Privacy Policy

Last updated: 21 September 2026.

1. Who is collecting your personal data?

M47 LABS & INTERNATIONAL FIDUCIA SL (hereinafter, M47 LABS), a native artificial intelligence company that designs, builds and operates specialized AI systems for complex regulated operations.

VAT number: B67236083, registered in the Commercial Register of Barcelona, volume 46457, page 124, section 8, sheet B 520635. Registered office: Carrer Diputació 279, 4-4, 08007 Barcelona, Spain. Additional hubs in Madrid and Munich. Telephone: +34 633 272 501. Data protection contact: privacy@m47labs.com

2. What data is being collected?

All personal data is obtained directly from you, except for the technical connection data below, which your browser and our hosting provider generate automatically. The categories are:

Identification and contact details you give us: name, company, e-mail address, telephone number, and the content of your message.

Commercial information relating to a current or prospective business relationship.

Technical connection data: IP address, browser and device type, pages requested and timestamps, recorded in our hosting provider's server logs.

Job applications are not collected on this website. Our open positions link out to our recruitment portal at careers.m47labs.com, operated by Teamtailor, which has its own privacy policy and is responsible for the data you submit there.

3. What is the legal basis for processing the data?

We process the data you send us through our contact forms or by e-mail on the basis of your consent, or in order to take steps at your request prior to entering into a contract. Where you become a customer, we process your data to perform the service agreement between us. Technical connection data is processed on the basis of our legitimate interest in operating and securing the website.

We may also send you commercial or promotional information about our products and services on the basis of the legitimate interests pursued by M47 LABS, under article 6(1)(f) of Regulation (EU) 2016/679. You may object to such communications at any time, using the unsubscribe link at the bottom of any e-mail or by writing to privacy@m47labs.com.

4. Cookies and information stored in your browser

This website sets no cookies. It uses no analytics, advertising, profiling or social media tracking technologies.

The only information kept in your browser is a single entry in local storage recording the language you choose (English, Spanish or Catalan), so that the site opens in that language on your next visit. It contains no identifier and is never sent to us or to anyone else. You can clear it at any time through your browser settings.

When you open the site for the first time, and only then, your IP address is sent to ipwho.is, a geolocation service, to determine the country you are connecting from and suggest the corresponding language. We receive only the resulting country code and do not store your IP address for this purpose. If you prefer to avoid this, choose your language with the selector in the navigation bar; once a choice is stored, the lookup is not performed again.

The web fonts used on this site are served from our own domain, so no request is made to any third-party font provider.

5. Will the data be shared with any third parties?

We do not sell your personal data and we do not share it for anyone else's own purposes. We use service providers that process personal data on our behalf, under contracts meeting article 28 of Regulation (EU) 2016/679. The providers involved in this website are:

Google Ireland Limited, for website hosting via Firebase Hosting, which processes server log data including IP addresses.

Formspree, Inc. (United States), which receives and delivers the messages sent through our contact form.

ipwho.is, for the one-off country lookup described in section 4.

Beyond this website, we may use software, cloud, legal, tax and sales service providers who may access personal data strictly in order to provide their service to us, on the same contractual basis.

6. Will the data be transferred outside the EEA?

Some of the providers listed above are established in, or use servers in, countries outside the European Economic Area, in particular the United States.

Where a transfer outside the EEA takes place, we rely on one of the safeguards permitted by Chapter V of Regulation (EU) 2016/679: an adequacy decision of the European Commission, including the EU-US Data Privacy Framework of 10 July 2023 where the recipient is certified under it, or the Standard Contractual Clauses adopted by the European Commission together with an assessment of the transfer and any supplementary measures required.

We no longer rely on the EU-US Privacy Shield, which the Court of Justice of the European Union declared invalid on 16 July 2020. You may request a copy of the safeguards applied to a specific transfer by writing to privacy@m47labs.com.

7. How long will the data be stored for?

If you send us an enquiry through our contact form or by e-mail, your data is kept in our prospective customer database for a maximum of three years, unless you object sooner.

Data collected in order to enter into and perform a service agreement with M47 LABS is kept for as long as the contractual relationship lasts and, once it ends, for a maximum of five years, or longer where a legal obligation requires it.

Server log data is kept for the period applied by our hosting provider.

8. What rights does the data subject have?

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, under Regulation (EU) 2016/679.

Write to privacy@m47labs.com, or to M47 LABS & INTERNATIONAL FIDUCIA SL, Carrer Diputació 279, 4-4, 08007 Barcelona, Spain. We may ask you to confirm your identity before acting on a request, and we will respond within one month.

9. How can the data subject raise a complaint?

If you believe your data protection rights have not been respected, you may lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos, at www.aepd.es, or with the supervisory authority of your country of residence.