Legal
Privacy Policy
Last updated
This policy explains what personal data SupremeLabs collects through supremelabs.si, why we collect it, and the choices you have. We collect very little, so we’ve kept it short.
01Who we are
The controller of your personal data is Vector Power Solutions, 1504, E-Wing, Octacrest, Lokhandwala , Kandivali-East , Mumbai - 101 , India, GSTIN 27CJKPG9188C1ZV. (“SupremeLabs”, “we” as SupremeLabs is owned by Vetor Power Solutions)
For any question or request about your data, email privacy@supremelabs.si. We haven’t appointed a Data Protection Officer because the law doesn’t require one for our processing, but this address reaches the people responsible.
02What we collect
- When you join the waitlist: your name, email address, mobile number and its country, your organization (if you give one), what brings you to SupremeLabs and anything you type under “Other”, plus the date and time you signed up.
- When you email us: your email address and whatever your message contains.
- When you visit the site: to deliver pages and protect the site, our hosting provider automatically processes your IP address, browser and device type, the page requested and the time of the request.
We don’t ask for sensitive data, such as information about your health, political opinions or religious beliefs. Please don’t include any in free-text fields.
03Why we use it, and our legal basis
- To keep your place on the waitlist and contact you about early access, our launch and the collaboration you selected. Basis: your consent (GDPR Art. 6(1)(a)), given when you submit the form. We use your phone number only to arrange a conversation about this, never for marketing calls or text messages.
- To reply to your messages. Basis: our legitimate interest in answering people who contact us (Art. 6(1)(f)) or, if you ask about working with us, taking steps towards a contract at your request (Art. 6(1)(b)).
- To run the site securely, prevent abuse and fix errors. Basis: our legitimate interest in a safe, working website (Art. 6(1)(f)).
- To meet legal obligations, such as keeping a record that we handled your request. Basis: legal obligation (Art. 6(1)(c)).
We won’t send you a general newsletter unless you agree to it separately. We don’t sell your data, use it for advertising, or make automated decisions about you that have legal or similarly significant effects.
05Transfers outside the EU
Vercel, Slack and Google may process data in the United States. All three are certified under the EU–U.S. Data Privacy Framework, which the European Commission recognises as providing adequate protection. Supabase keeps the waitlist in the EU. Where its staff or sub-processors access it from outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses. Contact us for details of these safeguards.
06How long we keep it
- Waitlist sign-ups: for 24 months from the day you sign up, or until you ask us to remove you, whichever comes first. Copies in our internal notification channel are deleted at the same time. If you become a customer or collaborator, we’ll tell you how your data is handled from then on.
- Emails: as long as we need to deal with your message, and no longer than 24 months after our last exchange, unless a contract or legal claim requires us to keep them longer.
- Technical logs: kept by our hosting provider for a short period, no longer than 30 days.
07Your rights
Under the GDPR, you have the right to:
- access your data and get a copy of it
- have it corrected
- have it deleted
- restrict or object to how we use it
- receive it in a portable format
- withdraw your consent at any time. We’ll then remove you from the waitlist. Withdrawing doesn’t affect what we did before.
To use any of these rights, email privacy@supremelabs.si, ideally from the address you signed up with. It’s free, and we reply within one month. For complex requests this can be extended by up to two further months, and we’ll tell you if it is.
You can also complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si, or to the data protection authority where you live or work. We’d appreciate the chance to resolve your concern first.
09Security
- The site is served only over HTTPS, and our providers encrypt data in transit and at rest.
- Only our server can write to the waitlist database, and only signed-in team members can read it.
No system is perfectly secure. If a breach puts your data at risk, we’ll notify you and the supervisory authority as the law requires.
10Children
The site and waitlist are meant for professionals and aren’t directed at children under 16. If you believe a child has given us their data, contact us and we’ll delete it.
11Changes to this policy
When our practices change, we’ll update this page and the date at the top. If a change materially affects how we use waitlist data, we’ll email people on the waitlist before it takes effect.