Privacy policy
Summary
This policy explains how Allbiotech S.L. processes personal data obtained through its website, forms, subscriptions, electronic communications and, where applicable, commercial relationships initiated from the website.
1. Data controller
Data
Information
Data controller
Allbiotech S.L.
CIF
B71507099
Address
Calle J 20, 31192 Mutilva (Navarra), Spain
info@allbiotech.eu
Website
https://allbiotech.eu
2. What data we can process
Depending on the way the website is used, Allbiotech may process the following categories of data:
Identification and contact data: first name, last name, company, job title, email address, phone number, and any other data the user provides voluntarily.
Data included in inquiries or requests: message content, technical or commercial needs, and requests for demonstrations, quotes, support, or information.
Subscription data: primarily the email address and preferences relating to informational or commercial communications.
Contractual, billing, delivery or payment data when a commercial relationship is initiated or managed through the website.
Technical browsing and security data, such as IP address, device type, browser, technical logs, and data obtained through cookies or similar technologies, in accordance with the Cookie Policy.
Allbiotech does not request special categories of personal data through the website’s general forms. Please do not include sensitive information that is not necessary to respond to your request.
3. Purposes and legal bases
Purpose
Legal basis
Respond to inquiries and requests for information, demonstrations, or quotes.
Consent of the data subject (art. 6.1.a GDPR) and, where the request relates to a potential contract, steps taken prior to entering into a contract (art. 6.1.b GDPR).
Manage orders, contracts, deliveries, support and customer relations.
Performance of a contract or steps taken prior to entering into a contract (art. 6.1.b GDPR).
Comply with accounting, tax, commercial or administrative obligations.
Compliance with legal obligations (art. 6.1.c GDPR).
Send newsletters, product updates, invitations, or requested commercial communications.
Consent (art. 6.1.a GDPR) and regulations applicable to electronic communications. Consent can be withdrawn at any time.
Maintain security, prevent abuse, fraud or illicit uses and ensure the technical functioning of the website.
Allbiotech’s legitimate interest in protecting its systems, services, and users (art. 6.1.f GDPR).
Measure or analyze website use through non-essential cookies, if enabled.
User consent (art. 6.1.a GDPR), managed through the cookie consent system.
4. Mandatory nature of the data
Fields marked as mandatory in the forms must be provided in order to process the corresponding request. If they are not provided, Allbiotech may not be able to respond, prepare a proposal or provide the requested service. The rest of the data is voluntary.
5. Retention periods
Data will be retained only for as long as necessary to fulfill the purpose for which it was obtained and, subsequently, for any periods during which liability may arise or a legal retention obligation exists. In particular:
Inquiries and requests without a contractual relationship: for as long as necessary to address them and conduct reasonable follow-up; the data will then be deleted or blocked unless another legal basis exists for retaining it.
Customer and transaction data: for the duration of the contractual relationship and, afterward, for the applicable statutory periods.
Consent-based commercial communications: until the data subject withdraws consent or requests to unsubscribe, without prejudice to retaining the minimum evidence necessary to demonstrate the unsubscribe request or consent, where applicable.
Technical security logs: for the time reasonably necessary to protect the website, investigate incidents and comply with legal obligations.
6. Recipients and data processors
Allbiotech does not sell personal data. Data may be disclosed or made accessible to:
Technology providers supplying services necessary for hosting, website maintenance, email, CRM, form management, analytics, backups, support, or cybersecurity, acting as data processors where applicable.
Financial institutions, payment providers, transport and logistics providers, or other service providers where necessary to carry out a transaction requested by the user.
Public administrations, courts, supervisory authorities, or other bodies where required by law.
7. International transfers
Some technology providers may provide services from countries outside the European Economic Area. Where an international data transfer occurs, Allbiotech will seek to ensure that it is based on a European Commission adequacy decision, standard contractual clauses, or another valid safeguard under the GDPR. You may request additional information by writing to info@allbiotech.eu.
8. Rights of data subjects
Where applicable, data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, and may withdraw consent at any time without affecting the lawfulness of processing carried out previously.
To exercise these rights, you may email info@allbiotech.eu or write by post to Allbiotech S.L., Calle J 20, 31192 Mutilva (Navarra), stating the right you wish to exercise and providing the information needed to verify your identity where necessary.
If you consider that your rights have not been adequately addressed, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD): https://www.aepd.es.
9. Commercial communications
When a user subscribes to commercial or informational communications, Allbiotech may use the data provided to send content related to its products, services, demonstrations, events, or updates. Each electronic communication will include a simple unsubscribe mechanism where required. Withdrawal of consent will not affect other relationships that have an independent legal basis.
10. Minors
The website is aimed mainly at professional users, companies, research centers and academic entities. It is not specifically aimed at minors. If a minor under 14 years of age provides personal data when consent is necessary, this must be provided by the person exercising parental authority or guardianship.
11. Security and confidentiality
Allbiotech applies reasonable technical and organizational measures to protect personal data against loss, unauthorized access, alteration, or improper disclosure, taking into account the nature of the data, the context of processing, and the existing risks. Access to data is limited to the people and providers who need it for the purposes described.
12. Cookies and similar technologies
The use of cookies and similar technologies is governed by Allbiotech’s Cookie Policy. Non-essential cookies, if used, must only be activated after obtaining valid user consent.
13. Automated decisions
Allbiotech does not intend to make decisions through the website based solely on automated processing that produce legal effects concerning the user or similarly significantly affect them. If this changes, the information required by law will be provided.
14. Updating this policy
Allbiotech may update this Privacy Policy to reflect changes in the law, technology, or its services. The current version will be published on the website and will indicate its last update date. Where a change is relevant to consent-based processing, fresh consent will be requested when necessary.
15. Official regulations and references
Regulation (EU) 2016/679 (GDPR): https://eur-lex.europa.eu/eli/reg/2016/679/oj
Organic Law 3/2018 (LOPDGDD), consolidated text: https://www.boe.es/buscar/act.php?id=BOE-A-2018-16673
AEPD · Right to information: https://www.aepd.es/derechos-y-deberes/conoce-tus-derechos/derecho-de-informacion
AEPD: https://www.aepd.es