01
Privacy POLICY
Pursuant to Arts. 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, the Controller provides the following information on the processing of personal data of users of slabcoworking.com, of the booking system booking.slabcoworking.com and of SLAB.coworking service users.
Data Controller
SLAB.coworking — Ing. Giovanni La Penna
Via Privata Battista De Rolandi 1, 20156 Milan, Italy
Tax code LPNGNN85S02D643S — VAT no. IT10847710968
Email: info@slabengineering.com
PEC: giovanni.lapenna1@ingpec.eu
Tel: +39 02 3598 5682
No Data Protection Officer has been appointed, as the conditions of Art. 37 GDPR do not apply.
Categories of data processed
- Identification data: name, surname, company name, VAT number / tax code
- Contact data: email address, telephone number, WhatsApp contact
- Booking data: dates, type of service selected, usage history
- Billing data: billing address, VAT number or tax code, SDI recipient code or certified email (PEC)
- Payment data: handled directly by the payment service provider. The Controller never obtains the full card number or payment credentials
- Technical browsing data: IP address, browser and device type, pages requested, date and time of the request
- Statistical measurement data: collected only with consent via Google Analytics (see Cookie Policy)
Processing of special categories of data (Art. 9 GDPR) or data relating to criminal convictions and offences (Art. 10 GDPR) is not envisaged. Should a data subject volunteer such data, it will be deleted without delay.
Purposes and legal basis
| Purpose | Legal basis | Retention |
| Managing bookings and coworking contracts | Performance of a contract (Art. 6.1.b) | Duration of the relationship + 10 years (Art. 2220 Italian Civil Code) |
| Issuing pro forma receipts, invoicing and tax compliance | Legal obligation (Art. 6.1.c) | 10 years (Presidential Decree 633/1972) |
| Responding to enquiries and quotation requests sent via form, email or WhatsApp | Pre-contractual measures taken at the data subject's request (Art. 6.1.b) | 24 months from the last interaction |
| Professional domiciliation and mail handling | Performance of a contract (Art. 6.1.b) and legal obligation (Art. 6.1.c) | Duration of the service + 5 years |
| Sending commercial communications and newsletters | Consent (Art. 6.1.a), freely given, specific and revocable | 24 months from the last interaction, unless withdrawn earlier |
| Website security, diagnostics and abuse prevention (server logs) | Legitimate interest of the Controller (Art. 6.1.f) in the security and continuity of the service | As per the hosting provider's policy, normally no longer than 30 days |
| Statistical measurement of website use | Consent (Art. 6.1.a), given via the banner | Maximum 14 months (see Cookie Policy) |
| Fraud prevention in electronic payments | Legal obligation (Art. 6.1.c) and legitimate interest (Art. 6.1.f) of the payment service provider | As per the provider's policy |
Nature of the provision and consequences of refusal
Providing identification, contact and billing data is necessary in order to book, enter into the contract and issue tax documents: refusal makes it impossible to provide the service. Providing data for newsletter purposes and consenting to statistical measurement are optional: refusal has no consequence on the use of the services.
No automated decision-making
The Controller does not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Recipients of the data
Data may be disclosed to the following parties, appointed as Data Processors under Art. 28 GDPR where applicable:
- Netlify, Inc. — website hosting and receipt of messages sent through the contact form
- SiteGround — hosting of the booking system booking.slabcoworking.com
- Stripe (via WooPayments) — payment service provider and fraud prevention
- Google Ireland Ltd. — statistical measurement services (Google Analytics), activated only with prior consent and within the limits set out in the Cookie Policy
- WhatsApp Ireland Ltd. (Meta group) — where the user chooses to contact the Controller through that channel
- Email service provider — for correspondence and service communications
- Tax advisors and accountants — for accounting and tax compliance
- Public authorities — upon reasoned request and in the cases provided for by law
Data is not sold to third parties for their own commercial purposes and is not disseminated. An up-to-date list of the parties appointed as Data Processors under Art. 28 of the Regulation is kept at the Controller's premises and may be requested by writing to info@slabengineering.com.
Transfers outside the European Union
Some of the providers listed above are established or operate infrastructure in the United States. Use of their services may therefore involve a transfer of personal data outside the European Economic Area. Such transfers take place in compliance with Arts. 44–49 GDPR, on the basis of the Standard Contractual Clauses approved by the European Commission and/or adherence to the EU-US Data Privacy Framework, as declared by each provider.
A copy of the safeguards in place may be requested by writing to info@slabengineering.com.
Rights of the data subject
As a data subject, you have the right to:
- Access (Art. 15): obtain confirmation of processing and a copy of the data
- Rectification (Art. 16): correct inaccurate data or complete it
- Erasure (Art. 17): request deletion in the cases provided for
- Restriction (Art. 18): restrict processing in certain cases
- Portability (Art. 20): receive the data in a structured format
- Objection (Art. 21): object to processing based on legitimate interest
- Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before withdrawal
To exercise your rights, write to info@slabengineering.com. The Controller replies within one month of receiving the request; that period may be extended by two further months for particularly complex requests, informing the data subject within the first month (Art. 12.3 GDPR).
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), Piazza Venezia 11, 00187 Rome.
Version, changes and prevailing language
Privacy policy — Version 2.0 of 26 August 2026. The Controller may amend this policy to reflect changes in legislation or in the services used. The version in force is always the one published at this address, with its date.
This English text is a translation provided for convenience. In the event of any discrepancy, the Italian version prevails: Informativa sulla Privacy.
02
Cookie POLICY
This policy describes the cookies and other tracking technologies (local storage, pixels, identifiers) used on slabcoworking.com and on the booking system booking.slabcoworking.com, pursuant to Art. 122 of Italian Legislative Decree 196/2003 and the Italian Data Protection Authority's Guidelines of 10 June 2021.
What they are
Cookies are small text files that websites store on the user's device. Alongside them there are other technologies with a similar function — local storage, session storage, pixels and software identifiers — to which the same rules apply. Below, the term "cookie" covers all of these.
Technical and functional cookies (no consent required)
These are necessary to deliver the service requested by the user. Under Art. 122(1) of Legislative Decree 196/2003 they do not require consent.
| Name | Domain | Purpose | Duration |
slab_cookie_consent (local storage) | slabcoworking.com first party | Stores the choice made on the banner so it is not shown again on every visit | Until manually cleared |
woocommerce_cart_hash
woocommerce_items_in_cart | booking.slabcoworking.com first party | Keep the cart contents during booking | Session |
wc_cart_hash_*
storeApiNonce
wcpay_appearance_* (local storage) | booking.slabcoworking.com first party | Cart state and protection of checkout requests | Session |
maz-resolved-color-mode | booking.slabcoworking.com first party | Remembers the light/dark interface theme | 12 months |
__stripe_mid, __ssid | slabcoworking.com Stripe | Fraud prevention for electronic payments | 12 months |
Statistical measurement cookies (consent required)
These are set only after the user selects "Accept" on the banner. If the user declines, or makes no choice, they are not set.
| Name | Domain | Purpose | Duration |
_ga
_ga_QJ94D5VZD6 | .slabcoworking.com Google Analytics 4 | Aggregate statistics on site usage: page views, source, distinguishing visitors | 13 months |
_gcl_au | .slabcoworking.com Google | Advertising conversion measurement (conversion linker) | 3 months |
sbjs_first, sbjs_current, sbjs_first_add, sbjs_current_add, sbjs_session, sbjs_udata, sbjs_migrations | booking.slabcoworking.com WooCommerce / Sourcebuster | Attribution of the booking's origin (source channel, campaign, session) | Session |
Because the _ga, _ga_QJ94D5VZD6 and _gcl_au cookies are set on the second-level domain .slabcoworking.com, the choice made on the main site also applies to the booking subdomain.
First and third party
The Amelia booking system is hosted on a subdomain belonging to the Controller (booking.slabcoworking.com): its cookies are therefore first party. Cookies set by Google and Stripe are third party.
Embedded third-party content
This site embeds no third-party maps, videos or widgets. The Contact page shows the address of the space together with a plain link that opens Google Maps in a new tab: a connection to Google's servers is established only if the user chooses to follow that link, and from that point processing is governed by the Google Privacy Policy. No Google Maps cookie is set while simply browsing this site.
How to change or withdraw consent
The choice made on the banner can be changed at any time: reopen cookie preferences. Withdrawing consent is as easy as giving it.
Alternatively, cookies can be managed, disabled or deleted from your browser settings. Note that disabling technical cookies may impair some site functionality.
Version, changes and prevailing language
Cookie policy — Version 2.0 of 26 August 2026, drawn up on the basis of a technical audit of the cookies actually set by the site. The Controller updates it whenever the tools used change.
This English text is a translation provided for convenience. In the event of any discrepancy, the Italian version prevails: Cookie Policy.
03
Terms & CONDITIONS
These General Terms of Service govern the contractual relationship between SLAB.engineering (hereinafter "SLAB" or "the Operator") and the person using the coworking services (hereinafter "Coworker"). Use of the services implies full acceptance of these terms.
Art. 1 — Definitions
- Operator: Giovanni La Penna / SLAB.engineering, owner of the coworking space at Via Privata Battista De Rolandi 1, 20156 Milan
- Coworker: any natural or legal person using the coworking services offered by SLAB
- Standard Workstation: 70×120 cm desk with ergonomic chair, privacy screen and standard amenities
- Deluxe Workstation: motorised 80×160 cm desk with premium ergonomic chair and advanced amenities
- Meeting Room: private space for meetings, bookable by the hour or with packages
- Plan: type of subscription chosen by the Coworker (daily, package or monthly)
- Business Address: optional service allowing use of SLAB's address as the legal or operational address of the Coworker's business
Art. 2 — Booking and confirmation
SLAB services can be booked via:
A booking becomes binding only upon written confirmation from SLAB and payment (or receipt of a valid purchase order for clients with a deferred invoicing agreement). SLAB reserves the right to decline bookings in the event of unavailability or for a reasoned cause.
Art. 3 — Prices, payment and invoicing
All prices are VAT exclusive. 22% VAT is applied in accordance with current Italian tax regulations. Current rates are indicated on the Pricing page of the site.
- Daily plans and hour packages: payment in advance at the time of booking
- Monthly and Resident plans: invoiced at the start of each month; payment due within 15 days of invoice date
- Accepted payment methods: bank transfer, credit/debit card
SLAB will issue electronic invoices for all services. The Coworker must provide their complete tax details (tax code/VAT, SDI recipient code or PEC) at the time of their first booking.
In the event of late payment, SLAB reserves the right to suspend access to services and to apply late payment interest pursuant to Italian Legislative Decree 231/2002.
Art. 4 — Cancellation policy
- Daily plans: full refund if cancelled at least 24 hours before the start; no refund after that deadline
- Monthly and Resident plans: cancellation with at least 30 days' written notice; the current month's fee remains due in full
- Meeting Room hour packages: non-refundable, but purchased hours do not expire and remain available until fully used
- Force majeure: in the event of space closure due to force majeure (government orders, extraordinary events), SLAB guarantees a refund or credit for the unavailable period
Art. 5 — Access and hours
SLAB.coworking is accessible Monday to Friday, from 8:00 am to 8:00 pm, except national public holidays and extraordinary closures communicated with adequate notice. No independent access is permitted outside the stated hours, unless otherwise specifically agreed in writing in advance.
The Coworker must respect the access hours and notify SLAB of any required changes. Access to the space is personal and non-transferable.
Art. 6 — Coworker obligations and responsibilities
The Coworker undertakes to:
- Use only the assigned or booked workstation
- Keep their workstation and shared spaces tidy, leaving them in the same condition as found
- Respect the quiet and concentration of other Coworkers; extended phone calls must be taken in designated areas
- Not sublet or transfer to third parties, for consideration or otherwise, the use of the workstation or SLAB services
- Not carry out unlawful activities in breach of laws or regulations on SLAB premises
- Not bring strongly scented food into work areas; a dedicated break area is available
- Promptly notify SLAB of any damage or anomaly discovered
SLAB reserves the right to terminate the contract with immediate effect in the event of a serious breach of the obligations set out in this article.
Art. 7 — Property and liability for damage
SLAB is not liable for theft, loss or damage to the Coworker's personal belongings within the space. A personal lockable storage unit is available for keeping personal effects safe.
The Coworker is liable for any damage caused to SLAB property and equipment during the period of use. Repair or replacement costs will be charged to the responsible Coworker.
Art. 8 — Included services and availability
Services included in the coworking plan are set out on the Spaces page. SLAB will use reasonable endeavours to ensure the availability of the stated services but is not liable for interruptions due to external causes (power outages, internet provider outages, force majeure events).
In the event of a prolonged interruption to essential services (over 4 consecutive hours in a single day) attributable to SLAB, the Coworker is entitled to a proportionate refund for the day affected.
Art. 9 — Business address service
The business address service allows the Coworker to use SLAB.coworking's address — Via Privata Battista De Rolandi 1, 20156 Milan — as the legal or operational address of their professional or business activity.
- The service is available exclusively to Coworkers on an Unlimited Monthly or Resident plan
- Domiciliation does not confer any real property right over the premises, nor the right to use the space as a physically operational base outside access hours
- SLAB will manage and sort incoming postal correspondence
- The service may be terminated by either party with 30 days' written notice
- Upon withdrawal or termination of the coworking plan, the Coworker must notify the change of address within 30 days
Art. 10 — Confidentiality
The Coworker undertakes to maintain the confidentiality of SLAB's and other Coworkers' confidential information that they become aware of in the course of their activity within the space. This obligation extends for 2 years after the end of the relationship.
Art. 11 — Changes to service and pricing
SLAB reserves the right to modify pricing and service conditions. Changes will be communicated to the Coworker with at least 30 days' written notice by email. Current plans will remain on their original conditions until their natural expiry; new conditions will apply from the next renewal.
Art. 12 — Duration and withdrawal
The coworking contract runs for the duration of the chosen plan. Daily plans and hour packages expire upon use. Monthly plans renew automatically from month to month, unless cancelled in accordance with the terms set out in Art. 4.
SLAB may unilaterally terminate the contract with 30 days' notice in the event of cessation of activity or space refurbishment. In such cases, the Coworker will be refunded the consideration paid for the unused period.
Art. 13 — Limitation of liability
To the extent permitted by applicable law, SLAB's total liability for any damage arising from use of the services is limited to the consideration paid by the Coworker in the month in which the damaging event occurred. SLAB is in no circumstances liable for indirect, consequential, loss of profit or data loss damages.
Art. 14 — Governing law and jurisdiction
These General Terms are governed by Italian law. For any dispute relating to the interpretation, performance or termination of the contract, the exclusive jurisdiction of the Court of Milan applies.
For Coworkers who qualify as consumers pursuant to Italian Legislative Decree 206/2005 (Consumer Code), territorial jurisdiction shall be that of the consumer's place of residence or domicile, in accordance with Art. 33(2)(u) of that decree.
Art. 15 — Final provisions
These General Terms supersede and replace all prior written or verbal agreements between the parties. Should one or more clauses prove invalid or ineffective, the remaining clauses shall retain full validity. SLAB's failure to enforce any clause does not constitute a waiver of that clause.
For further information: info@slabengineering.com
Version
1.0 — May 2026