This policy explains what personal data 50X Labs B.V. (“we”, “us”, “our”) collects, why we collect it, and what rights you have. It applies to 50xlabs.com and to the 50X Labs platform.
1. Who We Are
50X Labs B.V. is a company registered in the Netherlands under Chamber of Commerce number 94992983. We provide sustainability measurement and reporting software for sports venues, clubs, federations, and event organisers.
For all privacy questions, contact privacy [at] 50xlabs [dot] com.
We are the data controller for the personal data described in this policy. Where we process data on behalf of a customer as part of delivering our platform, that customer is the controller and we act as processor under a separate agreement.
2. What We Collect
2.1 Information you give us
- Contact details — name, email address, phone number, organisation, and job role, when you fill in a form, request a demo, subscribe to our newsletter, or email us.
- Account information — name, email, and encrypted password for platform users.
- Content you submit — sustainability and operational data you upload to the platform, and the content of messages you send us.
2.2 Information we collect automatically
- Usage data — pages visited, referring page, and approximate location derived from your IP address.
- Device data — browser type, operating system, and screen size.
- Cookies — see our Cookie Policy.
2.3 Business correspondence
When you correspond with us by email, we store that correspondence in our own systems so we have a record of our relationship with your organisation. This includes the sender and recipient addresses, the subject, the message content, and the date.
3. Why We Use It, and On What Basis
| Purpose | Legal basis |
|---|---|
| Providing and operating the platform | Performance of a contract |
| Responding to enquiries and demo requests | Legitimate interest / steps before a contract |
| Managing our customer and partner relationships | Legitimate interest |
| Marketing emails and newsletters | Consent (withdrawable at any time) |
| Website analytics and improvement | Consent (via cookie banner) |
| Security, fraud prevention, and legal compliance | Legitimate interest / legal obligation |
| AI-assisted search and summarisation (see section 4) | Legitimate interest |
4. Our Use of AI
We use artificial intelligence to search, organise, and summarise our own business records, including business correspondence, meeting notes, call transcripts, and customer relationship records. This helps our team find information quickly and prepare for conversations without manually searching through years of records.
In practice this means:
- Business correspondence and related records are stored in our own database and indexed so they can be searched.
- Relevant text is sent to our AI provider to build that search index and, when a member of our team asks a question, to generate an answer.
- Our AI provider processes this data on our instructions under a data processing agreement. This data is not used to train the provider’s models.
- Access is limited to authorised 50X Labs personnel. AI output is treated as a starting point and is reviewed by a person before it is acted on. We do not use AI to make automated decisions that produce legal or similarly significant effects about you.
The legal basis is our legitimate interest in operating our business efficiently and maintaining an accurate record of our commercial relationships. You can object to this processing at any time using the contact details in section 10.
5. Who We Share It With
We do not sell personal data. We share it only with service providers who help us run our business, and only as far as they need it. Our main categories of processor are:
- Cloud hosting and database providers
- Email delivery and email hosting providers
- Telephony and communication providers
- AI providers, for the purposes described in section 4
- Analytics providers, where you have consented
We may also disclose data where required by law, or to protect our rights, safety, or property.
6. International Transfers
Some of our providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on European Commission adequacy decisions or on Standard Contractual Clauses, together with additional safeguards where appropriate.
7. How Long We Keep It
- Enquiry and contact data — kept while we have an active relationship, and for up to 3 years after the last contact.
- Customer and contract records — kept for the duration of the contract and for as long as required by law afterwards. Dutch tax law requires we keep certain records for 7 years.
- Business correspondence — kept while relevant to the relationship and our legal obligations.
- Newsletter subscriptions — until you unsubscribe.
8. How We Protect It
We use encryption in transit, encryption of stored credentials and secrets, access controls, and role-based permissions so staff can only reach the data they need. No system is completely secure, but we take these measures seriously and review them as the platform grows.
9. Your Rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased in certain circumstances
- Restrict or object to processing, including the AI processing in section 4
- Receive your data in a portable format
- Withdraw consent at any time, where we rely on consent
To exercise any of these, email privacy [at] 50xlabs [dot] com. We respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
10. Contact
50X Labs B.V.
Chamber of Commerce (KvK): 94992983
Email: privacy [at] 50xlabs [dot] com
11. Changes To This Policy
We may update this policy from time to time. Changes are posted on this page with a new revision date. If a change materially affects how we use your personal data, we will take reasonable steps to notify you.