Privacy Policy
Last updated: January 15, 2026
1. Introduction
parcelLab GmbH ("parcelLab", "we", "us", or "our") is committed to protecting the privacy of individuals who visit our website, use our platform, or otherwise interact with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.
2. Data Controller
The data controller responsible for your personal data is:
parcelLab GmbH
Landwehrstraße 39
80336 Munich, Germany
Email: privacy@parcellab.com
3. Personal Data We Collect
3.1 Information You Provide
We collect personal data that you voluntarily provide when you interact with our services, including:
- Contact information (name, email address, phone number, company name)
- Account registration details and login credentials
- Communication preferences and marketing opt-ins
- Content of correspondence when you contact us
- Payment and billing information for our platform customers
3.2 Information Collected Automatically
When you visit our website or use our platform, we may automatically collect certain technical data, including:
- IP address and approximate geolocation
- Browser type, version, and language settings
- Device type, operating system, and screen resolution
- Pages visited, time spent, and navigation patterns
- Referring URL and search terms used to find our site
3.3 Cookies and Tracking Technologies
We use cookies, web beacons, and similar technologies to enhance your experience, analyze usage, and deliver personalized content. You can manage your cookie preferences through our cookie consent manager or your browser settings. For more details, see our Cookie Policy.
4. How We Use Your Data
We process your personal data for the following purposes:
- Providing, maintaining, and improving our services
- Processing transactions and managing your account
- Communicating with you about updates, support, and service-related matters
- Sending marketing communications (with your consent)
- Analyzing usage trends to improve user experience
- Ensuring security and preventing fraud
- Complying with legal obligations and enforcing our terms
5. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds under Article 6 of the GDPR:
- Consent: Where you have given explicit consent to the processing of your data for specific purposes.
- Contractual necessity: Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request.
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your fundamental rights.
- Legal obligation: Where processing is required to comply with applicable laws and regulations.
6. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with the following categories of recipients:
- Service providers and subprocessors who assist in operating our platform
- Business partners and integration partners as necessary to provide services
- Legal authorities when required by law or to protect our rights
- Professional advisors (auditors, lawyers, consultants) under confidentiality obligations
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on adequacy decisions.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted or anonymized.
9. Your Rights
Under the GDPR and applicable data protection laws, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data under certain conditions.
- Right to restrict processing: Request that we limit the processing of your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent: Withdraw consent at any time without affecting prior processing.
To exercise your rights, please contact us at privacy@parcellab.com. We will respond to your request within 30 days.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, regular security assessments, and employee training on data protection.
11. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date above. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
parcelLab GmbH
Data Protection Officer
Landwehrstraße 39
80336 Munich, Germany
Email: privacy@parcellab.com
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.