Legal
Privacy policy
This notice explains what personal data we handle on the website and in our service, for what purpose, on what legal basis and for how long.
1. Data controller
LASLO BARNA PR FOTOGRAFSKE USLUGE GROWTHLAB SENTA
Ács József 16, 24400 Senta, Serbia
hello@growthlabstudios.com
Growth Lab Studio is an online-only service: we do not operate premises open to visitors.
2. What data we handle
Contact and booking
Name, email address, phone number, company name, the selected appointment, the booking status and the site language in which the booking was made.
Correspondence
The content of the messages you send us and any files attached to them.
Technical and security data
IP address, the timestamp of the request, and the error and security logs generated from these, where such logs are created.
3. Purpose and legal basis
Requested contact and booking
We handle this data so that we can answer your enquiry and record the agreed appointment. Legal basis: pre-contractual steps taken at the request of the person concerned.
Correspondence and site security
Answering incoming messages, operating the service, and detecting abuse and technical faults. Legal basis: legitimate interests.
Analytics
We measure site usage only if you accept it in the consent banner. Legal basis: consent. Consent can be withdrawn at any time.
Business outreach
We collect business contact details only from publicly available company websites. In such cases we record the actual business contact detail, the source URL and the fact of the first outreach. We carry out this processing under the applicable direct-marketing and data-protection rules, together with an objection and suppression procedure.
4. How long we keep data
| Data | Retention period |
|---|---|
| Inbound contact and booking, without a contract | 12 months after the last meaningful contact |
| Contacted prospect, without a response or a contract | 6 months after the last outreach |
| Suppression record | The minimum data needed to prevent renewed contact |
| Contract and invoicing records | The applicable statutory retention period |
| Security logs | The retention period applicable to the hosting and security service |
5. Systems and providers we use
We use the following providers to run the service. These providers process data in order to deliver their own services, and they may also use further sub-processors.
- cPanel web hosting and our own PHP booking interface.
- HighLevel / LeadConnector: contacts, calendar, workflows and booking-related messages.
- Google Workspace and Google Groups: correspondence.
- Google Meet: the link for the online meeting.
- CookieScript: cookie consent management.
- Google Analytics 4: only after analytics consent.
6. Processing outside the European Economic Area
Growth Lab is a Serbian business. The providers we use may also process data outside the European Economic Area, where their own facilities or sub-processors operate.
If you would like to know more about the safeguards that apply to a given transfer, write to hello@growthlabstudios.com and we will share the information available to us.
7. Your rights
You can request access to the data we hold about you, its rectification or erasure, restriction of processing, data portability where applicable, and you can object to processing and withdraw consent you gave earlier.
Send your request to hello@growthlabstudios.com.
If you object to business outreach, we will no longer process your data for that purpose.
You have the right to lodge a complaint with the competent data protection authority.
8. Automated decision-making
We do not make any decision based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you.
9. Related notice
10. Changes to this notice
We update this notice when the systems or processes we use change.