Privacy policy
Last updated:
This policy explains how Differant Labs S.L. processes personal data on the website differantlabs.com, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
In short: we only collect the data you choose to send us, we use it only to answer you, we do not use analytics, advertising or profiling, and we do not sell or share your data except with the service providers needed to run the website and deliver your message.
1. Data controller
- Controller
- Differant Labs S.L.
- Tax ID (NIF)
- B88751227
- Address
- Paseo de los Robles, 2, Oficina 4.5, 04720 Aguadulce (Almería), Spain
- hello@differantlabs.com
Differant Labs is not required to appoint a Data Protection Officer and has not done so. For any question about your data, write to the email address above.
2. What data we process
When you use the contact form
- Data you enter: name, email address and subject (required); company, phone number and message (optional).
- Your consent: the fact that you ticked the box accepting the data protection information.
- Anti-bot check: the form is protected against spam by Cloudflare Turnstile. When you open the form, Turnstile processes technical data from your browser and device (such as your IP address, browser type and version, and interaction signals) to tell people from automated programs. When you send the form, your IP address is also passed to Cloudflare to verify the check.
The form also contains a hidden field that people never see; it is only used to detect automated submissions.
Please do not include in your message special categories of data (such as health data) or personal data of other people unless it is strictly necessary for your enquiry.
When you write to us by email
We process your email address, the content of your message and any data you include in it.
When you browse the website
To deliver the pages and protect them against attacks, our hosting provider processes the technical data that every connection involves (IP address, date and time, requested page, browser information). This data may be kept in security and service logs for a short period. We do not use it to identify you, and we do not use analytics, advertising or tracking tools. Fonts are hosted on our own website, so no data is sent to font providers.
3. Purposes
- To answer your enquiry and, if you ask for it, to send you information about our services and continue the conversation.
- To keep the website and the contact form secure and prevent spam and abuse.
We will not use your data for any other purpose, and we will not send you newsletters or commercial communications unless you ask for them.
We do not make decisions based solely on automated processing and we do not build profiles. Turnstile’s automated check only decides whether a submission looks automated; it has no legal or similarly significant effect on you, and you can always write to us by email instead.
4. Legal basis
- Contact form and emails: your consent (article 6.1.a GDPR), which you give by ticking the box before sending the form or by writing to us. When your enquiry is a request for information or a quote about our services, the processing is also necessary to take steps at your request before a possible contract (article 6.1.b GDPR).
- Security and anti-bot checks: our legitimate interest in protecting the website and the form against fraud, spam and attacks (article 6.1.f and recital 49 GDPR).
The fields marked as required are needed to answer you; if you do not provide them, we cannot handle your enquiry through the form. You can withdraw your consent at any time by writing to hello@differantlabs.com; this does not affect the lawfulness of the processing carried out before the withdrawal.
5. Recipients and processors
We do not sell your data or give it to third parties, except where required by law (for example, at the request of courts or public authorities). To run the website and deliver your message we use the following service providers, which act as data processors under data processing agreements and only on our instructions:
- Cloudflare, Inc. (United States): hosting and delivery of the website, processing of contact form submissions, and the Turnstile anti-bot service.
- Microsoft (Microsoft Ireland Operations Limited and its affiliates, including Microsoft Corporation, United States): Microsoft 365 email service, through which your message is delivered to and stored in our mailbox.
6. International transfers
Using these providers may involve transferring data to the United States. Cloudflare, Inc. and Microsoft Corporation are certified under the EU-U.S. Data Privacy Framework, covered by the European Commission’s adequacy decision of 10 July 2023. Their data processing agreements also include the Standard Contractual Clauses approved by the European Commission (article 46 GDPR) as an additional safeguard. You can ask us for more information about these safeguards by email.
7. Retention
We keep your enquiry and contact details for as long as needed to handle it and, where applicable, to follow up the relationship that results from it. After that, the data is kept blocked, available only to courts and public authorities, for the statutory limitation periods during which liabilities arising from the processing may be claimed, and is then deleted, in accordance with article 32 of the LOPDGDD.
The website itself does not keep a copy of the form: the submission is only used to send the email to our mailbox. Technical data processed by Cloudflare for security and for Turnstile is kept by Cloudflare for the short periods set out in its own policies.
8. Your rights
You have the right to:
- access your personal data;
- rectify inaccurate or incomplete data;
- erase your data;
- restrict the processing in certain cases;
- object to the processing based on our legitimate interest;
- data portability, for the data you gave us on the basis of your consent or a contract;
- withdraw your consent at any time.
To exercise them, write to hello@differantlabs.com saying which right you want to exercise. If we have reasonable doubts about your identity, we may ask you for the information needed to confirm it. We will reply within one month; for complex or numerous requests this may be extended by two further months, in which case we will tell you. Exercising your rights is free of charge.
If you think we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es) or with the data protection authority of the EU country where you live or work. We would appreciate the chance to solve the issue first, so feel free to contact us beforehand.
9. Security
The website is served only over encrypted connections (HTTPS). Form submissions are checked and sent directly to our mailbox without being stored on the website, and access to that mailbox is restricted to authorised people at Differant Labs. We apply technical and organisational measures appropriate to the risk to protect your data against loss, misuse and unauthorised access.
10. Minors
The website is addressed to businesses and professionals, not to minors. Children under 14 must not send us their personal data (article 7 LOPDGDD). If we find out that we have received data from a child under 14 without the consent of their parents or guardians, we will delete it.
11. Changes to this policy
We may update this policy when the website or the law changes. The date at the top shows the current version. If a change significantly affects how we process data you have already given us, we will let you know.
More information about the website and its owner is available in the legal notice and the cookie policy.