Privacy Policy

This Privacy Policy explains how rootlabs.eu ("we", "us") collects and uses information when you visit our website and when you contact us through the form on this site. We keep data collection to a minimum. We do not sell or share your personal data with third parties for their own marketing. We do not use your data for marketing purposes.

Last updated: 2025-09-18

• Website analytics (Google Analytics 4): With your consent, we use Google Analytics to understand how our site is used (pages visited, approximate location, device/browser information, referral source). We use Google’s Consent Mode so analytics only runs if you accept analytics in the banner. GA4 does not log or store IP addresses; signals may be used for approximate geolocation. Cookies set by Google may be used to distinguish visits.
• Contact form: If you submit the form, we receive your name, email, and message. We use these details only to respond to your inquiry and to follow up on the topic you contacted us about. We do not initiate marketing emails or send unsolicited offers, and we do not use your contact details for unrelated communications. We do not share your message or contact details with third parties; access is limited to our team members who need it to handle your request.
• Consent preference: We record your analytics consent choice (granted or denied) in your browser storage (localStorage), together with a timestamp. This minimal record lets us remember your decision and is necessary to meet consent requirements under applicable privacy laws (for example, GDPR and the ePrivacy rules). It does not include your name, email, IP address, or any unique identifier, is not shared with third parties, and remains on your device unless you clear it.

• Analytics: Your consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time by clearing site data and/or reopening the banner via site controls if available.
• Contact form: Our legitimate interests in responding to inquiries and providing pre-contractual information (GDPR Art. 6(1)(f) and/or 6(1)(b)).

• Analytics: Measure site traffic and improve content and performance.
• Contact: Communicate with you about your request and related services.

We do not sell your data. We may use trusted processors solely to operate the website and analytics:

• Google Analytics (GA4): Analytics provider. Data may be processed on Google infrastructure and transferred outside the EEA subject to Standard Contractual Clauses. See Google’s Privacy Policy and Data Processing Terms.

We require processors to provide appropriate technical and organizational measures and process data only under our instructions.

• Analytics data: Retained per our Google Analytics account settings.
• Contact form data: Kept as long as needed to handle your inquiry and for up to 12 months thereafter unless a longer period is required by law or you ask us to delete it sooner where applicable.
• Consent preference: Stored in your browser until you clear it or it expires/changes.

Subject to conditions and applicable law (e.g., GDPR), you may have the right to access, rectify, erase, restrict processing, object, and data portability. Where processing is based on consent, you can withdraw it at any time without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority.

Where data is transferred outside the EEA (for example, by Google), we rely on safeguards such as the EU Standard Contractual Clauses or other lawful transfer mechanisms provided by the provider.

• Strictly necessary: A local storage entry to remember your consent choice.
• Analytics (optional): Google Analytics cookies/identifiers set only after consent to measure visits and interactions.

We may update this policy from time to time. Significant changes will be reflected on this page with an updated date.