Data Protection Policy
Data Protection, Controller, and Scope
We respect the privacy of our customers and other interested persons and comply with the applicable laws for the protection of your privacy. These laws include, in particular, the General Data Protection Regulation of the European Union ("GDPR").
Scope of this Privacy Notice:
- Website: 8labs.ai
- Data Subjects: Website visitors
The Controller for data processing within this scope is: 8Labs GmbH Röhrer Weg 8 71032 Böblingen Germany Email: info@8labs.ai
This policy explains:
- The purpose for data collection and processing.
- The affected categories of personal data.
- The legal basis for processing.
- The involved third-party processors.
- Third parties receiving data transfers.
- Storage duration, data subject rights, and other relevant processing information.
Processing Purposes: website 8labs.ai
Website Hosting
Our website is built and hosted using "Hubspot," a product of Hubspot, Inc. (USA). Webflow uses Content Delivery Network (CDN) providers such as Amazon CloudFront, or Cloudflare for fast and secure content delivery.
Data Collected and Processed:
- Technical information (e.g., IP address)
- Device information
- User behavior relevant for error analysis
- Website visit data
- Browser information
- Log data
- Cookies
Legal Basis:
- Legitimate interest (Art. 6 para. 1 lit. f GDPR) for providing the service.
- Consent (Art. 6 para. 1 lit. a GDPR) for CDN usage.
Involved Processors:
- HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin.
Testing the AI Telephony Agent
We offer a test function for our AI telephony agent. By providing your data, you will receive a call from the agent. Data transfers to third countries may occur.
Data Collected and Processed:
- Identification data
- Company details
- Contact details
- Voice-transmitted information
Legal Basis:
- Legitimate interest (Art. 6 para. 1 lit. f GDPR) for testing the service.
Involved Processors (Standard Contractual Clauses & Data Privacy Framework apply):
- Twilio Ireland Limited, Dublin, Ireland
- Nebius B.V., Amsterdam, Netherlands
- Google Ireland Limited, Dublin, Ireland
- Amazon Web Services Germany GmbH, Berlin, Germany
Important Note on Sensitive Data: Please do not share particularly sensitive data during tests. This includes ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, and sexual orientation. You can avoid this data collection entirely by not using the test service.
Contact via Email
You can contact us via the email address published on our website for inquiries or feedback.
Data Collected and Processed:
- Email address
- Information transmitted within the email
Legal Basis:
- Legitimate interest (Art. 6 para. 1 lit. f GDPR) for answering questions and handling inquiries.
Important Note on Sensitive Data: Please refrain from emailing sensitive personal data (e.g., health data, political opinions, biometric data).
Further Information
Cookies and Local Storage
We store data in cookies, session storage, and local storage based on the legal basis specified per service. You can control, restrict, or delete these storage processes directly within your web browser settings.
Storage Duration
Personal data is retained only as long as necessary to fulfill its original purpose or to comply with statutory retention periods.
Data Disclosure
We never sell your data. We only share personal data with third parties if legally required, necessary for service provision, or with your explicit consent. Categories of recipients include:
- Processors mentioned in this policy
- Banks and payment service providers
- Tax advisors
- Lawyers
Protection of Personal Data
We employ industry-standard technical and organizational measures to protect personal data, including pseudonymization and encryption during transmission and storage whenever possible.
Withdrawal of Consent
If processing is based on your consent (Art. 6 para. 1 lit. a GDPR), you may withdraw it at any time. This does not affect the lawfulness of processing carried out prior to the withdrawal.
Mandatory Data Provision
Providing personal data to visit our website is not legally or contractually required. However, refusing to provide certain data may prevent you from using specific features or services on the site.
Data Subject Rights
You have the following rights regarding your personal data:
- Right of Access: Request information and a copy of your stored data.
- Right to Rectification: Have incorrect or incomplete data corrected.
- Right to Data Portability: Receive your provided data in a structured, machine-readable format.
- Right to Restriction of Processing: Limit how we process your data under specific conditions.
- Right to Erasure: Have your personal data deleted, where legally permissible.
- Right to Object: Object to data processing (e.g., by declining certain services).
- Right to Lodge a Complaint: Contact a supervisory authority if you believe your data is being mishandled.
To exercise any of these rights, please contact us via the email address listed at the top of this policy.