1. Privacy policy

This Privacy Policy applies to the personal data collected by CitizenLab via this website.


In this Privacy Policy personal data means information or pieces of information that allow to identify you. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity. Typical personal data includes your name and email address.

3. What personal data do we collect?

We may collect your personal data from the two following sources:

3.1 Personal data you provide to us directly from registration on the platform.

  • The personal data we collect from you directly may include your:
  • User name (mandatory);
  • E-mail address (mandatory);
  • Name (optional);
  • Age (optional);
  • Area of residence (optional);
  • Education level (optional).

3.2 Personal data we collect when you use this website.

We (and third party service providers acting on our behalf) use cookies to automatically collect personal data about you when you use this website. For more information, please consult our Cookie Policy.

4. How do we use your personal data?

We may use your personal data for the following purposes:

  • To create and maintain your account on this website;
  • To provide you with information regarding product or city that may be of interest to you;
  • To verify your user account for the sake of security;
  • To improve our products and your experience on this website by:
  • evaluating the use of this website;
  • personalising the content you get to see based on your area of residence.
  • To manage the identification and authentication of users.

5. Mode and place of processing the data

Methods of processing

The Data Controller processes the Data of Users in a proper manner and shall take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time.


The Data is processed at the Data Controller's operating offices and in any other places where the parties involved with the processing are located. For further information, please contact the Data Controller.

Retention time

The Data is kept for the time necessary to provide the service requested by the User, or stated by the purposes outlined in this document, and the User can always request that the Data Controller suspend or remove the data.

6. Where do we transfer your personal data?

We do not transfer your personal data to service providers outside the European Union.

7. What rights do you have?

You have the right:

  • to request access to your personal data;
  • to request that we correct, update or delete your personal data;
  • to oppose to the processing of your personal data for direct communication purposes.

In addition, you can opt-out from direct communications at any time by following the relevant instructions at the bottom of the direct communications (‘Manage your email notifications’).

If you would need help to exercise your rights, you may contact us by e-mail at