Privacy Policy

Last updated: February 2026

Data controller

The data controller responsible for your personal data is:

3C Labs
Email: [email protected]

For any privacy-related questions or to exercise your rights, contact us at the email address above.

What data we collect

Contact form. When you submit our contact form, we collect your name, email address, reason for contact, and message. Providing this data is voluntary; however, we cannot respond to your inquiry without it.

Research waitlist. If you sign up for our paper waitlist, we collect your email address. This is voluntary.

Cookies. We use essential cookies to remember your cookie preferences, and optional analytics cookies (Google Analytics 4) if you consent. See the Cookies section below for details.

Server logs. Our hosting provider (Cloudflare) automatically collects standard server logs including IP addresses, browser type, and pages visited. This data is processed by Cloudflare under their own privacy policy.

Legal basis for processing

We process your personal data under the following legal bases (Art. 6 GDPR):

  • Consent (Art. 6(1)(a)): analytics cookies are only activated after you give explicit consent via the cookie banner. You can withdraw consent at any time.
  • Legitimate interest (Art. 6(1)(f)): we process contact form data and waitlist sign-ups to respond to your inquiries and notify you about publications you requested. Our legitimate interest is to communicate with people who reach out to us.
  • Legal obligation (Art. 6(1)(c)): we may retain certain data to comply with legal requirements.

How we use your data

  • To respond to your inquiries submitted through the contact form.
  • To notify you about our research publications if you joined the waitlist.
  • To understand how visitors interact with our website through anonymized, aggregated analytics.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not send marketing communications.

Cookies

Necessary cookies. We store a cookie to remember your cookie consent preference. This cookie is essential for the site to function and cannot be disabled.

Analytics cookies. If you accept analytics cookies, Google Analytics 4 sets cookies (_ga, _gid) to collect anonymized usage data. These cookies are only loaded after you give explicit consent. You can withdraw consent at any time through the cookie settings in the footer.

You can also manage cookies through your browser settings. Note that disabling cookies may affect site functionality.

Third-party services

We use the following third-party services to operate this website:

International data transfers

Some of our third-party service providers (Google, Cloudflare, FormSubmit.co) are based in the United States. When your data is transferred outside the European Economic Area, it is protected by:

  • The EU-US Data Privacy Framework adequacy decision (for certified US companies).
  • Standard Contractual Clauses (SCCs) approved by the European Commission.

You can request more details about these safeguards by contacting us.

Data retention

Contact form submissions and waitlist emails are retained only for as long as necessary to fulfill the purpose for which they were collected. Analytics data is retained according to Google Analytics default settings (14 months). Cookie consent preferences are stored in your browser until you clear them.

Data security

We take appropriate technical and organizational measures to protect your personal data. Our website is served exclusively over HTTPS. Form submissions are transmitted via encrypted connections. We do not store personal data in our own databases; form data is forwarded directly to our email via FormSubmit.co.

Automated decision-making

We do not use automated decision-making or profiling based on your personal data.

Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access the personal data we hold about you (Art. 15).
  • Rectify inaccurate or incomplete data (Art. 16).
  • Erase your personal data (Art. 17).
  • Restrict processing of your data (Art. 18).
  • Data portability in a structured, machine-readable format (Art. 20).
  • Object to processing based on legitimate interest (Art. 21).
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7).

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

Right to lodge a complaint

If you believe we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority. For Spain, the relevant authority is:

Agencia Española de Protección de Datos (AEPD)
www.aepd.es

Links to other websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing any personal data.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

Contact

For any questions about this privacy policy or your personal data, contact us at:

3C Labs
Email: [email protected]