Skip to content
EN
EnglishРусскийRU
Request demo access
Menu

Privacy policy

Effective date: 1 September 2026. Last updated: 8 November 2026.

1. General

This privacy policy describes how personal data is handled and protected for visitors to the X-Lab Suite website at https://x-lab.pro, and for people who contact the X-Lab Suite team about the product.

We aim to handle personal data transparently, fairly, and only for specified purposes. When handling data we follow the applicable data-protection law, including the EU General Data Protection Regulation (GDPR) where it applies to that handling.

Please read this policy to see which data may be handled, for which purposes, and which rights you have.

2. Who is responsible for handling personal data

The controller is Aliaksandr Adzinets, the person who decides the purposes and means of handling. In this policy that person is called the “controller”, “we”, or “us”.

You can reach the controller as follows:

3. Which personal data we may handle

Which data is involved depends on how you use the website and the product.

3.1. Data you give when you contact us

If you write to us by email or through the form on the website, we may handle:

  • your name, if you give it;
  • your email address;
  • the organization and role, if you give them;
  • the message and the details you choose to provide;
  • information about your enquiry and the later correspondence.

Please do not send special-category personal data, passwords, confidential documents, or other information that is not needed to deal with the enquiry through an ordinary form or email.

3.2. Technical data

When you visit the website, the browser and the server may send technical details needed to show the pages, keep the site secure, and diagnose how it works.

Depending on the infrastructure, this can include:

  • IP address;
  • date and time of the request;
  • address of the requested page;
  • browser type and version;
  • operating system and device type;
  • technical error details;
  • information about how the site is used, if the corresponding analytics tools are connected.

Which of these details are actually kept depends on the server, the hosting, and the services that are connected.

3.3. Cookie-setting data

The website may store the cookie and similar-technology choices you make.

If Google Consent Mode or another consent tool is used, the corresponding signals may be sent to connected services according to the site’s actual configuration.

The categories of cookies, what they are for, and how to change the settings are described in the separate Cookie policy.

3.4. Data when the demonstration is used

Access to the X-Lab Suite demonstration is requested through the form on this website. The form asks for your name, organization, job title, email address, whether you prefer cloud hosting or an on-premises installation, the laboratory's field of work, and the size of the organization's staff. A message is optional. These details are used to decide whether to provide access. The form also asks you to consent to the processing of personal data and to accept the terms of use.

The request is kept while it is being considered and for the correspondence that follows.

4. Purposes and legal grounds

We handle personal data only where an applicable legal ground exists.

Depending on the situation, those grounds can be:

  • Enquiries and replies. We use the name, email address, organization, job title, and the text of the enquiry to handle the enquiry, prepare a quotation, arrange a demonstration, and contact the user. The demonstration request form also includes the laboratory’s field of work, the size of the organization’s staff, and how the system is to be hosted. The legal basis is consent. Where the enquiry concerns entering into or performing a contract, the basis is also entering into or performing that contract.
  • Preparing and performing contracts. If the contact becomes a contractual relationship, data may be handled to prepare, enter into, and perform the contract, and to meet legal duties connected with it.
  • Running and securing the website. Technical data may be used to keep the website working, find errors, prevent abuse, and protect the infrastructure. The legal ground may be the controller’s legitimate interest, where that interest applies and does not override your rights and freedoms, or another ground the law provides.
  • Visit statistics. If web analytics tools are used, data may be handled to understand visits and improve the website. Where the technology requires consent first, analytics runs only in line with the applicable requirements and the settings you chose.
  • Advertising and personalization. If advertising technologies are used, data is handled for those purposes only where the required legal ground exists, and only with consent where consent is required.
  • Legal duties. In some cases data may be handled to meet legal requirements, to answer lawful requests from competent authorities, or to protect the controller’s rights.

We do not use personal data for purposes that are incompatible with the original purposes, unless the law provides a ground for that.

5. Cookies and third-party services

The website may use its own technical storage in the browser, and third-party tools, such as Google services, if they are connected to the current version of the site.

Those tools may handle technical details of a visit and receive signals tied to the consent settings.

Optional analytics and advertising technologies follow the applicable consent and privacy requirements. Where consent is required first, those technologies must not start before it is given.

You can read what the cookie categories are for, and change the consent settings, in the Cookie policy or through “Cookie settings”.

Google Tag Manager and Google Analytics

The website may use Google Tag Manager, Google’s service for managing tags. It controls which scripts and tools are connected and started. Depending on the settings, analytics tools and other third-party services may be loaded through Google Tag Manager.

The website may also use Google Analytics 4, Google’s service for measuring visits and use of the site. Depending on how the service is configured, it may handle which pages were viewed, what the visitor did on the site, the time of the visit, the source of the visit, the device type, the browser, and technical details of the connection.

These details are used to see how the site works, which sections are used, and how the site can be improved.

Optional analytics run according to the consent settings the visitor chose and the applicable legal requirements. The choice can be changed through “Cookie settings”.

When these services are used, Google may handle data under its own terms and privacy documentation. A transfer outside the European Economic Area, if one is made, has to meet the applicable data-protection requirements.

Google reCAPTCHA

The website may use Google reCAPTCHA, Google’s service for telling a person’s message from an automated submission. It may be applied to the contact form.

Depending on how the service is configured, Google may receive the details needed for that check: the network address, browser and device data, and actions on the page. The service may store a cookie.

These details are used to reduce automated and unwanted messages.

When reCAPTCHA is used, Google may handle data under its own terms and privacy documentation. A transfer outside the European Economic Area, if one is made, has to meet the applicable data-protection requirements.

UserCheck

When a demonstration is requested, the email address alone is sent to UserCheck. UserCheck reports whether the address belongs to a free, disposable, relay, or spam mailbox. The rest of the form is not sent.

The address is rejected when UserCheck reports one of those kinds of mailbox. If UserCheck does not answer, the address is not rejected for that reason.

UserCheck may handle the address under its own terms and privacy documentation. The service is hosted in the European Union.

6. Who may receive personal data

We may give access to personal data only to the extent needed for the purpose, and only to these categories of recipients:

  • hosting and website-infrastructure providers;
  • providers of technical services and security tools;
  • analytics and other third-party services, where they are used;
  • professional advisers, including legal advisers, where that is needed;
  • public authorities and other recipients entitled to receive the data, where the law requires the transfer.

Depending on the circumstances, a provider may act as a processor on the controller’s instructions or as an independent controller.

If a provider handles data on the controller’s instructions, that relationship is put in place as the applicable law requires.

We do not pass personal data to other recipients without a purpose and a legal ground.

7. Transfers to other countries

Some infrastructure and third-party providers may be outside the country where the controller is established, including countries outside the European Economic Area.

If handling involves a transfer of personal data to a third country, that transfer is made with a mechanism the law provides and with the required safeguards.

Depending on the case, that can include a European Commission adequacy decision, standard contractual clauses, or another permitted transfer mechanism.

8. How long personal data is kept

We keep personal data no longer than needed for the purposes of handling it, taking account of legal requirements and the need to protect lawful rights.

The period depends on the category of data and the circumstances.

  • Business correspondence. For the period needed to answer the enquiry and continue the exchange, and where needed to confirm what was agreed or to protect lawful rights.
  • Contract and accounting records. For the periods set by applicable law and by the contract.
  • Technical logs. For the period needed for security, diagnosis, and investigation of technical incidents.
  • Analytics and cookie data. According to the settings of the tools in use, the lifetime of the relevant identifiers, and the consent settings you chose.
  • Demonstration data. For the period needed to provide access and run the demonstration, taking account of the conditions of that use.

When the purposes are met, the data is deleted or de-identified, unless the law or an established lawful purpose still requires it to be kept.

9. Your rights

Where the GDPR applies to the handling, you may have these rights:

  • Access. Ask for confirmation that your data is being handled and obtain access to it.
  • Rectification. Ask for inaccurate or incomplete data to be corrected.
  • Erasure. Ask for data to be deleted in the cases the law provides.
  • Restriction. Ask for handling to be temporarily restricted where a ground for that exists.
  • Portability. Receive the data you provided in a structured, commonly used, and machine-readable format, where this right applies.
  • Objection. Object to handling based on legitimate interest, on grounds related to your particular situation. Direct marketing has its own rules.
  • Withdrawal of consent. Where handling is based on consent, withdraw it at any time. Withdrawal does not affect handling that was lawful before the withdrawal.
  • Complaint. Lodge a complaint with a competent data-protection supervisory authority.

These rights are not absolute in every situation. Their scope depends on the applicable law and on the circumstances of the handling.

10. How to use your rights

To send a request about the handling of personal data, write to info@x-lab.pro.

In the message, say which right you want to use and which data the request concerns.

Where we have reasonable doubts about the identity of the person making the request, we may ask for further information needed to confirm it. We will not ask for more data than that requires.

Requests are answered within the time the applicable law sets. Where the GDPR provides the period, the reply is usually given within one month. That period may be extended in the cases the law allows, and you will be told if it is.

To change cookie consent, use “Cookie settings” on the website. That does not replace a request to use your other rights in relation to personal data.

11. Protection of personal data

We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

The measures take account of the nature of the data, the purposes, the technologies in use, and the risks.

Transmission over the internet and by email cannot be guaranteed as absolutely secure. Do not send passwords, access secrets, or information your enquiry does not need over an unprotected channel.

12. Children’s data

The X-Lab Suite website is intended primarily for a professional audience and for organizations.

We do not direct the website at children and we do not knowingly seek children’s personal data. If we learn that personal data was collected in breach of applicable requirements, we will look at the situation and take the steps the law requires.

13. Links to other websites

The website may link to outside resources, including demonstration environments, documentation, and the sites of third-party providers.

When you follow a link, the other provider’s rules govern the handling of data there. We recommend reading that provider’s privacy policy and terms.

A link does not mean the controller controls the content of the outside site or every handling of data on it.

14. Changes to this policy

We may update this policy when the website, the technologies, the purposes, or the applicable legal requirements change.

The current version is published on the X-Lab Suite website. The date of the latest update is shown at the top of the document.

If a change requires a separate notice or fresh consent under the law, we take that step.

15. Contact

For questions about the handling and protection of personal data, contact: