Last updated: 5 October 2026
This Privacy Policy explains how COBALTIA LABS SL (“Cobaltia Labs”, “we”) processes personal data when you use https://cobaltialabs.com or contact us, including through a Facebook Page, Instagram account, or other Meta business asset that we manage.
1. Who is responsible for your data
The data controller is:
COBALTIA LABS SL CIF: B26681692 Registered office: Calle San Vicente de Paul 23, 3 1, 07010 Palma, Illes Balears, Spain Commercial Registry: Registro Mercantil de Palma de Mallorca, hoja PM-106173 Email: [email protected] Website: https://cobaltialabs.com
We have not appointed a data protection officer. Send every privacy request, including a request to delete your data, to [email protected].
2. Scope
This policy covers:
- visits to cobaltialabs.com
- emails you send to [email protected]
- messages you send us on LinkedIn or GitHub
- information you send us through Meta products (Facebook, Instagram, WhatsApp, or Threads) when you contact a Cobaltia Labs page, account, or advertisement
This website does not create user accounts. We do not sell personal data.
3. Data we process, why, and the legal basis
3.1 Information you send us
If you email us or message us on LinkedIn, GitHub, or a Meta product, we process the details you choose to provide. That can include your name, email address, company, phone number, social username, and the content of your message.
We use this information to answer you, keep a record of the enquiry, and, where relevant, prepare or perform a contract.
The legal basis is Article 6(1)(b) of the GDPR (steps before a contract, or performance of a contract) and Article 6(1)(f) (our legitimate interest in responding to business enquiries).
3.2 Information collected when you browse the website
Our hosting provider and WordPress process technical data that your browser sends when you open a page: IP address, date and time, the page requested, browser type, language, and the referring address.
We use this information to run the site, keep it secure, and diagnose errors.
The legal basis is Article 6(1)(f) of the GDPR (legitimate interest in operating and protecting the website).
3.3 Cookies
The site uses only cookies that are needed to operate it:
- a language cookie that remembers whether you are viewing the site in English or Spanish
- login cookies, used only when an administrator signs in to WordPress
We do not set advertising cookies. We do not use a Meta Pixel, Facebook SDK, or analytics tool on this website.
If we later add analytics or advertising cookies, we will update this policy first and request consent before those cookies are set.
3.4 Services that receive a technical request from the website
Icon fonts are loaded from cdnjs, a Cloudflare content-delivery network. Cloudflare may process your IP address to deliver that file. Cloudflare’s policy is at https://www.cloudflare.com/privacypolicy/.
A click on our LinkedIn or GitHub link takes you to that service. From that point, LinkedIn or GitHub processes your data under its own policy. We do not receive your profile data from that click.
3.5 Meta pages, messages, and ads
If you visit, follow, comment on, or message a Cobaltia Labs presence on Facebook, Instagram, WhatsApp, or Threads, Meta Platforms Ireland Limited and Meta Platforms, Inc. process that activity under Meta’s privacy policy: https://www.facebook.com/privacy/policy/.
When you contact us through those products, or submit a lead form on one of our ads, we may receive the information you submit and the information Meta makes available to the page administrator. That can include your name, username, profile link, email address, phone number, and the content of your message or form.
We use that information only to:
- reply to you
- administer our page or account
- manage and measure advertising that we run for Cobaltia Labs
We do not sell this information, and we do not pass it to data brokers. The legal basis is Article 6(1)(b) or 6(1)(f) of the GDPR, as described in section 3.1. Where Meta or the law requires consent for a particular advertising use, that consent is collected by Meta before we receive the related data.
4. How to ask us to delete your data
Email [email protected] with the subject line Data deletion request.
In the email, include:
- your name
- the email address, phone number, or Meta account you used
- what you want deleted: a website enquiry, an email, a page message, a lead, or all personal data we hold about you
We will confirm that we have received the request. We will delete the personal data we hold about you and email you when that is done. We will do this within 30 days.
We may refuse or limit a deletion only where the law requires us to keep the data, or where we need it to establish, exercise, or defend a legal claim. If we refuse, we will explain why.
Removing our page or app from your Facebook or Instagram settings does not erase copies already sent to us. Send the email above as well.
This section is the deletion instruction for data collected on cobaltialabs.com and for data we receive through Meta products.
5. Who receives your data
We share personal data with:
- the provider that hosts this website and the provider that hosts the [email protected] mailbox, who process it on our instructions
- Cloudflare, when your browser loads icon fonts from cdnjs
- Meta, when you contact us or interact with our ads on Meta products. For data Meta collects on its own services, Meta is an independent controller
- public authorities, courts, and professional advisers when the law requires it
6. Transfers outside the European Economic Area
Meta and Cloudflare may process personal data in the United States and in other countries outside the European Economic Area. Where we are the controller of a transfer, we rely on an adequacy decision or on the European Commission’s Standard Contractual Clauses.
7. How long we keep data
- Enquiries by email or social message: for the life of the conversation, then for up to 2 years, unless a contract or a legal duty requires a longer period
- Client and invoicing records: for the period required by Spanish tax and commercial law, generally 6 years
- Server logs: for up to 12 months
- A deletion request: we delete the personal data it refers to. We may keep a short record that we received and completed the request
8. Your rights
Under the GDPR and Spanish Organic Law 3/2018 you may request access, rectification, erasure, restriction, and portability, and you may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw that consent at any time.
Send requests to [email protected]. You may also complain to the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, https://www.aepd.es.
9. Children
This website is directed at businesses. We do not knowingly collect personal data from anyone under 14 years of age.
10. Changes to this policy
The current version is always published at https://cobaltialabs.com/en/privacy-policy. When we change it, we will update the date at the top of this page.
11. Contact
COBALTIA LABS SL [email protected] Calle San Vicente de Paul 23, 3 1, 07010 Palma, Illes Balears, Spain