Privacy Policy

1. Overview

We take the protection of your personal data very seriously. This privacy policy informs you about how TwentyThree Labs (operated by Mirza Ahmad Baig) collects, uses, and protects your personal data when you visit twentythreelabs.io. It is provided in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Controller (Verantwortlicher)

3. Data We Collect

When you visit our website, we may automatically collect the following technical data:

• IP address (anonymised)
• Browser type and version
• Operating system
• Referring URL
• Date and time of access
• Pages visited

When you submit our contact form, we additionally collect your name, email address, and message content.

4. Legal Basis for Processing (Art. 6 GDPR)

• Art. 6 (1)(b) GDPR — pre-contractual steps at your request (contact enquiries)
• Art. 6 (1)(f) GDPR — legitimate interests in operating a secure website
• Art. 6 (1)(a) GDPR — where you have given explicit consent (e.g. cookies)

5. How We Use Your Data

We use data to operate and improve our website, respond to enquiries, fulfil project requests, and comply with legal obligations. We do not sell, rent, or trade your personal data to any third parties.

6. Data Retention

Contact form data is retained as long as necessary to handle your enquiry or as required by German commercial and tax law (up to 10 years under §257 HGB / §147 AO). Server access logs are typically deleted after 30 days.

7. Your Rights under GDPR

• Right of access (Art. 15 GDPR) — request a copy of the data we hold
• Right to rectification (Art. 16 GDPR) — request correction of inaccurate data
• Right to erasure (Art. 17 GDPR) — "right to be forgotten"
• Right to restriction (Art. 18 GDPR) — request limited processing
• Right to data portability (Art. 20 GDPR) — receive your data in machine-readable format
• Right to object (Art. 21 GDPR) — object to processing based on legitimate interests
• Right to withdraw consent (Art. 7 GDPR) — withdraw consent at any time

To exercise any right, email hello@twentythreelabs.io. We respond within one month as required by GDPR.

8. Right to Lodge a Complaint

You may lodge a complaint with the supervisory authority for Baden-Württemberg:

9. Third-Party Services

Our website currently does not use third-party analytics tools, social media plugins, or advertising networks. If this changes, this policy will be updated and users notified appropriately.

10. Cookies

We use only technically necessary cookies. We do not use tracking or advertising cookies. See our Cookie Policy for full details.

11. External Links

Our website may contain links to third-party websites. We have no control over their content or privacy practices. Please review their privacy policies independently.

12. Changes to This Policy

We may update this policy at any time. Changes will be published here with an updated effective date.

← Back to Home