Privacy Policy

The date of the last update to this notice (3 September 2026) is shown at the top of the page. It has been written with care, but it is not a substitute for review by a qualified legal professional, which we recommend before relying on it for any significant decision.

The data controller is Automations Lab di Federico Donati, a sole proprietorship based at Via Peirce 56, 00139 Rome, Italy, VAT number IT17790701001.

For anything concerning your personal data you can reach the controller at federico@automationslab.it or, for formal correspondence, at the certified email address automationslab@pec.it. No Data Protection Officer has been appointed, as the legal conditions requiring one are not met.

Information you give us when you fill in the audit request form: your full name, work email, company name and a single multiple-choice answer about the process that costs you the most time. If you use the ROI calculator, the values you enter are numbers only (hours, costs, volumes) and contain no personal data.

Technical data captured automatically when the form is submitted: IP address, browser user agent, referring page, UTM parameters of the campaign that brought you to the site, language setting and the page the request was sent from.

Browsing data: the site is hosted on Vercel, which produces aggregate, cookieless statistics (Vercel Web Analytics) that we need to run and monitor the service. Analytics and marketing cookies, which only run after you consent, are described in the Cookie Policy.

We process your data for the following purposes:

a) To reply to your request and schedule the free 30-minute process audit call. Legal basis: your consent, given by submitting the form (Art. 6(1)(a) GDPR), and pre-contractual steps taken at your request (Art. 6(1)(b)).

b) To follow up commercially in connection with your request, for example by sending a quote or further material on the topic of the audit. Legal basis: our legitimate interest in following up a contact you initiated (Art. 6(1)(f)). You can object at any time.

c) To prevent abuse, spam and misuse of the form and keep the site secure, using the technical data. Legal basis: legitimate interest (Art. 6(1)(f)).

d) To measure the effectiveness of our advertising through UTM parameters and, only with your consent, the tools described in the Cookie Policy.

Providing the form data is optional, but without it we cannot answer your request.

Your data is handled by the controller and by service providers acting as processors under Art. 28 GDPR, contractually bound to process it only on our instructions:

- Make.com: routes the form submission and sends the email notification to the controller. - Supabase: the database where leads are stored, hosted in the European Union. - Vercel: website hosting and aggregate cookieless statistics. - Google Workspace (Google Ireland Ltd): email and productivity tools used to handle correspondence.

We do not sell your data or share it with third parties for their own purposes. It may be disclosed to public authorities, legal or accounting advisers only where the law requires it or where necessary to establish or defend a legal claim.

The lead database (Supabase) and hosting (Vercel) are configured to serve and store data within the European Union. Some providers, however, are established or run infrastructure in the United States and may process data outside the European Economic Area: this applies to Make.com, Google and, if you accept the relevant cookies, Google LLC (Google Analytics 4) and Meta Platforms.

Such transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, for providers certified under it, or on the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR), supplemented by additional safeguards where needed. You can request a copy of the safeguards in place by writing to federico@automationslab.it.

Data belonging to people who send us an audit request is kept for 24 months from the last meaningful contact (for example the last email or call), unless a contract is signed in the meantime.

If the request leads to an engagement, the data is kept for the duration of the contract and afterwards for the periods required by law, in particular tax and accounting obligations (ten years under Art. 2220 of the Italian Civil Code) and the defence of legal claims.

Technical data collected to prevent abuse is kept only as long as strictly necessary for that purpose and never beyond the period above. When the retention period ends, the data is deleted or anonymised.

As a data subject you can exercise at any time the rights set out in Articles 15 to 22 GDPR: access your data and obtain a copy; have inaccurate or incomplete data corrected; have it erased (the right to be forgotten); restrict processing; receive your data in a structured, commonly used format to move it to another controller (portability); object to processing based on legitimate interest, including commercial follow-up; and withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights write to federico@automationslab.it or automationslab@pec.it. We will reply within one month, extendable where the law allows.

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it, Piazza Venezia 11, 00187 Rome), or with the supervisory authority of the EU member state where you live.

We do not use your data to make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you. Your form answers and ROI calculator inputs are used only to prepare the audit call and give you an indicative estimate, which has no binding effect.

The marketing tools described in the Cookie Policy may be used, with your consent, to build advertising audiences. You can switch them off at any time through the Cookie preferences link in the site footer.

We apply technical and organisational measures proportionate to the risk to protect your data against unauthorised access, loss, destruction or disclosure: encrypted transmission over HTTPS, access control with multi-factor authentication, a restricted set of accounts able to read the lead database, and providers with recognised security certifications.

No system is entirely risk-free. If a personal data breach occurs that is likely to result in a high risk to your rights, we will inform you without undue delay as required by Art. 34 GDPR.

The site and the services of Automations Lab are aimed at businesses and professionals and are not intended for anyone under 18. We do not knowingly collect data from minors; if we discover we have done so, we will delete it promptly.

We may update this notice to reflect changes in the law, new tools we adopt or changes in how we work. The updated version is published on this page with a new revision date. If a change materially affects data we have already collected, we will let you know with a notice on the site or by email where you have given us an address.

For any question about this notice or the processing of your personal data:

Automations Lab di Federico Donati Via Peirce 56, 00139 Rome, Italy VAT IT17790701001 Email: federico@automationslab.it Certified email (PEC): automationslab@pec.it