Last update on May 3rd , 2022
Our entities are not always responsible of all the organizational system. They may collaborate with third parties to provide you with a unique experience. Therefore, we do not exclusively process all of your personal data in connection with the experience you are participating in.
THE LAB makes it a point of honor to ensure that the legislation in force in your country is respected, in particular by following the principles of lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, retention limitation, integrity and confidentiality.
Among the services offered, THE LAB offers virtual reality experiences via Dreamscape.
Personal Data: This term covers “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (Art.4 §1 GDPR).
Sensitive Personal Data: This term covers a subset of data for which even greater care should be taken, such as “personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation” (Art. 9 §1 GDPR).
Processing Data: This term means any set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art.4 §2 GDPR).
Data Subject: This term covers individuals that are identifiable or identified by the processed personal data (Art.4 §1 GDPR).
Data Controller: The Data Controller decides how and why data is processed and ensures that legal obligations are met (Art.4 §7 GDPR).
Data Processor: Anyone processing data on behalf of the Data Controller (Art.4 §8 GDPR).
Third Party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data (Art.4 §10 GDPR).
HOW DO WE COLLECT YOUR PERSONAL DATA?
We may collect your personal data in several ways, including:
- From information you provide to us when you interact with us;
- When you use our services in our virtual reality centers;
- From online forms on our website;
- When you communicate with us by phone, email, through our online forms or our social media channels or any other personal contact we may get with you.
ON WHAT BASIS DO WE PROCESS YOUR PERSONAL DATA?
The processing by THE LAB of your personal information, as described above, will be carried out on one of the following legal bases:
- Consent; (e.g. cookies, your online registration)
- Legal obligation;
- Contractual relationship;
- Our legitimate interests;
- A vital interest.
WHAT PERSONAL DATA DO WE COLLECT?
We may collect, but not exclusively, the following personal data:
- Full name
- Full surname
- Age and size
- Phone number
- Email address
- Postal address
- Any other useful data to provide you asked services
In the course of providing our services, we may also share your personal data with various external service providers. Information regarding this can be found in the section below “Are your data shared with third parties?”
We also collect personal data via our online cookies. These cookies are essential for the proper functioning of our application and web portal.
HOW DO WE USE YOUR PERSONAL DATA?
We may use the personal data we collect for :
- Provide the services you may ask;
- Process your reservations to our virtual experiences and services;
- Keep a record of your transactions to provide you with a history;
- Act as a merchant payment processor for certain transactions;
- Collect or attempt to collect unpaid amounts owed by you;
- Facilitate communication between you and THE LAB, including through our customer service department;
- Monitor the use of our solutions in order to make improvements;
- To respect the law applicable in your country and to assist the public authorities within the framework of the law;
- Investigate and resolve malfunctions or difficulties you may have with our services;
- Ensure the security of our services, prevent fraud and enforce our policies;
- Comply with any applicable law and assist law enforcement agencies under applicable law;
- Respond to your data protection requests and rights;
- Respond to any dispute, or legal proceeding, between you and THE LAB;
- Any other necessary use so long as we have a legal basis.
ARE YOUR DATA SHARED WITH THIRD PARTIES?
We do not share your personal data except as described here or at the time of collection:
We may share personal data with service providers other than THE LAB and relevant public authorities if required to do so by law or in order to provide you with requested services.
We may disclose personal information about you (1) if we are required or permitted to do so by applicable law or legal process (such as a court order or subpoena), (2) to legal authorities or other government officials in order to comply with a lawful legal request, (3) as part of an investigation into suspected fraud or illegal activity, or (4) in any other case, with your permission.
HOW DO WE TRANSFER YOUR PERSONAL DATA?
FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We delete personal data from our systems as soon as it is no longer needed, in accordance with our guidelines on how long important information should remain available for future use or reference, and when and how data can be destroyed when it is no longer needed.
The retention period for each category of data will vary depending on how long it is needed for processing, the purpose for which it was collected and legal requirements. After this period, the data will either be permanently deleted, or we may keep a secure, anonymized record for research and analysis purposes.
You may at any time exercise your right to have your personal data erased, see the sections below “What are your rights?” and “Contact us”.
WHERE DO WE STORE YOUR DATA?
We store your data in different places depending on how you use our services. Here is a list of those locations:
- Worldline (SIX)
WHAT DATA PRIVACY RIGHTS DO YOU HAVE?
You have the right, subject to applicable local data protection legislation, to:
- be informed of any personal information we collect and use about you;
- request access to, and receive a copy of, the personal data we hold (‘Right to access’);
- if appropriate, request rectification or erasure of the personal data that are inaccurate (‘Right to rectification’;
- request the erasure of the personal data, subject however to applicable retention periods (‘Right to be forgotten’;
- request a restriction of Processing of personal data where the accuracy of the personal data is contested, the Processing is unlawful, or if the Data Subjects have objected to the Processing (‘Right to restriction of processing’;
- object to the Processing of personal data, in which case we will no longer process the personal data (‘Right to object);
- receive the personal data in structured, commonly used and machine-readable format (‘Right to data portability’);
- complain in relation to the Processing of personal data and, absent a satisfactory resolution of the matter, file a complaint in relation to the Processing of personal data with the relevant data protection supervisory authority.
To request the exercise of these rights, contact us at the address found in the last section of this document.
To protect your privacy and maintain security, we may take steps to verify your identity before granting you access to information. Depending on your geographic location, you may have the right to file a complaint with a national regulatory body if you are not satisfied with our response.
HOW DO WE PROTECT PERSONAL DATA?
We provide administrative, technical and physical safeguards, consistent with legal requirements, whenever we collect personal data, designed to protect against the unlawful destruction, loss, alteration, use or disclosure of, or unauthorized access to, the personal information you provide to us.
THE LAB SA
Rue de la Confédération 6-10
1204 Geneva – Switzerland