Privacy Policy

1. Who is responsible for your data

The controller for personal data processed on this website is World Data Lab WDL GmbH, Untere Donaustraße 11, 1020 Vienna, Austria (company register FN 595791p). You can reach us at hello@worlddatalab.com for any privacy question or request.

2. Information we collect

When you interact with our website or services, we may collect:

• Name, email address, job title and company name
• Phone number and any other information you voluntarily provide
• Technical data such as IP address, browser and device type, and pages viewed, where you have accepted analytics cookies

3. How we use your information and on what legal basis

We only process personal data where the GDPR gives us a legal basis for doing so:

• Delivering the website and keeping it secure - legitimate interests (Art. 6(1)(f) GDPR).
• Responding to your enquiry or sending requested materials - performance of a contract or steps taken at your request (Art. 6(1)(b) GDPR).
• Newsletters, marketing emails, analytics and advertising cookies - your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Meeting legal, accounting and tax obligations - legal obligation (Art. 6(1)(c) GDPR).

4. Cookies and the Silktide consent manager

Silktide is the single consent manager for this website. It records your choice per category and controls which scripts are allowed to load:

• Essential cookies are always on.
• Analytics cookies (HubSpot and Google Analytics 4) load only after you accept the Analytics category.
• Marketing cookies (LinkedIn Insight Tag and HubSpot advertisement features) load only after you accept the Marketing category.
• Before you choose, no analytics or marketing scripts are loaded and no such cookies are set.

Full cookie tables, providers and retention periods are listed in our Cookie Policy.

5. Withdrawing your consent

You can withdraw consent at any time, and it is as easy as giving it:

• Reopen the preferences panel with the cookie icon in the bottom-right corner of any page and switch Analytics or Marketing off.
• Switching a category off stops the related scripts loading and revokes the matching HubSpot consent.
• For marketing emails, use the unsubscribe link in any message or contact us directly.
• To object to processing or request deletion of data already collected, email us using the contact details below.

6. Sharing your information

We do not sell your personal information. We share data only with service providers who process it on our behalf under a data processing agreement, and with authorities where the law requires it. Our main processors are:

• HubSpot - CRM, forms, email and website analytics.
• Google (Google Analytics 4) - website measurement, only with Analytics consent.
• LinkedIn - campaign measurement, only with Marketing consent.
• Silktide - cookie consent management.
• Our website hosting and email providers.

7. International data transfers

Some of these providers are based in, or process data in, the United States. Where personal data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses together with additional safeguards. You can request a copy of the relevant safeguards from us.

8. How long we keep your data

• Analytics data (Google Analytics 4): 14 months.
• Contact and form data in HubSpot: while the business relationship is active and up to 3 years after your last interaction, unless you ask us to delete it sooner.
• Newsletter data: until you unsubscribe or withdraw consent.
• Cookie and consent records: for the lifetime of each cookie as listed in the Cookie Policy, and consent records for up to 12 months.
• Accounting and tax records: 7 years, as required by Austrian law.

9. Your rights under the GDPR

You have the right to:

• Access the personal data we hold about you and receive a copy.
• Have inaccurate data corrected and incomplete data completed.
• Have your data erased, and to ask us to restrict how we process it.
• Receive your data in a portable, machine-readable format.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.
• Lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

To exercise any of these rights, email hello@worlddatalab.com. We respond within one month.