TIMELAB

Privacy policy

Last updated: 2026-09-17

1. Data controller

The data controller for personal data collected through timelab.watch is Joseba Hidalgo, operating as an autónomo under TIMELAB (NIF 47467159N), registered office in Madrid, Spain. Contact: hello@timelab.watch.

2. What data we collect

When you write to us via the enquiry button or contact form, we receive your email address, your name (if provided), and the content of your message. We do not collect any other personal data automatically, and we do not use tracking pixels or behavioural advertising tools.

3. Website analytics

We use Umami, a cookie-less analytics tool, to understand overall site traffic. It only records aggregated, anonymous statistics — page views, referring page, approximate country, device and browser type — and does not identify you individually or link this data to your name, email, or any enquiry you send us. See our Cookies policy for more detail on why this does not require a consent banner.

4. Purpose and legal basis

We process your data exclusively to respond to your enquiry, manage a potential transaction, and provide after-sales service. The legal basis is the performance of a contract or pre-contractual measures taken at your request (Art. 6.1.b GDPR), and our legitimate interest in responding to communications (Art. 6.1.f GDPR).

5. Retention

Enquiry data is kept for as long as needed to handle the conversation, plus the legal limits applicable to commercial bookkeeping in Spain (currently 4–6 years under the General Tax Law and Commercial Code). After that, data is securely deleted. Umami's aggregated analytics data is not tied to you individually, so this retention schedule does not apply to it.

6. Recipients

Your data is not sold or transferred to third parties for marketing purposes. Limited operational processors may have access strictly to provide their service: email infrastructure (Google, Cloudflare), hosting (Vercel), CMS (Sanity), analytics (Umami). All of them comply with GDPR through Standard Contractual Clauses where applicable.

7. Your rights

You can exercise the rights of access, rectification, deletion, objection, restriction, and portability at any time by writing to hello@timelab.watch with proof of identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. International transfers

Some of our service providers are located outside the European Economic Area (e.g. Vercel, Sanity). All transfers are protected by Standard Contractual Clauses approved by the European Commission.

9. Changes

This policy may be updated occasionally. The "last updated" date at the top reflects the current version.