Privacy and Policy 

Last updated: April 2025

1. Data Controller

The data controller is HighestLab, reachable at: privacy@highestlab.it

2. Types of Data Collected

HighestLab collects only the data necessary for the proper functioning of the website. Specifically:

Navigation data — IP address, browser type, operating system, pages visited and access times, automatically collected by the site's systems.

Data voluntarily provided by the user — name, email address and message, when the user fills in the contact form.

HighestLab does not collect sensitive data and does not profile users.

3. Purposes of Processing

Data is processed for the following purposes:

• Ensuring the proper functioning and security of the website

• Responding to contact requests submitted by users

• Aggregate and anonymous statistical analysis of site usage

4. Legal Basis

Data processing is based on the legitimate interest of the controller (navigation data) and on the user's consent (contact form data), pursuant to EU Regulation 2016/679 (GDPR).

5. Data Retention

Navigation data is retained for a maximum of 12 months. Data submitted via the contact form is retained for the time strictly necessary to handle the request and, in any case, no longer than 24 months.

6. Disclosure and Sharing

Data is not transferred, sold, or shared with third parties, except for technical service providers (hosting, email) acting as data processors under Art. 28 GDPR, with appropriate contractual guarantees.

7. User Rights

Users have the right to:

• Access their personal data

• Request its rectification or erasure

• Object to processing or request its restriction

• Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)

To exercise these rights: privacy@highestlab.it

8. Cookies

The site uses only technical cookies, necessary for page functionality. No profiling or third-party advertising cookies are used. For detailed information, please refer to our Cookie Policy.