Privacy notice

Who is responsible

BME InnoLab is the controller for personal data submitted through this site. The portfolio is hosted on Vercel and carries no tracking beyond privacy-friendly, cookieless analytics.

What we collect

Only what you enter in an enquiry: your name, email address, an optional organisation, your message, and which venture and kind of interest the enquiry concerns.

To prevent abuse, your IP address is processed transiently for rate-limiting and an optional bot check. It is not stored alongside your enquiry.

Why we use it, and our legal basis

We use these details for a single purpose: to route your enquiry to the InnoLab team and the relevant venture, and to reply. The legal basis is your consent, given when you tick the consent box before sending.

Who else processes it

Your enquiry is delivered to the team through Slack (Slack Technologies / Salesforce, Inc., United States). The site and form submissions are served by and transit Vercel. Rate-limiting and the bot check use Upstash and Cloudflare respectively. We do not sell your data or use it for advertising.

How long we keep it

Enquiries remain in the team's Slack channel for as long as needed to follow up, then are removed under InnoLab's retention practice. We keep no separate marketing database.

Your rights

Under the GDPR you can ask us to access, correct, or erase your data, withdraw your consent, or object to its use, and we will respond within the statutory time frame. You also have the right to complain to your data-protection authority.