Last updated: 2026-10-16
This Privacy Policy explains how AI Academy Lab ("we", "us") handles personal data when you visit https://aiacademylab.org, send us a message or request early access. It follows Regulation (EU) 2016/679 (GDPR).
1. Who is responsible
The data controller is AI Academy Lab. You can reach us at partnerships@aiacademylab.org for any question about your personal data.
2. What we process, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Delivering and securing the website | IP address and request data (page requested, date and time, browser and device information) in server logs | Legitimate interest in a secure, working website (Art. 6(1)(f)) | Kept by Cloudflare for the period it sets for its logs |
| Answering your message and evaluating early-access or partnership requests (contact form) | Name, company, email, sector, message | Steps taken at your request before a contract (Art. 6(1)(b)); legitimate interest in answering business enquiries (Art. 6(1)(f)) | As long as needed to handle the request, then at most 24 months after the last contact, unless a contract follows |
| Answering emails you send to our addresses | Email address, name if given, content of the message | Same as the contact form | Same as the contact form |
3. Website and server logs
The website is static and hosted on Cloudflare Pages. Cloudflare, Inc. delivers the site, runs the network that serves it and protects it from abuse. For this it processes your IP address and the details of each request. We use no analytics, no advertising, no tracking pixels, no social media plugins, no third-party fonts (fonts are served from our own site) and no embedded third-party content.
4. Contact and early-access form
The form asks for your name, company, email, sector and message. It is submitted to a Cloudflare Pages Function, passed to a Cloudflare Worker that sends it as an email through Cloudflare Email Routing, and delivered to the mailbox behind partnerships@aiacademylab.org, hosted by our email provider, Amazon Web Services. The data is not stored in a website database.
We use it only to reply and to evaluate early-access and partnership requests. We do not use it for marketing newsletters. Emails sent directly to our addresses are treated in the same way.
5. Cookies
The site sets no cookies of its own and uses no local storage. Cloudflare may set strictly necessary security cookies if its bot protection is triggered. Details are in our Cookie Policy.
6. Who receives your data
- Cloudflare, Inc.: hosting, content delivery, security and email routing.
- Amazon Web Services (our email provider): receives and stores the messages delivered to our mailbox.
These providers act on our behalf as processors or, for their own security logs, under their own terms. We do not sell personal data and do not share it for advertising.
7. Transfers outside the EU/EEA
Cloudflare and Amazon Web Services are based in the United States, and messages are processed there. Transfers rely on the EU-US Data Privacy Framework where the recipient is certified and/or on the European Commission's Standard Contractual Clauses.
8. Your rights
Under Articles 15 to 22 GDPR you can ask us for access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing relies on your consent, you can withdraw it at any time without affecting what was done before.
To exercise a right, write to partnerships@aiacademylab.org. We may need to verify your identity before acting on a request.
You may also lodge a complaint with a supervisory authority, in particular the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority of your country of residence.
9. Providing data and automated decisions
Providing your data is voluntary, but without name, email and message we cannot reply. We do not take decisions based solely on automated processing, and we do not profile you.
10. Minors
The website is not directed at people under 16, and we do not knowingly collect their data.
11. Changes
We may update this policy. The date at the top shows the latest version. Material changes will be made visible on this page.