Data protection
General
LABO’LIFE ESPAÑA S.A.U., LABO’LIFE BELGIUM SRL and DESARROLLO INTERNACIONAL DE MICRO-INMUNOTERAPIA, S.L.U. (hereinafter, “LABO’LIFE”, “We” or “Our”) belong to the same group of companies and are firmly committed to ensuring the confidentiality and data protection rights of users and visitors of this website, and to processing personal data in accordance with all applicable data protection laws and regulations, including, among others, the EU General Data Protection Regulation 2016/679 (GDPR).
This data protection notice explains how LABO’LIFE processes the personal data it uses.
What is personal data?
Personal data is any information relating to an identified or identifiable natural person (“data subject”), such as first and last names, an address, a telephone number, an email address, a date of birth, gender, health-related data, or location data (“personal data”).
Data controllers
For the purposes of the GDPR, the controllers that determine the purposes and means of processing, depending on each case and possibly acting as joint controllers in certain activities, are:
- LABO’LIFE ESPAÑA, S.A.U., with registered office at Avenida des Raiguer 7, 07330 Consell, Illes Balears (Spain), for processing activities carried out in Spain and Italy.
- LABO’LIFE BELGIUM SRL, with registered office at Av. d’Ecolys 2 bte 36, B-5020 Namur, Belgium, for processing activities carried out in Belgium and other EU countries, except Spain and Italy.
- DESARROLLO INTERNACIONAL DE MICRO-INMUNOTERAPIA, S.L.U. (“DIMI”), with registered office at Avenida des Raiguer 7, 07330 Consell, Illes Balears (Spain), for the processing activities related to website and network administration and maintenance.
Data Protection Officers (DPO) and Data Protection Manager
LABO’LIFE has appointed various Data Protection Officers (DPOs), depending on the processing activity and location. LABO’LIFE also provides a communication channel for the Data Protection Lead to handle questions regarding the implemented data protection measures, as well as requests for the exercise of data subjects’ rights. The contact details are as follows:
- The DPO for LABO’LIFE ESPAÑA and DIMI can be contacted at: lopd-gdd@atico34.com
- The DPO for LABO’LIFE BELGIUM can be contacted through the following channels:
- Telephone: +32 2 896 55 53 or +33 9 70 70 20 09
- Email: labolifebe.dpo@mydata-trust.info
- The Data Protection Lead for LABO’LIFE can be contacted at: gdpr@labolife.com
Personal data we may process
- Identity data, including first name and last name.
- Contact data, including email address, postal or business address, and telephone number.
- Professional data (for healthcare professionals), including degree, specialty, and membership or registration number.
- Financial data, such as bank details (IBAN) and payment information.
- Job applicant data, including CV information such as academic background, professional experience, or student status.
- Technical and device usage data, including IP address, browser plug-in type and version, operating system, and other browsing data (collected through cookies).
Purposes | Legal basis | Retention period |
| Handling and responding to requests submitted through the website | User and visitor consent; LABO’LIFE’s legitimate interest | Retained for the time necessary to fulfil the purpose for which they were collected, subject to applicable statutory limitation periods and the validity of consent |
| Collection of personal data through cookies to improve our website | Consent of users and visitors | Retained for 13 months and in accordance with the Cookie Policy |
| Subscription to and delivery of newsletters | Consent of users and visitors; LABO’LIFE’s legitimate interest | Retained for the time necessary to fulfil the purpose for which they were collected, subject to applicable statutory limitation periods and the validity of consent |
| Registration of healthcare professionals in the professional area | Consent of healthcare professionals; LABO’LIFE’s legitimate interest | Retained for the time necessary to fulfil the purpose for which they were collected, subject to applicable statutory limitation periods and the validity of consent |
| Management and administration of relationships with group customers and suppliers, and maintenance of CRM systems | Consent of healthcare professionals; LABO’LIFE’s legitimate interest | Retained for the time necessary to fulfil the purpose for which they were collected, subject to applicable statutory limitation periods and the validity of consent |
| Order management and customer support | Processing necessary for the performance of a contract (order) | Retained for the time necessary to fulfil the purpose for which they were collected, subject to applicable statutory limitation periods |
| Receipt of job applications | Applicant consent; LABO’LIFE’s legitimate interest | Retained for the time necessary to fulfil the purpose for which they were collected, subject to applicable statutory limitation periods |
| Social media management (LinkedIn, Facebook, Instagram, etc.) | LABO’LIFE’s legitimate interest | Retained for the time necessary to fulfil the purpose for which they were collected, subject to applicable statutory limitation periods |
We also inform you that we do not collect health data or other special categories of personal data unless we have the data subject’s consent. Likewise, we do not collect or process personal data of minors.
Communication of personal data
Personal data collected through this website may be shared with companies within the same group and disclosed to company partners, in accordance with the purposes described in this notice and the declared legal bases. Like many companies, LABO’LIFE may need the assistance of service providers to perform certain business-related activities, and therefore must disclose personal data to processors with whom it has signed appropriate data processing agreements.
Transfers of your personal data outside the European Economic Area (EEA)
No transfers of personal data outside the EEA will be carried out.
Security of your personal data
LABO’LIFE adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risks involved in processing personal data, thus protecting the rights and freedoms of data subjects. These measures aim to protect personal data against destruction, loss, alteration, accidental or unlawful disclosure, or unauthorised access.
Your rights
Data subjects may exercise the following rights:
- Right of access: to obtain confirmation as to whether their personal data is being processed and, where applicable, to access detailed information about such processing. They may also request a copy of the data we hold.
- Right to rectification: to request rectification of inaccurate personal data, including completing or correcting any information we hold.
- Right to erasure (“right to be forgotten”): to request deletion of their personal data when applicable.
- Right to restriction of processing: to request that some of their data not be processed.
- Right to data portability: to request their data in a structured, commonly used, machine-readable format and transmit it to another controller.
- Right to object: to object to the processing of their personal data.
The exercise of these rights is not absolute. Requests will be assessed by LABO’LIFE’s DPO or Data Protection Lead.
When processing is based on consent, the user may withdraw this consent at any time, easily and without providing justification.
If you wish to receive more information about the processing of your data or to exercise your rights, you may send your requests to LABO’LIFE’s DPO or Data Protection Lead.
You also have the right to lodge a complaint with the Data Protection Authority of the EU Member State where you habitually reside, work, or where the alleged infringement took place, if you believe your personal data is not being processed in accordance with the GDPR.
Contact details of the various European Data Protection Authorities can be found at the following link:
https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
Reviewed on 10 September 2025.