Natorlab srls Via Castelletto, 1 Borgo a Mozzano (LU) – 55023 Pec: 
Email: Tel. +39 347 0036301  P.iva: 02472120464 Fiscal Code: 02472120464 REA Number: LU – 228515 as data controller of your personal data, for the purposes of EU Regulation 2016/679 hereinafter ‘GDPR’, hereby informs you that the aforementioned legislation provides protection of personal data, this processing will comply to the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned law and the confidentiality

obligations provided for therein.


The Data Controller processes the users’ Personal Data by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.

Processing is carried out using IT and / or telematic means, with methods and logic strictly related to the indicated purposes. In addition to the owner appointees involved in the organization of the site (personnel specifically authorized for processing) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, agencies) may have access to the Data. appointed. The updated list of data processors may always be requested from the Data Controller


The processing operations connected to the web services of this site take place at the headquarters in Borgo a Mozzano, that is the registered office, and are handled by personnel specifically authorized and specially trained for processing. The Data may also be processed in any other place where the parties involved in the processing are located. For more information, you can contact the owner. The user’s Personal Data may be transferred to another country. To obtain further information about where we operate, the user can contact the owner.


The Data is processed and stored for the time required for the purposes for which it was collected.


The Personal Data collected for purposes related to the execution of a contract between the owner and the user will be kept until the execution of the contract is completed.

The Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The user can obtain further information on the legitimate interest of the owner in the relevant sections of this document or by contacting the owner.

When the operations involve the consent of the user, the owner may keep the Personal Data for longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep the Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the storage period the Personal Data will be deleted. Therefore, upon expiration of this term the right of access, cancellation, rectification and the right to the portability of the Data can no longer be exercised.


The owner can process the user’s Personal Data user when one of the following conditions occurs:

  • The user has given consent for one or more specific reasons;
  • The processing is necessary for the execution of a contract with the user and / or for the execution of pre-contractual measures;
  • Processing is necessary to fulfill a legal obligation of the owner;
  • The processing is necessary for the public interest or to exercise public powers vested in the Data Controller;
  • The processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

The owner will clarify the legal basis of each process if specifically requested by the interested party.


The Personal Data collected through this website may be collected automatically during the use of this Site (such as browsing data and Cookies) or may be entered voluntarily by the user.

The Personal Data collected may refer both to the user and to third parties provided.

The user assumes the responsibility of the Personal Data of others published or shared through the site and guarantees to have the right to communicate or disseminate them, releasing the Data Controller and Natorlab from any responsibility towards third parties.

Any use of Cookies or other tracking tools by this Site or by the owners of third-party services used by this Site, unless otherwise stated, is intended to identify the user and record the related preferences for purposes strictly related to the provision of the service requested by the user.

Failure to provide certain Personal Data may prevent this Site from providing its services.

A detail is provided below, dividing the data into the following two types

  1. Navigation and usage data, cookies.
  2. Data provided voluntarily by the user.
  1. Navigation data.

The computer systems and software procedures used to operate this website acquire some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to identify interested parties, but could through processing and association with data held by third parties, allow the users to be identified. This data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good purpose, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

This data is only used to obtain anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.


The use of cookies by the site or third-party services, unless stated otherwise, is to identify the user and recording the relative preferences for purposes strictly related to the performance of the service requested by the user. Failure by the user to provide certain Personal Data, and in particular Navigation Data by disabling cookies on the site, may make it impossible to provide certain services or to navigate. To learn more and for a detailed information, you can consult the Cookie Policy

How we use Statistics

The services in this section allow the Data Controller to monitor and analyse traffic data and are used to keep track of user

behaviour. In particular, the site uses:

Google Analytics (anonymized)

The site uses Google Analytics, the web analysis service provided by Google Inc. to obtain anonymous statistical information (anonymized Google Analytics has been activated) to evaluate the use of the website and the activities carried out by the visitor.

Google stores the information collected (cookies and usage data) on servers that can also be located in the United States. Google reserves the right to transfer the information collected with its cookies to third parties where this is required by law or where the third party processes information on its behalf.

Google will not associate your IP address with any other data held by Google in order to obtain a more detailed user profile.

Further information on the management of privacy and / or how to refuse or delete this type of cookie is available at the URL:

The user can selectively disable the action of Google Analytics by installing the opt-out component provided by Google on his browser.

To disable data collection by Google Analytics, please refer to the following link:

Social Buttons / Widgets

These are services that allow users to share Site information with the social networks on which they are registered. In particular, the site uses direct sharing links with the following social networks: Facebook, Twitter, and Google +.

  1. Data provided voluntarily by the user.

Sending e-mail to the addresses indicated on the site

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests and any other Personal Data included in the message.

Filling out the registration form (to make online purchases)

The website allows online purchases. In order to buy online it is necessary to register, so it’s mandatory to register if the user intends to make purchases through the site.

The form requires the inclusion of some Personal Data. These data will be processed, manually and also through the use of IT tools by the specifically authorized NatorLab staff, exclusively for the management of online purchases. Some additional data however is necessary to guarantee the correct management of the order (as in the case of the delivery address). The user has the right, at any time, to delete the account created by clicking on “delete account” at the bottom of the page

Please note that the interested party may at any time exercise the rights recognized by the law, and made explicit in the section “RIGHTS OF THE INTERESTED PARTIES”, by directly addressing the Data Controller.


Bank Transfer, Natorlab will provide your data at the time of purchase to allow the user to make the transfer.


Paypal is a payment service provided by Paypal Inc., which allows the User to make online payments using their Paypal credentials. Personal Data collected: Various types of data. Privacy Policy:


Apart from whats specified for navigation data, the user is free chose to provide Personal Data contained in the information request forms. Failure to provide such data may make it impossible to obtain what is requested.


For the management of the site specific security measures have been adopted, aimed at guaranteeing the user’s secure access and protecting the information contained on the same site from the risk of loss or destruction.


The interested party has the right to oblige the data controller to cancel, limit, update, rectify and oppose the processing of personal data concerning you, and in general can exercise all rights foreseen by the articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.

EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Interested Party

The interested party has the right to obtain confirmation of the existence of personal data concerning them, even if not yet recorded, and their distribution.

  • The interested party has the right to the following:
  • The origin of personal data
  • The purposes and methods of processing
  • The logic applied in the case of processing carried out with the aid of electronic instruments
  • The identification of the data controller, data processors and the representative, check article 5, paragraph 2
  • The identification of subjects to whom the personal data may be disributed or who could learn about them as appointed representative in the State, managers or appointees.

The interested party has the right to obtain:

  • Updates, rectifications or, when interested, the integration of data
  • The deletion, transformation into an anonymous form or  the blocking of data processed in violation of the law, including those for which conservation is not necessary in relation to the purposes for which the data was collected or subsequently processed
  • The attestation that the operations referred to in letters a) and b) have been brought to the attention to whom the data have been distributed, except in the case where fulfillment proves impossible o involves a disproportionate use of resources in respect to the protected right.
  • Data portability.

The interested party has the right to object, in whole or in part:

  • For legitimate reasons to the processing of personal data concerning him, even if for the purpose of collection
  • To the processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication.


Natorlab srls Via Castelletto, 1 Borgo a Mozzano (LU) – 55023 Pec: is in charge of the processing of your personal data

Email: Tel. +39 347 0036301 VAT: 02472120464 Tax Code: 02472120464 REA Number: LU – 228515


Defense in court

The user’s Personal Data may be used for defense by the website owner in court or in the stages leading to legal action, against improper use of the services by the user. The user declares to be aware that the owner may be required to disclose the Data at the request of public authorities.

Specific information

At the request of the user, this site will provide the user with additional information and context regarding specific services, or the collection and processing of Personal Data.

System log and maintenance

For operational and maintenance needs, this site and any third-party services it uses may collect system logs, in other words files that record interactions, they may also contain Personal Data, such as the User IP address.

Information not contained in this policy

More information related to the processing of Personal Data may be requested at any time from the Data Controller using the contact information.


This site does not support “Do Not Track” requests. To find out if any third-party services support them, the user can consult the respective privacy policies.

Changes to this privacy policy

The Data Controller has the right to make changes to this privacy policy at any time by informing users on this page and by sending a notification to users using the contact details provided. Please therefore consult this page regularly, referring to the date of the last modification indicated at the bottom.

If the modifications involve ‘consent’, the owner will request the users consent again.

Definitions and legal references

Personal Data

Personal information is any information that, directly or indirectly, makes an individual identifiable.

Data of Usage

Is the information collected automatically from this site (or third party applications this Site uses), including: the IP addresses or domain names of the computers used by the user, the addresses in URI (Uniform Resource Identifier), the time of the request, the method used in forwarding the request to the server, the numeric code indicating the status of the response from the server (successful, error, etc. .) the country of origin, the characteristics of the browser and operating system used by the visitor, the time spent on each page and the details of the itinerary used within the site, with specific reference to the sequence of the pages consulted, to the parameters relating to the operating system and the IT environment of the User.


The individual who uses this site.

The Interested Party

To whom the Personal Data refers.

Data Processor

The person, public administration or any other body, association or organization that processes personal data on behalf of the Data Controller, according to the rules of this privacy policy.

Data Controller (Owner)

The person, public authority, service or other body that determines the purposes and means of processing personal data and the tools used, including security measures relating to the functioning and the use of this site. The Data Controller is the owner of this Website.

This Site

The hardware or software tool through which users’ Personal Data are collected and processed.


Small portion of data stored in the user’s device.


The Service provided by this Site as defined in the relevant terms (if any) on this site / application.

European Union

Unless otherwise specified, any reference to the European Union contained in this document is intended to be extended to all current member states of the European Union and the European Economic Area

Legal references

This privacy statement has been drafted in accordance with multiple legislative orders, including articles 13 and 14 of the EU Regulation 2016/679, as well as stated in the Directive 2002/58 / EC, updated by Directive 2009/136 / EC, regarding Cookies.

Unless otherwise specified, this privacy statement applies exclusively to this Website

Last modification: 15/01/2019