Privacy & legal notice
We sell compliance. It would be absurd not to hold ourselves to it. This page says plainly what we collect, why, and what you can do about it.
Who we are
Nuria Labs is an independent AI transformation advisory founded by Alberto Paulino, operating from Brussels and serving clients across EMEA. Contact: hello@nuria-labs.com. For anything concerning your personal data, write to privacy@nuria-labs.com and a human will answer.
What we collect, and why
The Article 50 Readiness Check. The assessment runs entirely in your browser. Your answers are not transmitted to us unless you choose to submit your email at the end. If you do, we receive your email address, the role you selected and your score, so we can send you the result and follow up once. Lawful basis: your consent, and our legitimate interest in contacting an organisation that asked for a compliance assessment.
Purchases. Payments are processed by Stripe Payments Europe, Ltd. We never see or store your card details. Stripe provides us with your name, email, billing address and, where given, VAT number, so that we can issue an invoice and meet our accounting obligations. Lawful basis: performance of a contract, and legal obligation.
Email. If you write to us, we keep the correspondence for as long as the relationship and any legal retention period require.
What we do not do. We do not run advertising or analytics cookies. We do not track you across sites. We do not sell, rent or share your data with data brokers. We do not build advertising profiles.
Cookies
This site sets no cookies of its own and runs no third-party analytics. Our hosting provider records standard server logs, including IP address, for security and abuse prevention. Because we set no non-essential cookies, we do not show a consent banner — there is nothing to consent to.
Who processes data on our behalf
Netlify — website hosting and form submissions. Stripe — payment processing and invoicing. Cloudflare — DNS and email routing. Google — our business email. Each is bound by a data processing agreement, and transfers outside the EEA rely on the European Commission's Standard Contractual Clauses.
How long we keep it
Assessment submissions: 24 months from your last contact with us, then deleted. Customer and invoicing records: seven years, as required by Belgian accounting law. Correspondence: for the life of the relationship plus two years.
Your rights
Under the GDPR you may request access to your data, correct it, have it erased, restrict or object to our processing of it, and receive it in a portable format. Write to privacy@nuria-labs.com and we will respond within one month. If you are not satisfied, you may complain to your national supervisory authority — in Belgium, the Autorité de protection des données / Gegevensbeschermingsautoriteit.
Our own use of AI — a voluntary disclosure
This section is Nuria Labs policy, not a legal requirement. Article 50 of the AI Act attaches to specific situations — AI systems that interact directly with people, synthetic content that must be machine-readably marked, emotion recognition and biometric categorisation, deep fakes, and AI-generated text published on matters of public interest. It does not oblige a firm to declare that it drafted a proposal with an AI assistant. We disclose it anyway, because we think a company that sells transparency should practise more of it than it is compelled to.
So: we use AI systems in our own work — drafting, research, analysis and code. Everything we publish is reviewed by a named human before it goes out. Our assessment tools are rule-based and deterministic: identical answers always produce an identical score, and no large language model sits between your answers and your result. No automated decision producing legal or similarly significant effects is made about you by this website.
Our scoring frameworks — including the 17-control Article 50 assessment — are Nuria Labs' own operational decomposition of regulatory requirements. They are not official classifications of the European Commission, of any supervisory authority, or of any standards body, and we do not present them as such.
Terms of sale
Digital products are delivered immediately on payment. Because they are supplied instantly and in full, the statutory right of withdrawal does not apply once download has begun — this is confirmed at checkout. If a product does not match its description, tell us and we will refund it. Advisory engagements are governed by a separate written agreement. Prices exclude VAT where applicable; the reverse charge applies to EU business customers who supply a valid VAT number.
Nature of our services
Nuria Labs provides operational advisory and readiness services. Nothing on this site, and nothing in our assessments, constitutes legal advice or determines your legal obligations. Our scoring frameworks are our own operational decomposition of regulatory requirements and are not official classifications of the European Commission or any supervisory authority. Scope should be confirmed against your actual AI estate and, where appropriate, with qualified legal counsel.
Changes
If this notice changes materially we will say so here with a new date. Last updated 15 August 2026.