Legal & Compliance

GDPR & Privacy Guide.

Understanding how Virtual Lab manages your data, ensures your privacy, and complies with EU regulations.

1. Data Collection & Processing

When you use LabOS Virtual Environments, we collect minimal personal data necessary to provision and secure your resources. This includes:

  • Identity Data: Student ID, University Email, and Name used strictly for authentication and authorization.
  • Technical Data: IP addresses, browser types, and session timestamps for security auditing.
  • Usage Data: Virtual Machine resource metrics (CPU, RAM, Disk) to enforce quota limits.

2. Data Storage & Security

All Virtual Lab data, including your deployed instances and database records, are hosted within the EU/EEA region, ensuring compliance with data sovereignty requirements.

Encryption in Transit

All connections to LabOS and deployed consoles are secured via TLS 1.3.

Encryption at Rest

VPS storage volumes are encrypted using AES-256 block-level encryption.

3. Cookie Policy

LabOS utilizes cookies to manage user sessions and preferences. You can manage your consent at any time.

Essential Cookies Required for authentication (`PHPSESSID`) and basic security. Cannot be disabled.
Always Active
Preference Cookies Stores UI choices and consent status (`gdpr_consent_status`).
Optional

4. Your GDPR Rights

Under the General Data Protection Regulation (GDPR), you possess the following rights regarding your personal data in LabOS:

Right to Access
Right to Erasure
Right to Rectification
Data Portability

To exercise any of these rights, please contact the IT Administration desk or email the DPO:

Contact Data Protection Officer