PRIVACITY POLICY

DATA PROTECTION AND SECURITY POLICY

F3LAB S.L. hereby sets out its privacy policy as applied to personal data. Such data will be processed in accordance with the applicable personal data protection regulations, namely Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). Use of the website does not require the user to provide any information regarding their identity, and such information cannot be associated with a specific user by the company. Should personal data be provided, such data will be collected and used in accordance with the limitations and rights set out in the aforementioned regulations.

Who is the Data Controller?

Identity: IF3LAB S.L. Tax ID: B 19669365 Postal address: Av. Innovación 1, Unit 5, Granada – Spain Email: soporte@barosalabs.com

Registered in the Commercial Registry of Granada, volume 1671, book 10, section 8, folio [pending], sheet GR51844, entry 4 (21.09.21.)

For what purposes do we process your personal data?

In general, the personal data you provide to us and that we obtain from you is used to process your requests and transactions, to provide you with a high-quality service, and to inform you of opportunities we believe may be of interest to you.

• To provide you with information you have requested, including quotes for products and services. The legal basis for processing your data in this case is your consent.
• To send you our newsletter with information, promotions, campaigns and news about products and services. The legal basis for processing your data in this case is your consent.
• To register you as a customer, process your transactions, manage the contractual relationship with you, provide access to the private customer area, send you relevant information about products and services, invoicing, collections and payments, process transactions and payment methods, and any service communications related to your contract and transactions, as well as administer loyalty programmes, discounts and promotions, and carry out satisfaction surveys or surveys related to products marketed by IF3LAB S.L. The legal basis for processing your data in this case is the performance of the sales contract.
• To store your data and contact you in connection with recruitment processes, as well as to manage your participation in them. The legal basis for processing your data in this case is your consent.
• Where you give your consent, to send you commercial communications about our products and services, deliver our publications, opinion surveys, promotional and advertising information, coupons and offers (including personalised offers) tailored to your interests and based on a profile compiled by us, via telephone, postal mail, email, SMS and MMS. The legal basis for processing your data in this case is your consent.
• To ensure the security of our Website and the information it contains. The legal basis for processing your data in this case is our legitimate interest in providing a secure environment and preventing damage to IF3LAB S.L.’s systems and user information, as well as unauthorised access and misuse thereof.
• With regard to the purposes of cookie use, please refer to the «Cookie Policy» section. The legal basis for processing your data in this case is your consent.

How long will we retain your data?

Data will be retained for as long as necessary to respond to enquiries, and thereafter for 12 months to avoid potential errors or misunderstandings.

For the purposes of processing your transactions and managing the contractual relationship with you, your personal data will be retained for the duration of the contractual relationship and thereafter for 6 years in accordance with the obligations arising from the Spanish Commercial Code.

Data used for sending commercial communications will be retained until you unsubscribe from our newsletters.

What is the legal basis for processing your data?

The legal basis for processing is the consent of the data subject or the existence of a prior legal relationship.

To which recipients will your data be disclosed?

Your personal data may be shared with other entities within the IF3LAB S.L. group.

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether IF3LAB S.L. is processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing of their data, in which case we will only retain it for the exercise or defence of claims. Please note that you have the right to lodge a complaint with the supervisory authority.

How did we obtain your data?

The personal data processed by IF3LAB S.L. comes directly from the data subject. No special category data is processed.

IF3LAB S.L. collects and processes the personal data that you voluntarily provide to us through your interaction with our Website, specifically:

• when requesting information about our products;
• when completing contact forms on our website;
• when subscribing to our Newsletter;
• when registering as a user on our websites;
• when sending us your CV to participate in recruitment processes.

No special category data is processed.

You are only required to provide the personal data necessary for IF3LAB S.L. to deliver the services or make available the Website functionalities you have requested.

By ticking the relevant boxes and entering data in the fields of the contact form or forms presented for download, users expressly, freely and unambiguously accept that their data is necessary for the provider to attend to their request. The inclusion of data in the remaining fields is voluntary.

The user warrants that the data they provide is truthful, accurate, complete and up to date, and shall be liable for any direct or indirect damage or harm that may arise as a result of failing to comply with this obligation.

Should the user provide data belonging to a third party, they warrant that they have informed said third party of all aspects contained in this Privacy Policy and have obtained their consent to provide us with their data for the relevant processing purpose, prior to submitting any third-party data.

If not all required data is provided, we cannot guarantee that the information and services delivered will be fully suited to your needs.