Privacy Shield

With the judgment of the CJEU of 16 July 2020, the Privacy Shield – or the possibility of transferring personal data in the U.S.A. and non-EU countries for commercial purposes – is invalid.

Contactlab is NOT affected by this because it does not use suppliers located in the United States who have used the Privacy Shield as a guarantee for the transfer of personal data outside the European Union.

In detail, Contactlab manages data using services provided by’s Server Farm in Siziano (Pavia) and by Microsoft’s Cloud Azure, which are located in the West EU Region. In residual cases, and for mere technical and/or maintenance reasons, the Microsoft supplier may carry out processing in a Region other than the one indicated above, and for this purpose specific contractual clauses have been signed for processing carried out outside the EEA.