Legal notice

Privacy Policy

Last updated: November 2026

In short: this website sets no cookies, uses no analytics or tracking, and embeds no third-party content. Fonts are served from our own host. The only personal data we process is what our hosting provider logs for security and operations, and what you send us if you email us.

1. Controller

We have not appointed a data protection officer, as we are not legally required to do so. For any privacy question, please write to the email address above.

2. Hosting and server log files

This website is hosted and delivered by BunnyWay d.o.o. (bunny.net), a company based in Slovenia, EU. When you visit the site, our hosting provider automatically processes technical data that your browser sends, in particular:

• your IP address,
• browser and operating system (user agent),
• date and time of the request, the page or file requested, and the response status.

This data is needed to deliver the website to you, to keep it stable and secure, and to detect and defend against attacks. The legal basis is our legitimate interest in a secure and functioning website, Art. 6(1)(f) GDPR. The log data is not combined with other data, not used to identify you and not used for marketing. It is kept only as long as needed for these purposes and then deleted automatically.

BunnyWay d.o.o. acts as our processor under a data processing agreement pursuant to Art. 28 GDPR. To deliver the site quickly, a request may be answered by a server close to you, which can be located outside the EU/EEA; such transfers are covered by the EU Standard Contractual Clauses in that agreement.

3. No cookies, no analytics, no tracking

This website does not set cookies and does not use comparable technologies to store or read information on your device. We use no web analytics, no tracking or advertising pixels, no social media plug-ins and no embedded third-party content such as videos or maps. All fonts are hosted on our own server, so your browser does not connect to any font provider.

4. Contacting us by email

The website offers no contact form; contact links simply open your own email program. If you write to us, we process the data you send (typically your name, email address, organisation and the content of your message) in order to answer you and, where applicable, to prepare or carry out a collaboration.

The legal basis is Art. 6(1)(b) GDPR where your message relates to a contract or steps prior to entering into one, and otherwise our legitimate interest in answering enquiries, Art. 6(1)(f) GDPR. We delete your messages once they are no longer needed for these purposes, unless statutory retention obligations (for example under commercial or tax law) require us to keep them longer.

Our email is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace), which processes emails on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Google may process data on servers outside the EU/EEA, including in the USA. Such transfers are based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, under which Google is certified, and on the EU Standard Contractual Clauses.

5. Your rights

Under the GDPR you have the right to:

• obtain access to the personal data we hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have your data erased (Art. 17),
• have processing restricted (Art. 18),
• receive your data in a portable format (Art. 20),
• object at any time to processing based on our legitimate interests, on grounds relating to your particular situation (Art. 21).

To exercise these rights, simply email us at info@consciousinnovationlab.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tallinn, Estonia, www.aki.ee. You may also contact the authority in your own EU country of residence or work.

6. Further information

You are not required to provide us with any personal data in order to read this website. We do not use automated decision-making or profiling. We may update this policy when our website or the law changes; the current version is always available on this page.