Privacy and Data
Explaining what data we process when using the HandS Lab site, why it is needed, and how to contact us with processing questions.
Last updated: September 27, 2026
Data Controller
Website Operator: NGO "HandS Lab" (NGO "HUMAN AND SYNTHETIC LAB", EDRPOU 46189265). Contact for personal data inquiries: [email protected].
Data We May Process
Depending on how you interact with the website, we may receive:
name, email address, organization name, and inquiry content submitted via the form;
email address and consent details if you subscribe to HandS Lab notes;
technical data necessary for site operation and security: IP address, browser and device details, request timestamp, cookie identifiers, or similar technologies for security and delivery (including Cloudflare);
site interaction data for analytics if optional technologies are permitted: Google Tag Manager / Google Analytics and Microsoft Clarity.
Do not send client histories, medical records, consultation notes, or other sensitive materials via general web forms.
How We Use Data
to respond to inquiries;
to discuss potential participation, access, or collaboration;
to send HandS Lab notes based on separate consent;
to maintain website operation and security;
to analyze website usage (analytics), strictly subject to your consent to optional technologies.
Legal Bases for Processing
Contact form inquiries: steps prior to entering a contract at the request of the individual and/or legitimate interest in answering your message.
HandS Lab newsletter: consent (withdrawable at any time).
Essential technologies for security and delivery: legitimate interest in maintaining site functionality and security.
Google Tag Manager / Google Analytics and Microsoft Clarity: consent via cookie settings.
Data Recipients
For site operation and communication, we use:
Cloudflare — delivery, security, and technical logs;
Hetzner — website hosting;
Resend — email notifications for form inquiries to [email protected];
Brevo — distribution of HandS Lab notes;
Google Tag Manager / Google Analytics and Microsoft Clarity — analytics strictly upon consent to optional technologies.
Some providers may process data outside Ukraine (specifically in the EU and/or USA) under their respective policies and applicable data transfer mechanisms.
Retention Periods
We retain data no longer than necessary for the stated purposes or required by applicable laws.
Contact form inquiries: up to 24 months after the last meaningful communication, after which data is deleted or anonymized unless a longer retention period is required for dispute resolution or legal compliance.
Newsletter subscriptions: until unsubscribed; technical opt-out records may be stored longer to honor opt-out preferences.
Technical logs (hosting / Cloudflare): typically up to 90 days, unless a longer period is needed to investigate a security incident.
Analytics data: per settings in Google Tag Manager / Google Analytics, Microsoft Clarity, and your cookie preferences.
Your Inquiries
To submit questions about personal data or exercise statutory rights, write to [email protected].
Information regarding cookies and similar technologies is available on the Cookies page.
