Privacy Notice
Who we are
This website is operated by Naoki Nakamura, trgovina in storitve, s. p. (Naoki Nakamura s.p.), Rakuševa ulica 8, 1000 Ljubljana, Slovenia.
Registration number (matična številka): 7600542000 · Tax number (davčna številka): 76802396 · VAT ID: SI76802396
Contact for anything in this notice: info@flyinglaboratory.com
What we collect, and why
Mobility Partner application form. If you apply to become a Mobility Partner we collect your company name, VAT ID, billing address, contact person's name, email address, and (optionally) your logo file. We use this to respond to your application, prepare your invoice, and administer the partnership. Legal basis: taking steps prior to entering into a contract, and performing it (Art. 6(1)(b) GDPR); keeping invoices as required by tax law (Art. 6(1)(c) GDPR). Applications are forwarded to our workflow tool for processing.
AI assistant chat. Messages you type into the chat on the homepage are sent to Anthropic's API to generate a reply. Chat messages are not linked to your identity by us — please don't include personal or confidential information in the chat. Legal basis: our legitimate interest in answering visitor enquiries (Art. 6(1)(f) GDPR).
Hosting. The site is hosted on Vercel. Like any web host, Vercel processes technical data such as your IP address in server logs to deliver the site and keep it secure. Legal basis: legitimate interest in operating the website (Art. 6(1)(f) GDPR).
What we don't do
- No advertising or analytics cookies, and no tracking scripts.
- Fonts are self-hosted — visiting this site does not send your IP address to font providers.
- We never sell your data.
Who receives your data
- Vercel Inc. — website hosting.
- Our application pipeline — Mobility Partner applications are forwarded to our Vercel-hosted intake, the application details are stored in our partner database (Notion), uploaded logos are stored in our Google Drive, and we receive a notification via Telegram.
- Anthropic — processes chat messages to generate AI replies.
Where a provider processes data outside the EU/EEA, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision (e.g. the EU–US Data Privacy Framework).
How long we keep it
- Applications that don't lead to a partnership: deleted within 12 months.
- Partnership and invoicing records: kept for the duration of the partnership plus the retention periods required by Slovenian accounting and tax law (up to 10 years for invoices).
Your rights
Under the GDPR you can ask for access to, correction of, or deletion of your personal data, ask us to restrict processing, object to processing based on legitimate interest, and receive your data in a portable format. Email us at the address above and we'll respond. You can also lodge a complaint with the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec), or your local data protection authority.
Changes
If we change how we handle data, we'll update this notice and the date at the top.