Privacy Policy

1. Data Controller

The data controller is RBB LAB, Via 3 Settembre 11, Serravalle, Republic of San Marino — reachable at info@rbblab.com.

2. What data we collect

We collect only the personal data you voluntarily provide through the forms on this website:

• Contact form: name and email address.
• Job application form: name and email address, plus the content of your application message.

We do not collect any other personal data. We do not use tracking pixels, analytics scripts, or any third-party profiling tools.

3. Cookies

This website does not use cookies of any kind — neither technical, functional, nor marketing cookies. No consent banner is shown because there is nothing to consent to.

4. Purpose and legal basis for processing

We will never use your data for purposes other than those for which it was collected.

5. How your data is transmitted

Form submissions are sent via an encrypted HTTPS connection to a server-side endpoint operated by us. Your data is then forwarded to our internal email inbox and is not stored in any external database or CRM.

6. Data retention

• Contact enquiries: your data is retained for as long as necessary to handle your request, and no longer than 12 months after the last exchange.
• Job applications: retained for 6 months after the selection process for the relevant position concludes, then permanently deleted.

7. Recipients

Your data is not sold, rented, or shared with third parties for commercial purposes. Access is limited to RBB LAB staff directly involved in handling your request or application.

8. Your rights

Under the GDPR and applicable San Marino data protection law, you have the right to:

• Access the personal data we hold about you.
• Rectify any inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict the processing of your data.
• Object to processing based on legitimate interest.
• Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, write to info@rbblab.com. We will respond within 30 days.

9. Right to lodge a complaint

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority. For residents of San Marino: Garante per la protezione dei dati personali. For EU residents: the supervisory authority of your country of residence.

10. Changes to this policy

We may update this policy if our data practices change. The date at the top of this page always reflects the most recent version. We will not retroactively reduce your rights without explicit notice.