1. Data controller

The controller of the personal data collected through www.lab9.co (the “Site”) is LAB 9 S.A.S., Tax ID (CUIT) 30-71742170-8, with domicile at Juan B. Terán 201, San Miguel de Tucumán (ZIP 4000), Province of Tucumán, Argentina. Privacy channel: privacy@lab9.co.

2. Legal framework

This Policy is drafted in accordance withArgentine Personal Data Protection Law No. 25,326, its Regulatory Decree No. 1558/2001 and the provisions of theAgency for Access to Public Information (AAIP). For individuals residing in the European Economic Area, the provisions of Regulation (EU) 2016/679 (GDPR) described in section 11 additionally apply.

3. What data we process and how we obtain it

We only process the data you voluntarily provide through the Site and technical data derived from browsing:

• Contact form: name, email address, company, message and areas of interest.
• Newsletter: email address.
• Job applications: contact details and the information the candidate chooses to include in their application or CV.
• Browsing and analytics data: IP address, device and browser type, pages visited, visit duration and source, collected through Google Analytics (see sections 5 and 6).

The Site does not require user registration, does not process payments and does not deliberately collect sensitive data within the meaning of Section 2 of Law 25,326; please do not include such data in the forms.

4. Purposes and legal bases

We make no automated decisions with legal effects on data subjects, we do not build profiles with such scope, and we do not sell or assign personal data for commercial purposes.

5. Cookies

A cookie is a small file stored by your browser when visiting a website. This Site is static anddoes not use its own session, account or shopping-cart cookies. The only cookies present belong to the analytics tool:

You may block or delete cookies in your browser settings, and install the Google Analytics opt-out add-on. Blocking cookies does not prevent you from browsing the Site.

6. Analytics

We use Google Analytics, a service provided by Google LLC, to generate aggregate statistics about Site usage. The information is processed in a way that does not allow us to personally identify visitors. Google's privacy policy is available at policies.google.com/privacy.

7. Recipients and processors

Data may be processed by providers rendering services to LAB9 as processors, under confidentiality obligations: the Site's hosting provider (Hetzner Online GmbH), LAB9's own form-handling infrastructure (forms.lab9.co), Google LLC (analytics) and the email/newsletter provider (Resend Inc.). Beyond that, we will only disclose personal data where required by law or a competent authority, or to exercise or defend LAB9's rights.

8. International transfers

Some of the providers mentioned process data on servers located outside the Argentine Republic: Hetzner Online GmbH hosts the Site in the European Union —whose countries are deemed to provide adequate levels of protection—, while Google LLC and Resend Inc. process data in the United States. In such cases, LAB9 seeks to ensure that transfers are made under appropriate contractual safeguards, pursuant to Section 12 of Law 25,326 and AAIP regulations.

9. Security

We apply reasonable technical and organizational measures to protect personal data: TLS (HTTPS) traffic encryption, a static-site architecture with no exposed databases, restricted access to the form-handling infrastructure and data-minimization principles. No system is infallible; in the event of a security incident affecting personal data we will act diligently in accordance with applicable regulations.

10. Data subjects' rights

As a data subject you may at any time exercise your rights ofaccess, rectification, updating and deletion, andwithdraw your consent, by writing to privacy@lab9.co and evidencing your identity. The right of access is free of charge at intervals of no less than six months, unless a legitimate interest is evidenced (Section 14(3), Law 25,326). LAB9 will respond to access requests within10 calendar days and to rectification, updating or deletion requests within 5 business days of receipt.

“THE AGENCY FOR ACCESS TO PUBLIC INFORMATION (AAIP), in its capacity as Supervisory Authority of Law No. 25,326, is empowered to handle complaints and claims filed by those whose rights are affected by non-compliance with the personal data protection rules in force.” More information: argentina.gob.ar/aaip.

11. EEA residents (GDPR)

If you reside in the European Economic Area, in addition to the rights above you have the rights to object, to restriction of processing and to data portability, and the right to lodge a complaint with the supervisory authority of your country of residence. The legal basis for the processing described is your consent (Art. 6(1)(a) GDPR) and, for analytics, LAB9's legitimate interest in improving the Site (Art. 6(1)(f) GDPR).

12. Minors

The Site is directed at a professional audience over 18 years of age. We do not knowingly collect personal data from minors; if a parent or guardian becomes aware that a minor has provided us with data, they may request its deletion through the privacy channel.

13. Changes to this Policy

LAB9 may update this Policy to reflect regulatory or processing changes. The current version will always be published on this page with its update date; substantial changes will be highlighted on the Site.

14. Contact

For questions or to exercise your rights: privacy@lab9.co.