Privacy policy.
Last updated: 9 November 2026
Introduction and contact
Zander Labs is committed to protecting your privacy. This policy explains how personal information is handled when you visit this website or contact our team. The controller responsible for website visitor data is Zander Laboratories Projects B.V., Delftechpark 25, 2628 XJ Delft, the Netherlands. Further company information is listed in our imprint. For privacy questions or to exercise your rights, contact info@zanderlabs.com.
Website hosting
This website and its contact-message storage are provided through Lovable Cloud. Requests to serve and secure the website involve technical information such as your IP address, request time and browser information. Processing necessary to operate and protect the website is based on our legitimate interests under Article 6(1)(f) GDPR.
Contact enquiries
When you submit the contact form, we receive your first name, last name, email address, optional phone number and message, together with your privacy acknowledgement and the submission time. We use this information to respond to your enquiry; messages are stored in Lovable Cloud. No automatic email forwarding is currently enabled.
Processing enquiries relating to a potential contract is based on Article 6(1)(b) GDPR. Other business enquiries are processed on the basis of our legitimate interest in responding to correspondence under Article 6(1)(f) GDPR. Please do not include sensitive personal information in the general contact form.
Study registration
Study registration buttons open external SeaTable forms. No form is loaded merely by viewing the study page. If you follow a registration link, the form provider receives your connection information and the information you submit. Review the privacy information and participant consent presented in the study form before submitting; this website policy does not replace study-specific information.
External videos
Some pages offer YouTube videos. A YouTube player is loaded only after you choose “Load YouTube video”. This connects your browser to Google and discloses connection information, including your IP address. Players use YouTube’s privacy-enhanced domain, but this does not make them anonymous or prevent all device access. Google may process information outside the European Economic Area.
Your choice applies only to that player while it remains open; it is not saved as a site-wide preference. You can stop the connection by closing the player or leaving the page. See Google’s privacy policy for its processing information.
Website analytics
If you consent, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to collect information about how you use this website, such as the pages you view, how long you stay, the website that referred you, your approximate location and your device and browser type. Your IP address is used to derive an approximate location but is not stored by Google Analytics 4. We use this information only in aggregated form to improve the website. With the same consent, we also use Google Ads, linked to Google Analytics, to measure and improve our advertising, for example whether a visit came from one of our ads; Google receives the same information for this purpose.
This processing is based on your consent under Article 6(1)(a) GDPR, and access to your device on the corresponding national rules on cookie consent. Google Analytics and Google Ads are not loaded until you choose “Accept” in the cookie banner. You can withdraw your consent at any time on our Cookies page. Google may process information in the United States; Google LLC is certified under the EU–U.S. Data Privacy Framework. Analytics data is retained for the period set in our Google Analytics account. See Google’s privacy policy for further information.
Recipients, retention and security
Website hosting and storage providers process information needed to deliver their services. We do not sell your personal information. We use encrypted connections and restrict public access to stored contact messages. No transmission or storage system can guarantee absolute security.
Our contact-enquiry retention policy is 4 weeks after the enquiry is resolved, unless statutory retention obligations or the establishment, exercise or defence of legal claims require longer retention. For information about a particular enquiry or to request deletion, contact info@zanderlabs.com.
Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. You also have the right to complain to a competent data protection supervisory authority, including the authority where you live or work.
Changes to this policy
We may update this policy when the website or its services change.