Sicreto Labs / Request EU data

For AI labs and robotics teams

Request consented EU data, with the compliance work done up front

Tell us what you need: first-person workplace video with motion-sensor data, or company process data, from Spain and Southern Europe. We reply with what is feasible and how consent, transfers and licensing would be handled for your request.

Guidance, not legal advice. Sicreto Labs has not delivered data commercially yet; this page describes how the process is designed. We are not a law firm and hold no GDPR certification. Your own counsel decides whether a dataset is acceptable.

How compliance is handled

  1. Scope and rolesWe agree the task, sector, country and volume, and write down who is controller for what (controller-to-controller by default).
  2. OrderNothing is filmed, uploaded, de-identified or verified until three things are in place: (1) you have signed a paid purchase order with Sicreto (a pilot of at least 250 hours, or a weekly plan after the pilot); (2) the site company has signed a written agreement with Sicreto for that project; and (3) every person who will be filmed has given their own consent directly to Sicreto, and we have checked it before filming.
  3. Consent and captureSeparate, granular consent from each person, collected by Sicreto, not the employer. Owner-operators first. No CCTV, minors or private areas.
  4. De-identification and verificationRedaction reviewed frame by frame; raw footage deleted on schedule. Treated as personal data, never labelled "anonymous".
  5. Transfer and licenceYour DPF certification, or SCCs 2021 Module 1 plus a transfer impact assessment. Licence with field of use, no re-identification and withdrawal propagation.

What the compliance pack is designed to contain →

Describe what you need

Type of data
Countries
Privacy notice for this form (version 2026-10-23, draft pending counsel review)

Controller: Sicreto Labs LLC, 8 The Green Suite 1, Dover, DE 19901, USA, ramon@sicreto.ai. EU representative (GDPR Art 27): to be appointed; until then, write to ramon@sicreto.ai.

What we collect: company, your name, work email, and the request you describe (type of data, sector, volume, countries, intended use, DPF status and your description). Company, name, work email and the type of data are required; without them we cannot reply. Please do not include personal data about anyone in the description.

Why and legal basis: to reply to your request and discuss a possible order, as a step you asked for before any contract (GDPR Art 6(1)(b)). We send occasional emails only if you tick the optional box (your consent, Art 6(1)(a) GDPR and art. 21 LSSI), and you can withdraw it at any time. You have the right to object at any time (Art 21).

Who receives it: Vercel Inc. (hosting and server functions, and form storage once switched on) and Google LLC (Google Workspace email, our processor). With your cookie consent, PostHog Inc. (analytics, US) receives the usage events described in our Privacy notice; its transfer safeguard is still being confirmed. We do not share your details with anyone else without your written approval.

Transfers: Sicreto Labs, Vercel and Google are in the United States. Transfers rely on Vercel Inc.'s and Google LLC's certification under the EU-US Data Privacy Framework (Decision (EU) 2023/1795), checked on the official list on 22 October 2026; ask us for details. Storage is not switched on in this version, so your request is not kept on our servers; our server functions run in the EU (Frankfurt).

How long: 24 months from our last contact, or 12 months if we never exchange messages, and then deleted; sooner if you ask. Your rights: access, rectification, erasure, restriction, portability and objection, and withdrawal of any consent, at ramon@sicreto.ai or via our EU representative once appointed. You can complain to the AEPD (www.aepd.es) or your local authority. No automated decisions are made about you. More in our Privacy notice · Cookie settings.

Or book a 30-min call