Privacy Policy of supplylab
Last updated: [DATE]
This Privacy Policy describes how personal data of visitors to supplylab.dev is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable data protection legislation.
1. Data Controller
Data Controller: Matteo Pozzali
Website: supplylab.dev
Contact: privacy@supplylab.dev
The data controller has not appointed a Data Protection Officer (DPO) as this is not required given the nature and scope of the data processing carried out.
2. What data is processed
supplylab is an educational and informational website. It does not require registration, does not collect data through contact forms, and does not involve account creation.
a) Browsing data
Like any website, the servers hosting supplylab.dev (Vercel) may automatically collect certain technical data during browsing, including: IP address, browser type and operating system, pages visited, date and time of access. This data is primarily processed by the hosting provider for technical and security purposes.
b) Analytics data (consent only)
With the user's consent, supplylab uses Microsoft Clarity to collect website usage data in aggregated and pseudonymized form. For details on Microsoft Clarity, please refer to supplylab's Cookie Policy.
c) Data uploaded to tools
Some tools on supplylab (such as Forecast Lab) allow users to upload their own data for analysis. This data is processed exclusively in the user's browser via Web Workers and is never transmitted to external servers or saved by supplylab. The data controller has no access to this data at any time.
d) Cookies
For detailed information about cookies used, please refer to supplylab's Cookie Policy.
3. Purposes and legal basis
| Purpose | Legal basis | Data involved |
|---|---|---|
| Technical operation of the website | Legitimate interest (Art. 6.1.f GDPR) | Browsing data |
| Aggregated analysis of website usage | User consent (Art. 6.1.a GDPR) | Analytics data (Microsoft Clarity) |
| Storing cookie preference | Legitimate interest (Art. 6.1.f GDPR) | Preference cookie |
supplylab does not process personal data for marketing, profiling, sales, or commercial communication purposes.
4. Data recipients
Personal data may be processed by:
- Vercel Inc. — website hosting provider (browsing data)
- Microsoft Corporation — analytics service provider, Microsoft Clarity (only with user consent)
No data is shared with third parties for their own independent purposes.
5. Data transfers outside the EU
Vercel and Microsoft are companies headquartered in the United States. Data transfers to the US are based on the EU-U.S. Data Privacy Framework, where applicable, or other appropriate safeguards under the GDPR (Art. 46), including the European Commission's Standard Contractual Clauses.
For more information:
- Vercel Privacy Policy: vercel.com/legal/privacy-policy
- Microsoft Privacy Statement: privacy.microsoft.com/privacystatement
6. Data retention
- Browsing data (server logs): retained by Vercel according to their own retention policy
- Analytics data (Microsoft Clarity):retained according to Microsoft's terms (playback up to 30 days, aggregated data up to 13 months)
- Preference cookie:stored in the user's browser until manual deletion or expiry
- Data uploaded to tools: not retained — processed locally in the browser and never transmitted or saved
7. User rights
Under the GDPR, users have the right to:
- access their personal data (Art. 15)
- rectify inaccurate data (Art. 16)
- erase their data (Art. 17)
- restrict processing (Art. 18)
- object to processing (Art. 21)
- data portability (Art. 20)
- withdraw consent at any time (Art. 7.3), without affecting the lawfulness of processing based on consent before its withdrawal
To exercise these rights, contact the data controller at the address indicated in section 1.
Users also have the right to lodge a complaint with the competent supervisory authority. In Italy: Garante per la protezione dei dati personali (garanteprivacy.it).
8. Changes to this Privacy Policy
The data controller reserves the right to update this Privacy Policy to reflect changes to the website, services used, or applicable legislation. In the event of substantial changes, the date at the top of this page will be updated.
9. Contact
For any questions regarding the processing of personal data on supplylab.dev, contact:
Matteo Pozzali — privacy@supplylab.dev