Last updated: 24 July 2026
1. Data Controller
The Data Controller is:
Athleta Lab S.r.l.
Via Volta 10
37024 Negrar di Valpolicella, Verona, Italy
Italian Tax Code and VAT Number: 04932520234
Email: hello@athletalab.com
For any request concerning the processing of personal data or the exercise of privacy rights, users may contact the Data Controller at the email address indicated above.
2. Personal data processed
When users browse this website, certain technical and navigation data may be processed automatically, including:
- IP address;
- browser and device information;
- date and time of access;
- pages visited;
- technical and security logs;
- information necessary for the correct operation and protection of the website.
Athleta Lab may also process personal data voluntarily provided by users when they contact the company by email, including:
- name and surname;
- email address;
- company or organisation;
- content of the communication;
- any documents or attachments voluntarily submitted.
Users are invited not to send sensitive or unnecessary personal information through ordinary email communications.
3. Purposes and legal basis
Personal data may be processed for the following purposes.
Website operation and security
To ensure the correct display, operation, maintenance and security of the website and to prevent abuse, fraud or malicious activity.
The legal basis is the legitimate interest of the Data Controller in maintaining a secure and properly functioning website.
Responding to enquiries
To respond to requests for information, collaboration proposals, commercial enquiries or other communications voluntarily sent by users.
The legal basis is the performance of pre-contractual measures requested by the user or, depending on the nature of the communication, the legitimate interest of the Data Controller in managing professional and commercial relationships.
Legal and administrative obligations
To comply with obligations arising from applicable laws, regulations or requests from competent authorities.
The legal basis is compliance with a legal obligation.
4. Processing methods and retention
Personal data is processed using electronic and organisational measures designed to protect it against unauthorised access, loss, alteration, misuse or improper disclosure.
Navigation and security data is retained for the period necessary to ensure the operation and security of the website, according to the technical settings and retention policies applied by the hosting and infrastructure providers, unless longer retention is necessary to investigate unlawful activity or comply with legal obligations.
Data contained in email communications is retained for the time necessary to respond to and manage the relevant request.
Where the communication results in a contractual, commercial or professional relationship, the data may be retained for the duration of that relationship and for any additional period required by applicable civil, accounting or tax legislation.
5. Recipients and service providers
Personal data may be processed by authorised personnel of Athleta Lab and by external providers acting on behalf of the Data Controller, including:
- website hosting and infrastructure providers;
- website maintenance and technical service providers;
- email and communication service providers;
- IT security and backup providers;
- administrative, accounting, legal or professional advisers, where necessary.
These parties process personal data only to the extent necessary to provide their services and, where required, act as data processors under applicable data protection legislation.
Personal data is not sold or disclosed to third parties for unrelated commercial or advertising purposes.
6. Transfers outside the European Economic Area
Some technical, hosting, email or communication service providers may process personal data in countries outside the European Economic Area.
Where such transfers occur, Athleta Lab ensures that they take place in accordance with applicable data protection legislation and through appropriate safeguards, such as an adequacy decision by the European Commission or standard contractual clauses approved by the European Commission.
Further information about the safeguards applied may be requested by contacting hello@athletalab.com.
7. Cookies and tracking technologies
The website may use technical cookies or similar technologies that are necessary for its correct operation, security and performance.
At the date of this Privacy Policy, the website does not intentionally use advertising or profiling technologies to track users across different websites.
Further information is available in the website’s Cookie Policy.
8. External links
This website may contain links to external websites and platforms, including Athleta Magazine, social media platforms, client websites and third-party editorial content.
When users follow an external link, their personal data may be processed by the operator of the destination website according to its own privacy policy.
Athleta Lab is not responsible for the content or privacy practices of websites managed by third parties.
9. Automated decision-making
Athleta Lab does not use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects on users.
10. Users’ rights
Under applicable data protection legislation, users may exercise the right to:
- obtain confirmation as to whether their personal data is being processed;
- access their personal data;
- request the correction or updating of inaccurate data;
- request deletion, where applicable;
- request restriction of processing;
- object to processing based on legitimate interest;
- request data portability, where applicable;
- withdraw consent at any time, where processing is based on consent.
The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Requests may be sent to:
Athleta Lab may request information necessary to verify the identity of the person making the request.
11. Right to lodge a complaint
Users who believe that their personal data has been processed unlawfully have the right to lodge a complaint with the competent data protection authority.
For users in Italy, the competent authority is:
Garante per la protezione dei dati personali
This right is without prejudice to any other administrative or judicial remedy.
12. Changes to this Privacy Policy
Athleta Lab may update this Privacy Policy to reflect changes to the website, the services and technologies used, the organisation’s activities or applicable legislation.
The updated version will be published on this page together with its latest revision date.