Privacy Policy

Last updated: 8 October 2026.

1. Who is collecting your personal data?

M47 LABS & INTERNATIONAL FIDUCIA SL (hereinafter, M47 LABS), a native artificial intelligence company that designs, builds and operates specialized AI systems for complex regulated operations.

VAT number: B67236083, registered in the Commercial Register of Barcelona, volume 46457, page 124, section 8, sheet B 520635. Registered office: Carrer Diputació 279, 4-4, 08007 Barcelona, Spain. Additional hubs in Madrid and Munich. Telephone: +34 633 272 501. Data protection contact: privacy@m47labs.com

2. What data is being collected?

All personal data is obtained directly from you, except for the technical connection data below, which your browser and our hosting provider generate automatically. The categories are:

Identification and contact details you give us: name, company, e-mail address, telephone number, and the content of your message.

Commercial information relating to a current or prospective business relationship.

Technical connection data: IP address, browser and device type, pages requested and timestamps, recorded in our hosting provider's server logs.

We do not take job applications through this website. Our open positions link out to our recruitment portal at careers.m47labs.com, operated by Teamtailor, which has its own privacy policy and is responsible for the data you submit there. If you write to us about working at M47, through the careers topic of our contact form or at jobs@m47labs.com, we handle your message like any other enquiry under this policy.

3. What is the legal basis for processing the data?

We process the data you send us through our contact forms or by e-mail on the basis of your consent, or in order to take steps at your request prior to entering into a contract. Where you become a customer, we process your data to perform the service agreement between us. Technical connection data is processed on the basis of our legitimate interest in operating and securing the website, and the aggregated visit statistics described in section 4 on the basis of our legitimate interest in understanding how the website is used and improving it.

We may also send you commercial or promotional information about our products and services on the basis of the legitimate interests pursued by M47 LABS, under article 6(1)(f) of Regulation (EU) 2016/679. You may object to such communications at any time, using the unsubscribe link at the bottom of any e-mail or by writing to privacy@m47labs.com.

4. Cookies and information stored in your browser

This website sets no cookies. It uses no advertising, profiling or social media tracking technologies.

To understand how the website is used, we measure visits with Plausible Analytics, a privacy-friendly analytics service provided by Plausible Insights OÜ (Estonia) and hosted in the European Union. Plausible sets no cookies, stores nothing in your browser and does not follow you across websites or devices. For each page you open it records the page, the website that referred you, any campaign tags in the link, the approximate location derived from your IP address (country, region and city) and your browser, operating system and device type, and we only ever see these as aggregated statistics. In the same aggregated way, we count actions such as sending our contact form or clicking one of our e-mail addresses.

To count unique visitors without identifying anyone, Plausible combines your IP address and browser details with a random value that changes and is deleted every day, and keeps only the resulting code, which cannot be traced back to you. Your IP address itself is never stored. Because nothing is stored on or read from your device for this purpose, this measurement does not require your consent.

The only information kept in your browser is a single entry in local storage recording the language you choose (English, Spanish or Catalan), so that the site opens in that language on your next visit. It contains no identifier and is never sent to us or to anyone else. You can clear it at any time through your browser settings.

When you open the site for the first time, and only then, your IP address is sent to ipwho.is, a geolocation service, to determine the country you are connecting from and suggest the corresponding language. We receive only the resulting country code and do not store your IP address for this purpose. If you prefer to avoid this, choose your language with the selector in the navigation bar; once a choice is stored, the lookup is not performed again.

The web fonts used on this site are served from our own domain, so no request is made to any third-party font provider.

5. Will the data be shared with any third parties?

We do not sell your personal data and we do not share it for anyone else's own purposes. We use service providers that process personal data on our behalf, under contracts meeting article 28 of Regulation (EU) 2016/679. The providers involved in this website are:

Amazon Web Services EMEA SARL (Luxembourg), for website hosting via AWS Amplify in AWS's European region, which processes server log data including IP addresses. Pages are delivered through AWS's global content delivery network, so a visitor outside Europe may be served from a location nearer to them.

Formspree, Inc. (United States), which receives and delivers the messages sent through our contact form.

ipwho.is, for the one-off country lookup described in section 4.

Plausible Insights OÜ (Estonia), for the cookieless visit statistics described in section 4, processed on servers in the European Union.

Beyond this website, we may use software, cloud, legal, tax and sales service providers who may access personal data strictly in order to provide their service to us, on the same contractual basis.

6. Will the data be transferred outside the EEA?

Some of the providers listed above are established in, or use servers in, countries outside the European Economic Area, in particular the United States.

Where a transfer outside the EEA takes place, we rely on one of the safeguards permitted by Chapter V of Regulation (EU) 2016/679: an adequacy decision of the European Commission, including the EU-US Data Privacy Framework of 10 July 2023 where the recipient is certified under it, or the Standard Contractual Clauses adopted by the European Commission together with an assessment of the transfer and any supplementary measures required.

We no longer rely on the EU-US Privacy Shield, which the Court of Justice of the European Union declared invalid on 16 July 2020. You may request a copy of the safeguards applied to a specific transfer by writing to privacy@m47labs.com.

7. How long will the data be stored for?

If you send us an enquiry through our contact form or by e-mail, your data is kept in our prospective customer database for a maximum of three years, unless you object sooner.

Data collected in order to enter into and perform a service agreement with M47 LABS is kept for as long as the contractual relationship lasts and, once it ends, for a maximum of five years, or longer where a legal obligation requires it.

Server log data is kept for the period applied by our hosting provider.

Visit statistics are aggregated and contain no personal data; we keep them for as long as they are useful to us.

8. What rights does the data subject have?

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, under Regulation (EU) 2016/679.

Write to privacy@m47labs.com, or to M47 LABS & INTERNATIONAL FIDUCIA SL, Carrer Diputació 279, 4-4, 08007 Barcelona, Spain. We may ask you to confirm your identity before acting on a request, and we will respond within one month.

9. How can the data subject raise a complaint?

If you believe your data protection rights have not been respected, you may lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos, at www.aepd.es, or with the supervisory authority of your country of residence.