Privacy Policy

PRIVACY POLICY

1. INTRODUCTION

Your privacy is important to us. Accordingly, this document explains what data we collect from users, how we use it, and for what purposes, among other relevant information.

For your information, we will never request more information than is genuinely necessary to provide the requested services; we will never share your data with third parties, except where required by law or with your prior authorisation; and we will never use your data for any purpose other than those previously specified.

As a User, you should read this Privacy Policy carefully on a regular basis and whenever you provide your personal data, as it may be amended. The provider reserves the right to make changes to the information contained on this website in order to comply with applicable legislation or to update this Policy. The provider is under no obligation to notify Users in advance of any such changes, publication on the website being deemed sufficient.

2. DATA CONTROLLER

Identity: BIOFACTORY S.L. (hereinafter also referred to as “the provider”)

Tax Identification Number (NIF): B61350757

Registered address: Cortit 16, 08027 Barcelona, Barcelona, Spain

Email: hola@mon.es

BIOFACTORY S.L., as the controller of this website, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation – GDPR) concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, together with all other applicable data protection legislation, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), hereby informs you that it has implemented the necessary technical and organisational security measures to guarantee and protect the confidentiality, integrity and availability of the data provided.

3. METHODS OF DATA COLLECTION, DATA COLLECTED AND PURPOSE OF THE PROCESSING

The personal data processed by BIOFACTORY S.L. is obtained directly from the data subject through the various channels available on the website or through the commercial or contractual relationship that may be established between the parties.

Depending on the channel used, the processing activities carried out are as follows:

3.1 Contact Form

When the User contacts BIOFACTORY S.L. through the contact form available on the website, the data provided will be processed for the purpose of responding to the enquiry, providing the requested information and, where appropriate, following up the pre-contractual or commercial relationship.

• Data processed: name, email address, telephone number (where provided), and any other information voluntarily included in the message.
• Purpose: to manage enquiries, requests for information or quotations submitted by the User.
• Lawful basis: the data subject’s consent given by voluntarily submitting the form and, where applicable, the implementation of pre-contractual measures requested by the data subject.

3.2 Newsletter Subscription Form

When the User subscribes to the BIOFACTORY S.L. newsletter using the subscription form available on the website, the data provided will be processed for the purpose of sending informational communications and, where applicable, commercial communications relating to the products and services of BIOFACTORY S.L.

• Data processed: name (where requested) and email address.
• Purpose: to manage the newsletter subscription and send newsletters, updates and information regarding the products and services of BIOFACTORY S.L.
• Lawful basis: the data subject’s consent given by voluntarily subscribing to the newsletter.
• Retention: the data will be retained until the User withdraws their consent or unsubscribes from the newsletter.

3.3 WhatsApp

The personal data provided by individuals who contact BIOFACTORY S.L. via WhatsApp will be processed for the purpose of responding to their enquiries, providing the requested information and managing the commercial or contractual relationship where necessary.

This processing shall be governed by this Privacy Policy, together with WhatsApp’s Terms of Use and Privacy Policy in force at any given time.

• Data processed: name, telephone number and any other information voluntarily provided by the User during the conversation.
• Purpose: to respond to enquiries, provide information about products and services, and manage the commercial or contractual relationship, where applicable.
• Lawful basis: the data subject’s consent given by initiating the communication and, where applicable, the implementation of pre-contractual measures or the performance of an existing contractual relationship.

3.4 Customers

Where products or services are purchased, BIOFACTORY S.L. will process the data necessary for the proper performance of the contractual relationship and compliance with the applicable legal obligations.

• Data processed: first name and surname(s), Tax Identification Number (NIF) / National Identity Document (DNI), postal address, telephone number, email address, billing details, signature, and any other data strictly necessary for the provision of the service.
• Purpose: to manage the contractual relationship, invoicing, payments, customer support, and compliance with administrative, tax, accounting and legal obligations.
• Lawful basis: performance of the contract and compliance with legal obligations.

4. DATA RETENTION PERIOD

Your data will be retained for as long as is necessary to fulfil the purpose for which it was collected, where required by law or by a court order, and until you withdraw your consent or exercise your right to erasure, objection or restriction of processing. However, we will retain your data for the periods required under the applicable legal provisions.

5. RECIPIENTS OF DISCLOSURES OR TRANSFERS

BIOFACTORY S.L. does not disclose or transfer personal data either within or outside the European Union. The provider will only disclose information to the law enforcement authorities where required by a court order or by a legal obligation. The information provided will be limited to that held by the provider at the relevant time.

The information you provide to us, whether through this website or through the application, will be hosted on the servers of BIOFACTORY S.L.’s web hosting service provider.

The processing of data by any tool used by the provider is governed by a Data Processing Agreement entered into between the provider and the relevant service provider.

6. RIGHTS OF DATA SUBJECTS

As a User and data subject, you may exercise the following rights by submitting a written request to BIOFACTORY S.L. at the postal address provided above or by sending an email to hola@mon.es, stating “DATA PROTECTION: DATA SUBJECTS’ RIGHTS” in the subject line.

Rights

• Right of access: enables the data subject to obtain confirmation as to whether their personal data is being processed and to obtain information regarding such processing.
• Right to rectification: enables inaccurate or incomplete personal data to be corrected or updated.
• Right to erasure: enables personal data that is inappropriate or excessive to be deleted.
• Right to object: enables the data subject to object to the processing of their personal data or to request that such processing cease.
• Right to restriction of processing: allows the personal data held to be marked in order to restrict its future processing, particularly for the establishment, exercise or defence of legal claims.
• Right to data portability: enables the data subject to receive the personal data undergoing processing in a structured, commonly used and machine-readable format and to transmit it to another controller without hindrance.
• Right not to be subject to automated individual decision-making (including profiling): enables the data subject not to be subject to a decision based solely on automated processing which produces legal effects concerning them or similarly significantly affects them.

As a User, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal.

You also have the right to lodge a complaint with the competent supervisory authority if you consider that your rights concerning the protection of your personal data have been infringed (www.aepd.es).

7. ADDITIONAL INFORMATION

7.1 Security Measures

The data you provide will be treated as strictly confidential. The provider has adopted all the necessary technical and organisational measures, together with the appropriate levels of security, to ensure the protection of personal data and to prevent its alteration, loss, theft, unauthorised processing or access, taking into account the current state of technology and the nature of the data stored. Furthermore, the provider guarantees that the processing and recording of data in files, software, systems, equipment, premises and processing facilities comply with the integrity and security requirements established under the applicable legislation.

7.2 Language

The governing language of this Privacy Policy is Spanish. Accordingly, in the event of any discrepancy or inconsistency between this English version and any version published in another language, the Spanish version shall prevail.

8. CHANGES TO THIS PRIVACY POLICY

BIOFACTORY S.L. reserves the right to amend this Privacy Policy in order to adapt it to legislative or case law developments.

9. WITHDRAWAL OF CONSENT

The consent granted both for the processing of personal data and for the disclosure of the data of the data subjects may be withdrawn at any time by notifying BIOFACTORY S.L. in accordance with the procedure established in this Privacy Policy for the exercise of data protection rights. Such withdrawal shall not have retrospective effect under any circumstances.

10. APPLICABLE LAW

As a general rule, the relationship between BIOFACTORY S.L. and the Users of the telematic services provided through this website shall be governed by Spanish law and subject to the jurisdiction of the Spanish courts.

The parties expressly submit to such legislation and jurisdiction, and any disputes arising from or relating to the use of this website shall be subject to the jurisdiction of the Courts and Tribunals corresponding to the provider’s registered office (where the User is not considered a consumer for the purposes of the Revised General Law for the Protection of Consumers and Users (TRLGDCU), or to the Courts and Tribunals corresponding to the User’s place of residence (where the User is considered a consumer for the purposes of the TRLGDCU).