Privacy Policy

How this website manages the personal data of the users who visit it.

Introduction

This notice describes how the website heartwoodlabs.com manages the personal data of the users who visit it, as well as the processing practices for data transmitted by the data subject to the Controller through this website.

This notice is provided in accordance with:

  • Art. 13 of Legislative Decree no. 196/2003 – Code on the protection of personal data, as amended by Legislative Decree no. 101/2018;
  • Art. 13 of Regulation (EU) 2016/679 (GDPR).

The data controller

Following consultation of this website, or completion of the forms it contains, the personal data of users may be processed. The "Controller" of such processing is Heartwood Labs SRLS unipersonale, with registered office at Via Costanzo Varolio, 17 – 40133 Bologna (BO), VAT and Tax Code 03807731207.

For requests regarding personal data protection, you may contact the Controller:

Types of data processed

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information may include the IP address of the device used to visit the site, the type and version of the browser used, the pages visited, the date and time as well as the time spent on each page.

Data voluntarily provided by the user

Apart from what is specified for browsing data, the user is free to provide the personal data requested in the forms on this website (such as the contact form) to request informational material or other communications. Failure to provide such data may make it impossible to obtain what has been requested.

Third-party services

The website uses third-party services that may process user data:

  • Google Analytics 4: Google's statistical analytics service, activated only after consent is given via the website's cookie banner;
  • Google Maps: Google's mapping service, used on the "Contact" page to display the office location;
  • Google Fonts and CDN libraries: technical resources (fonts and JavaScript libraries) loaded from external servers, which may record the device's IP address.

For more information on Google's privacy policies, consult the relevant web page.

Cookies

The website uses cookies and similar technologies to ensure the correct functioning of its pages and to record information about user preferences. On first access, a consent management banner is shown, allowing users to accept or refuse the different cookie categories.

  • Essential cookies: necessary for the website to function (storing consent preferences, security); they do not require consent and cannot be disabled;
  • Analytics cookies: related to Google Analytics 4, used to understand how visitors interact with the website. They are loaded only after the user's acceptance;
  • Preference management: the choices made via the banner can be modified at any time; consent cookies are renewed periodically to ensure compliance with current regulations.

Links to other websites

This website contains links to other websites. As we have no control over these sites, we are not responsible for their content. Our privacy policy does not extend to the policies used on other sites. We recommend reading their privacy policies before using these other sites.

Method and place of processing

The processing connected to the website's web services is carried out using computer and telematic tools, with organizational and processing logic strictly related to the stated purposes and with adequate security measures to protect the personal data processed.

Data is stored and processed at the Controller's premises and through cloud service providers with servers located in the EU (for example Amazon Web Services), also used to forward messages sent through the contact form. Data transmission between the user's browser and the website is encrypted via the HTTPS protocol (SSL/TLS). Personal information is accessible only to a limited number of authorized people, tasked with keeping such information confidential.

Personal data is processed for the time strictly necessary to pursue the purposes for which it was collected, in accordance with the retention periods required by applicable regulations (in particular: browsing and analytics data for the duration defined by the service provider; contact form data for the time needed to manage the request and any legal obligations).

Purpose and legal basis of processing

The processing of personal data is carried out for purposes strictly connected to the use of the website and certain website services, in relation to the provision of personal data:

  • Website browsing (browsing data): necessary to enable the use of the website; legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR);
  • Contact request (form data): necessary to allow the Controller to provide the information requested by the visitor; legal basis: performance of pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR);
  • Aggregate usage statistics (Google Analytics): based on the consent given by the user through the cookie banner (Art. 6(1)(a) GDPR).

Data subject rights

The individuals to whom the personal data refers have the right, at any time, to obtain confirmation of the existence or otherwise of such data, to know its content and origin, to verify its accuracy or request its completion or update, or its rectification or deletion, in accordance with:

  • Art. 15 of Regulation (EU) 2016/679 – Right of access by the data subject;
  • Art. 16 of Regulation (EU) 2016/679 – Right to rectification;
  • Art. 17 of Regulation (EU) 2016/679 – Right to erasure (right to be forgotten);
  • Art. 18 of Regulation (EU) 2016/679 – Right to restriction of processing;
  • Art. 20 of Regulation (EU) 2016/679 – Right to data portability;
  • Art. 21 of Regulation (EU) 2016/679 – Right to object;
  • Art. 77 of Regulation (EU) 2016/679 – Right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali).

Requests should be addressed to the Controller's physical address or by email to info@heartwoodlabs.com.

Updates

This Privacy Policy was last updated on July 31, 2026. Any updates or changes to our privacy policy will always be made on this page.