Policy
How we process your personal data
Table of Contents
1) Who runs this website
This website is run by Iris (personal, non-commercial project).
For any request: privacy@irislabs.it.
2) What we process and why
We only process the data needed for this showcase website to work.
Browsing data (technical logs)
- What: IP address, user agent, visited pages, timestamps, errors.
- Source: your browser; hosting infrastructure (Vercel).
- Purpose: security, abuse prevention, service delivery, internal aggregate stats.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Data you voluntarily provide (if you contact us)
- What: name, email and message content (via form or email).
- Purpose: replying to your request.
- Legal basis: performance of pre-contractual steps (Art. 6(1)(b)).
- Retention: as needed to handle the request and no longer than 12 mesi.
Cookies and similar technologies
We use technical cookies only to remember preferences (language, consent).
No profiling or analytics cookies are enabled by default. See the Cookie Table.
3) Recipients and transfers
- Hosting: website hosted by Aruba S.p.A (IT), which may process technical logs as processor.
- Communications: if you contact us, our email provider Gmail acts as processor.
- Extra-EU transfers: where applicable, we rely on Standard Contractual Clauses and appropriate safeguards.
4) Retention periods
- Technical logs: up to 30 giorni (unless required for security/investigations).
- Contact requests: 12 mesi.
- Technical cookies: as per the table below.
5) Mandatory nature of data
Technical cookies are necessary for the website to function.
Contacting us is optional, but without your data we cannot reply.
6) Your rights
You may exercise your GDPR rights at any time (Arts. 15–22): access, rectification, erasure, restriction, portability, objection.
To exercise your rights, email privacy@irislabs.it with subject "GDPR Request".
You also have the right to lodge a complaint with your supervisory authority.
7) Security
We apply appropriate technical and organizational measures (HTTPS, minimized logs, access control).
8) Children
This website is not intended for children under 14. Any such data will be deleted.
9) Changes
We may update this notice to reflect legal or technical changes. Check the last update date.
Cookie Table
| Name | Purpose | Type | Duration | First/third party |
|---|---|---|---|---|
iris_locale | Stores language preference | Technical | 12 months | First party |
iris_consent | Cookie consent status | Technical | 12 months | First party |