01
Privacy POLICY
Pursuant to Arts. 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, the Controller provides the following information on the processing of personal data of users of slabcoworking.com, of the booking system booking.slabcoworking.com and of SLAB.coworking service users.
Data Controller
SLAB.coworking — Ing. Giovanni La Penna
Via Privata Battista De Rolandi 1, 20156 Milan, Italy
Tax code LPNGNN85S02D643S — VAT no. IT10847710968
Email: info@slabengineering.com
PEC: giovanni.lapenna1@ingpec.eu
Tel: +39 02 3598 5682
No Data Protection Officer has been appointed, as the conditions of Art. 37 GDPR do not apply.
Categories of data processed
- Identification data: name, surname, company name, VAT number / tax code
- Contact data: email address, telephone number, WhatsApp contact
- Booking data: dates, type of service selected, usage history
- Billing data: billing address, VAT number or tax code, SDI recipient code or certified email (PEC)
- Payment data: handled directly by the payment service provider. The Controller never obtains the full card number or payment credentials
- Technical browsing data: IP address, browser and device type, pages requested, date and time of the request
- Statistical measurement data: collected only with consent via Google Analytics, on the slabcoworking.com website only; the booking system does not collect them (see Cookie Policy)
Processing of special categories of data (Art. 9 GDPR) or data relating to criminal convictions and offences (Art. 10 GDPR) is not envisaged. Should a data subject volunteer such data, it will be deleted without delay.
Purposes and legal basis
| Purpose | Legal basis | Retention |
| Managing bookings and coworking contracts | Performance of a contract (Art. 6.1.b) | Duration of the relationship + 10 years (Art. 2220 Italian Civil Code) |
| Issuing pro forma receipts, invoicing and tax compliance | Legal obligation (Art. 6.1.c) | 10 years (Presidential Decree 633/1972) |
| Responding to enquiries and quotation requests sent via form, email or WhatsApp | Pre-contractual measures taken at the data subject's request (Art. 6.1.b) | 24 months from the last interaction |
| Professional domiciliation and mail handling | Performance of a contract (Art. 6.1.b) and legal obligation (Art. 6.1.c) | Duration of the service + 5 years |
| Sending commercial communications and newsletters | Consent (Art. 6.1.a), freely given, specific and revocable | 24 months from the last interaction, unless withdrawn earlier |
| Website security, diagnostics and abuse prevention (server logs) | Legitimate interest of the Controller (Art. 6.1.f) in the security and continuity of the service | As per the hosting provider's policy, normally no longer than 30 days |
| Statistical measurement of website use | Consent (Art. 6.1.a), given via the banner | Maximum 14 months (see Cookie Policy) |
| Fraud prevention in electronic payments | Legal obligation (Art. 6.1.c) and legitimate interest (Art. 6.1.f) of the payment service provider | As per the provider's policy |
Nature of the provision and consequences of refusal
Providing identification, contact and billing data is necessary in order to book, enter into the contract and issue tax documents: refusal makes it impossible to provide the service. Providing data for newsletter purposes and consenting to statistical measurement are optional: refusal has no consequence on the use of the services.
No automated decision-making
The Controller does not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Recipients of the data
Data may be disclosed to the following parties, appointed as Data Processors under Art. 28 GDPR where applicable, or processing it as independent controllers where indicated:
- Netlify, Inc. — website hosting and receipt of messages sent through the contact form
- SiteGround — hosting of the booking system booking.slabcoworking.com
- Stripe (via WooPayments) — card, Apple Pay, Google Pay and Klarna payments at the booking system checkout; fraud prevention
- PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg) — payment service provider and fraud prevention, for payments made with PayPal; the PayPal button and scripts are loaded only on the payment page of the booking system. It processes payment data as an independent controller under its own privacy statement
- Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden) — for payments made with Klarna; it processes the data as an independent controller under its own privacy notice
- Apple and Google — if the user pays with Apple Pay or Google Pay, for the management of the digital wallet; they process the related data as independent controllers, under their respective privacy notices (Apple Pay, Google Pay)
- Google Ireland Ltd. — statistical measurement services (Google Analytics) on the slabcoworking.com website, activated only with prior consent and within the limits set out in the Cookie Policy; they are not used on the booking system
- WhatsApp Ireland Ltd. (Meta group) — where the user chooses to contact the Controller through that channel
- Email service provider — for correspondence and service communications
- Tax advisors and accountants — for accounting and tax compliance
- Public authorities — upon reasoned request and in the cases provided for by law
Data is not sold to third parties for their own commercial purposes and is not disseminated. An up-to-date list of the parties appointed as Data Processors under Art. 28 of the Regulation is kept at the Controller's premises and may be requested by writing to info@slabengineering.com.
Transfers outside the European Union
Some of the providers listed above are established or operate infrastructure in the United States. Use of their services may therefore involve a transfer of personal data outside the European Economic Area. Such transfers take place in compliance with Arts. 44–49 GDPR, on the basis of the Standard Contractual Clauses approved by the European Commission and/or adherence to the EU-US Data Privacy Framework, as declared by each provider.
A copy of the safeguards in place may be requested by writing to info@slabengineering.com.
Rights of the data subject
As a data subject, you have the right to:
- Access (Art. 15): obtain confirmation of processing and a copy of the data
- Rectification (Art. 16): correct inaccurate data or complete it
- Erasure (Art. 17): request deletion in the cases provided for
- Restriction (Art. 18): restrict processing in certain cases
- Portability (Art. 20): receive the data in a structured format
- Objection (Art. 21): object to processing based on legitimate interest
- Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before withdrawal
To exercise your rights, write to info@slabengineering.com. The Controller replies within one month of receiving the request; that period may be extended by two further months for particularly complex requests, informing the data subject within the first month (Art. 12.3 GDPR).
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), Piazza Venezia 11, 00187 Rome.
Version, changes and prevailing language
Privacy policy — Version 2.3 — October 2026 (Google Analytics on the slabcoworking.com website only, not on the booking system; version 2.2 of 10 October 2026 added Klarna, Apple and Google among the recipients and PayPal loaded only at checkout). The Controller may amend this policy to reflect changes in legislation or in the services used. The version in force is always the one published at this address, with its date.
This English text is a translation provided for convenience. In the event of any discrepancy, the Italian version prevails: Informativa sulla Privacy.
02
Cookie POLICY
This policy describes the cookies and other tracking technologies (local storage, pixels, identifiers) used on slabcoworking.com and on the booking system booking.slabcoworking.com, pursuant to Art. 122 of Italian Legislative Decree 196/2003 and the Italian Data Protection Authority's Guidelines of 10 June 2021.
What they are
Cookies are small text files that websites store on the user's device. Alongside them there are other technologies with a similar function — local storage, session storage, pixels and software identifiers — to which the same rules apply. Below, the term "cookie" covers all of these.
Technical and functional cookies (no consent required)
These are necessary to deliver the service requested by the user. Under Art. 122(1) of Legislative Decree 196/2003 they do not require consent.
| Name | Domain | Purpose | Duration |
slab_cookie_consent (local storage) | slabcoworking.com first party | Stores the choice made on the banner so it is not shown again on every visit | Until manually cleared |
woocommerce_cart_hash
woocommerce_items_in_cart | booking.slabcoworking.com first party | Keep the cart contents during booking | Session |
wp_woocommerce_session_* | booking.slabcoworking.com first party | Cart and checkout session | 2 days |
wc_cart_hash_*
storeApiNonce
wcpay_appearance_* (local storage) | booking.slabcoworking.com first party | Cart state and protection of checkout requests | Session |
maz-resolved-color-mode | booking.slabcoworking.com first party | Remembers the light/dark interface theme | 12 months |
pll_language | booking.slabcoworking.com first party | Remembers the booking system interface language | 12 months |
__stripe_mid | booking.slabcoworking.com Stripe | Fraud prevention for electronic payments, set on the payment page | 12 months |
__stripe_sid | booking.slabcoworking.com Stripe | Fraud prevention during the payment session | 30 minutes |
m | m.stripe.com Stripe | Fraud prevention for electronic payments, set on the payment page | 13 months |
__ssid | .slabcoworking.com WooPayments (Sift) | WooPayments fraud prevention, set when the payment page is opened | 13 months |
l7_az, sc_f, __cf_bm and a technical cookie with a variable name | .paypal.com PayPal | Set when the payment page (checkout) of booking.slabcoworking.com is opened, even if another method is chosen; security and fraud prevention | From 30 minutes to 13 months |
__cf_bm, __cflb, hmt_id | .hcaptcha.com hCaptcha | Anti-bot check on the payment page | From 30 minutes to 30 days |
Statistical measurement cookies (consent required)
They are used on the slabcoworking.com website only and are set only after the user selects "Accept" on the banner. If the user declines, or makes no choice, they are not set.
| Name | Domain | Purpose | Duration |
_ga
_ga_QJ94D5VZD6 | .slabcoworking.com Google Analytics 4 | Aggregate statistics on site usage: page views, source, distinguishing visitors | 13 months |
The _gcl_au cookie (advertising conversion measurement) is not used: consent for advertising (ad_storage) is always denied, so Google does not set it. The site uses no profiling or advertising cookies.
The booking system booking.slabcoworking.com does not use Google Analytics or any other measurement tool, which is why it shows no banner: it sets only the technical cookies listed above. Purchases made on the booking system are not measured with Google Analytics. WooCommerce order attribution is turned off, so no sbjs_* cookies are set. The booking forms use the system font and load no fonts from Google Fonts.
First and third party
The Amelia booking system is hosted on a subdomain belonging to the Controller (booking.slabcoworking.com): its cookies are therefore first party. Cookies set by Google, Stripe, WooPayments' fraud prevention, PayPal and hCaptcha are third party. Klarna, Apple Pay and Google Pay set no cookies on the payment page. When choosing PayPal or Klarna as the payment method, the user moves to the provider's website (paypal.com, klarna.com), which applies its own cookie policy (PayPal, Klarna).
Embedded third-party content
This site embeds no third-party maps, videos or widgets. The Contact page shows the address of the space together with a plain link that opens Google Maps in a new tab: a connection to Google's servers is established only if the user chooses to follow that link, and from that point processing is governed by the Google Privacy Policy. No Google Maps cookie is set while simply browsing this site.
How to change or withdraw consent
The choice made on the banner can be changed at any time: reopen cookie preferences. Withdrawing consent is as easy as giving it: the same command is at the bottom of every page ("Cookie preferences") and, on withdrawal, any Google Analytics cookies already set are deleted.
Alternatively, cookies can be managed, disabled or deleted from your browser settings. Note that disabling technical cookies may impair some site functionality.
Version, changes and prevailing language
Cookie policy — Version 2.3 — October 2026 (sbjs_* and _gcl_au removed, as they are never set; the booking system uses no Google Analytics, banner or Google Fonts; version 2.2 of 10 October 2026 updated the checkout table and the reference to the PayPal and Klarna cookie policies), drawn up on the basis of a technical audit of the cookies actually set by the site. The Controller updates it whenever the tools used change.
This English text is a translation provided for convenience. In the event of any discrepancy, the Italian version prevails: Cookie Policy.
03
Terms & CONDITIONS
These General Terms of Service govern the contractual relationship between SLAB.engineering (hereinafter "SLAB" or "the Operator") and the person using the coworking services (hereinafter "Coworker"). Use of the services implies full acceptance of these terms.
Art. 1 — Definitions
- Operator: Giovanni La Penna / SLAB.engineering, owner of the coworking space at Via Privata Battista De Rolandi 1, 20156 Milan
- Coworker: any natural or legal person using the coworking services offered by SLAB
- Standard Workstation: 70×120 cm desk with ergonomic chair, privacy screen and standard amenities
- Deluxe Workstation: motorised 80×160 cm desk with premium ergonomic chair and advanced amenities
- Meeting Room: private space for meetings, bookable by the hour or with packages
- Plan: type of plan chosen by the Coworker (daily, package or monthly)
- Business Address: optional service allowing use of SLAB's address as the legal or operational address of the Coworker's business
Art. 2 — Booking and confirmation
SLAB services can be booked via:
A booking becomes binding only upon written confirmation from SLAB and payment (or receipt of a valid purchase order for clients with a deferred invoicing agreement). SLAB reserves the right to decline bookings in the event of unavailability or for a reasoned cause.
Art. 3 — Prices, payment and invoicing
All prices are VAT exclusive. 22% VAT is applied in accordance with current Italian tax regulations. Current rates are indicated on the Pricing page of the site.
- All plans (daily, packages, monthly and Resident): payment in advance at the time of booking or purchase
- Accepted payment methods: online by credit or debit card, PayPal, Klarna, Apple Pay and Google Pay; alternatively bank transfer, with the payment details sent by email within one working day. The service is activated once the transfer is credited; if the transfer is not received within 5 working days the booking is cancelled
- Availability pending bank transfer: until the transfer is credited, availability is not guaranteed: if in the meantime the same service is booked and paid online by another customer, SLAB promptly informs the Coworker, so as to avoid an unnecessary payment or, if the transfer has already been made, refunds it in full
SLAB will issue electronic invoices for all services. The Coworker must provide their complete tax details (tax code/VAT, SDI recipient code or PEC) at the time of their first booking.
In the event of late payment, SLAB reserves the right to suspend access to services and to apply late payment interest pursuant to Italian Legislative Decree 231/2002.
Art. 4 — Cancellation, rescheduling and expiry of plans
The cancellation and rescheduling deadlines coincide: within the stated deadline the booking can be either cancelled or rescheduled; after it, the booking can be neither cancelled nor changed.
- Day desks and Meeting Room: free cancellation or rescheduling up to 24 hours before the start time; no refund after that deadline
- No-show: failing to show up without cancelling within these deadlines counts as a late cancellation and gives no right to any refund
- Monthly and Resident plans: they are prepaid for 1, 3, 6 or 12 months and end on expiry, with no automatic renewal and no need for any notice from the Coworker. At purchase the Coworker does not choose dates: SLAB reserves the place in its calendar for the whole period, which runs from the 1st of the following month with at least 2 weeks' notice, and sends a single confirmation by e-mail. With the Monthly plan the workstation is not assigned (each day the Coworker chooses one of the desks in the area) and a place is guaranteed on every working day, Monday to Friday from 8:00 am to 8:00 pm; with the Resident plan the workstation is dedicated and access is allowed 24 hours a day. Before expiry SLAB sends a reminder; if the renewal is not paid by the expiry date, the workstation becomes available again and, for Resident plans, the access code is deactivated. Unused prepaid months are not refundable, except where SLAB withdraws under Art. 12
- Day packages and Meeting Room hour packages: non-refundable. Each package size has a set validity, stated in the price list and at purchase (from 3 to 24 months), running from the date of purchase. SLAB notifies the remaining balance 30 days before expiry; buying a new package of the same type reactivates the remaining days or hours of the previous package, aligning them with the new expiry date
- Use of packages: Packages are issued in the Coworker's name and are not transferable; each package allows only one workstation to be booked per day. The workstation is assigned by SLAB.
- Force majeure: in the event of space closure due to force majeure (government orders, extraordinary events), SLAB guarantees a refund or credit for the unavailable period
Art. 5 — Access and hours
SLAB.coworking is accessible Monday to Friday, from 8:00 am to 8:00 pm, except national public holidays and extraordinary closures communicated with adequate notice. On Saturdays the space opens for Meeting Room bookings. Holders of a Resident plan have access 24 hours a day, 7 days a week, using a personal code on a smart lock, which is non-transferable and revoked when the contract ends. For all other plans no independent access is permitted outside the stated hours, unless otherwise specifically agreed in writing in advance.
The Coworker must respect the access hours and notify SLAB of any required changes. Access to the space is personal and non-transferable.
Meeting Room. A booking entitles the Coworker to use the room during the booked time slot. The room must be vacated by the end time and left tidy. A 10-minute grace period applies; beyond it, any extra time is charged at the hourly list rate for each hour or part of an hour started, or deducted from the Coworker's hour package, if any. If the room is booked by someone else after the end time, staying beyond the booked time is not permitted.
Art. 6 — Coworker obligations and responsibilities
The Coworker undertakes to:
- Use only the assigned or booked workstation
- Keep their workstation and shared spaces tidy, leaving them in the same condition as found
- Respect the quiet and concentration of other Coworkers; extended phone calls must be taken in designated areas
- Not sublet or transfer to third parties, for consideration or otherwise, the use of the workstation or SLAB services
- Not carry out unlawful activities in breach of laws or regulations on SLAB premises
- Not bring strongly scented food into work areas; a dedicated break area is available
- Promptly notify SLAB of any damage or anomaly discovered
SLAB reserves the right to terminate the contract with immediate effect in the event of a serious breach of the obligations set out in this article.
Art. 7 — Property and liability for damage
SLAB is not liable for theft, loss or damage to the Coworker's personal belongings within the space. A personal lockable storage unit is available for keeping personal effects safe.
The Coworker is liable for any damage caused to SLAB property and equipment during the period of use. Repair or replacement costs will be charged to the responsible Coworker.
Art. 8 — Included services and availability
Services included in the coworking plan are set out on the Spaces page. SLAB will use reasonable endeavours to ensure the availability of the stated services but is not liable for interruptions due to external causes (power outages, internet provider outages, force majeure events).
In the event of a prolonged interruption to essential services (over 4 consecutive hours in a single day) attributable to SLAB, the Coworker is entitled to a proportionate refund for the day affected.
Art. 9 — Business address service
The business address service allows the Coworker to use SLAB.coworking's address — Via Privata Battista De Rolandi 1, 20156 Milan — as the legal or operational address of their professional or business activity.
- The service is available exclusively to Coworkers on an Unlimited Monthly or Resident plan
- Domiciliation does not confer any real property right over the premises, nor the right to use the space as a physically operational base outside access hours
- SLAB will manage and sort incoming postal correspondence
- The service may be terminated by either party with 30 days' written notice
- Upon withdrawal or termination of the coworking plan, the Coworker must notify the change of address within 30 days
Art. 10 — Confidentiality
The Coworker undertakes to maintain the confidentiality of SLAB's and other Coworkers' confidential information that they become aware of in the course of their activity within the space. This obligation extends for 2 years after the end of the relationship.
Art. 11 — Changes to service and pricing
SLAB reserves the right to modify pricing and service conditions. Changes will be communicated to the Coworker with at least 30 days' written notice by email. Current plans will remain on their original conditions until their natural expiry; new conditions will apply from the next renewal.
Art. 12 — Duration and withdrawal
The coworking contract runs for the duration of the chosen plan. Daily plans and hour packages expire upon use. Monthly and Resident plans run for the prepaid period (1, 3, 6 or 12 months) and end on expiry, with no automatic renewal: they continue only if the Coworker pays for the next period by the expiry date, in accordance with Art. 4.
SLAB may unilaterally terminate the contract with 30 days' notice in the event of cessation of activity or space refurbishment. In such cases, the Coworker will be refunded the consideration paid for the unused period, including any prepaid months.
Art. 13 — Limitation of liability
To the extent permitted by applicable law, SLAB's total liability for any damage arising from use of the services is limited to the consideration paid by the Coworker in the month in which the damaging event occurred. SLAB is in no circumstances liable for indirect, consequential, loss of profit or data loss damages.
Art. 14 — Governing law and jurisdiction
These General Terms are governed by Italian law. For any dispute relating to the interpretation, performance or termination of the contract, the exclusive jurisdiction of the Court of Milan applies.
For Coworkers who qualify as consumers pursuant to Italian Legislative Decree 206/2005 (Consumer Code), territorial jurisdiction shall be that of the consumer's place of residence or domicile, in accordance with Art. 33(2)(u) of that decree.
Art. 15 — Final provisions
These General Terms supersede and replace all prior written or verbal agreements between the parties. Should one or more clauses prove invalid or ineffective, the remaining clauses shall retain full validity. SLAB's failure to enforce any clause does not constitute a waiver of that clause.
For further information: info@slabengineering.com
Version
1.4 — October 2026 (hourly desks removed, Art. 4; end-time rule for the Meeting Room added, Art. 5; version 1.3 of October 2026 made packages personal, Art. 4)