Privacy & Cookie Policy
Last updated: 30 October 2026
This policy explains how HasTagLab handles personal data when you visit hastaglab.com or contact us. Our website presents our heat transfer products and lets you request a quote or a free sample. We do not sell products online and no payments are made through this website.
1. Who we are
HasTagLab is responsible for the personal data described in this policy.
HasTagLab
20th Nikomidous Str., 104 42 Athens, Greece
Email: info@hastaglab.com
Phone: +30 210 5132039
2. What we collect and why
Contact form
When you send us an enquiry we receive the request type (quote or free sample), your name, work email, country, the product you are interested in and your message, plus your company and phone number if you choose to give them. We use these details only to answer your enquiry, prepare a quote or arrange a sample, and to follow up on it.
The legal basis is taking steps at your request before a possible contract and our legitimate interest in responding to business enquiries (Article 6(1)(b) and (f) GDPR). Your message is delivered by email to info@hastaglab.com; it is not stored in the website database.
Email, phone and WhatsApp
If you contact us directly, we use the details you send in the same way, to reply and to handle your request.
Technical data
When you visit the website, our web server and security software automatically process your IP address, browser type, the pages requested and the time of the request. We need this to deliver the website and to protect it against misuse and attacks (legitimate interest, Article 6(1)(f) GDPR).
Website statistics
Only if you allow it in the cookie settings, we use Google Analytics to understand how visitors use the website, with IP anonymisation enabled. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time through “Cookie Settings” at the bottom of every page.
3. Spam protection
The contact page uses Google reCAPTCHA to protect the form from spam and automated abuse. reCAPTCHA evaluates information such as your IP address and how you interact with the page, and sends it to Google. This is based on our legitimate interest in keeping the form free of spam. The Google Privacy Policy and Terms of Service apply. reCAPTCHA is loaded on the contact page only.
4. Third-party services
- Google Ireland Ltd — Google Analytics (only with your consent), reCAPTCHA and the Google map on the contact page.
- YouTube (Google) — the machine video on the Roll-to-Roll page is loaded from youtube-nocookie.com only when you press play.
- Zoho — our email provider, which delivers the messages sent through the contact form.
- Our web hosting provider — hosts the website and processes the technical data described above.
- WhatsApp (Meta) — only if you choose to contact us through the WhatsApp link.
Links to our LinkedIn, Facebook, YouTube and Instagram pages are plain links; those networks receive data only if you follow them. Some of these providers may process data outside the European Economic Area, for example in the United States. Such transfers are covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
5. Cookies and similar technologies
We keep cookies to a minimum. Analytics cookies are set only after you allow them.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| hl_consent_v1 (browser storage) | hastaglab.com | Remembers your cookie choice | Until you clear your browser data | Necessary |
| _ga, _ga_* | Google Analytics | Distinguishes visitors for anonymous statistics | Up to 2 years | Analytics — only with consent |
| _GRECAPTCHA | Google reCAPTCHA | Spam protection on the contact form | Up to 6 months | Necessary — contact page only |
| Google Maps cookies (e.g. NID) | Displays the map on the contact page | Set by Google | Third party — contact page only |
You can change your choice at any time through “Cookie Settings” at the bottom of every page. You can also delete or block cookies in your browser settings; blocking necessary cookies may stop parts of the website, such as the contact form, from working.
6. How long we keep data
We keep enquiries and related correspondence for as long as needed to deal with your request and any business relationship that follows, and longer only where the law requires it (for example, accounting records for customers). Google Analytics data is kept for the period set in our Google Analytics account, at most 14 months. Server and security logs are kept for a limited period and then deleted.
7. Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting earlier processing. To exercise these rights, email us at info@hastaglab.com.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
8. Security
The website is served only over an encrypted connection (HTTPS) and is protected by security software. Access to enquiries is limited to the HasTagLab team that handles them.
9. Changes to this policy
We may update this policy when our website or the services we use change. The date at the top shows the latest version.