Privacy policy

Data controller

HRLAB INSIGHT PARTNERS S.L., whose registered office is at C/ Caballero 76, 4º 1ª, 08014 Barcelona, Spain, is the controller of the personal data processed through this website. Contact: contact@hr-lab.com.

Data we process

• Newsletter sign-up: your email address, the language you chose, and the date and website of your sign-up, as proof of your consent.
• Contact by email or phone: the information you choose to share with us.

This website uses no audience measurement, and no advertising cookies or trackers.

The newsletter

Signing up takes two steps (double opt-in): you first receive a confirmation email, and until you click its link, nothing else is sent to you.

• An unconfirmed request is deleted within 25 hours. To prevent abuse, the IP address of a request is only kept in pseudonymised form (hashed with a secret key), and deleted with it.
• Once subscribed, you stay subscribed until you unsubscribe. We then know whether our emails are opened and which links are clicked, to improve the newsletter.
• After you unsubscribe, we keep your address on an opt-out list, so that we never write to you again.

The bot check

The newsletter sign-up form uses Cloudflare Turnstile to check that a human is signing up. While the newsletter is open, this check loads when the sign-up form is shown (at the foot of the page, or when you open the newsletter panel): Cloudflare then processes your IP address and technical information about your browser, on the basis of our legitimate interest in protecting the form. Cloudflare may process this data outside the European Union, with the safeguards the GDPR provides for.

Purposes and legal bases

• Sending the newsletter and measuring its opens and clicks, based on your consent, which you can withdraw at any time with the unsubscribe link included in every email.
• Protecting the sign-up form against bots, based on our legitimate interest.
• Answering your requests, based on our legitimate interest in replying to people who contact us.

Recipients

Your data is only accessible to the HR Lab team and to our processors, acting on our behalf and on our instructions, each for their own part: the content management system run by ICRC, which keeps the newsletter sign-ups, sends its emails and also serves the blog articles and their images; Cloudflare, for the bot check. It is never sold or rented.

Retention periods

• Newsletter: until you unsubscribe; an unconfirmed request, 25 hours at most; after you unsubscribe, your address stays on the opt-out list.
• Correspondence: three years from our last contact.

Your rights

Under the GDPR and the French Data Protection Act, you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to set instructions regarding your data after your death. To exercise these rights, write to contact@hr-lab.com.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, the supervisory authority of the country where HRLAB INSIGHT PARTNERS S.L. is established, or with the authority of your country of residence (in France, the CNIL, www.cnil.fr).