Data protection
General
LABO’LIFE ESPAÑA S.A.U., LABO’LIFE BELGIUM SRL, and DESARROLLO INTERNACIONAL DE MICRO-INMUNOTERAPIA, S.L.U. (hereinafter, “LABO’LIFE”, “We”, or “Our”) are companies belonging to the same group that are committed to ensuring the confidentiality and data protection rights of users and visitors to the website. We process personal data in accordance with all applicable data protection laws and regulations, including but not limited to the EU General Data Protection Regulation 2016/679 (GDPR).
This data protection information explains how LABO’LIFE processes personal data.
What is personal data?
Personal data is any information relating to an identified or identifiable natural person (“data subject”), such as names, addresses, phone numbers, email addresses, dates of birth, gender, health-related data, or location data (“personal data”).
Data controllers
For GDPR purposes, the data controllers determining the purposes and means of processing, and who may act as joint controllers for certain activities, are:
- LABO’LIFE ESPAÑA, S.A.U., with its registered office at Avenida des Raiguer 7, 07330 Consell, Illes Balears, for activities carried out in Spain and Italy;
- LABO’LIFE BELGIUM SRL, with its registered office at Av. d’Ecolys 2 bte 36, B-5020 Namur, Belgium, for activities carried out in Belgium and other EU countries, except Spain and Italy;
- DESARROLLO INTERNACIONAL DE MICRO-INMUNOTERAPIA, S.L.U., (hereinafter DIMI), with its registered office at Avenida des Raiguer 7, 07330 Consell, Illes Balears, for website and network management.
Data Protection Officers (DPO) and Data Protection Manager
LABO’LIFE has appointed various Data Protection Officers (DPOs) depending on the processing activities and their locations. There is also a communication channel with the Data Protection Manager to address questions about implemented data protection measures and to manage data subject rights. Contact details are as follows:
- The DPO for LABO’LIFE ESPAÑA and DIMI: lopd-gdd@atico34.com
- The DPO for LABO’LIFE BELGIUM can be reached via the following:
- Phone numbers: +32 2 896 55 53 or +33 9 70 70 20 09
- Email: dpo@mydata-trust.info
- The LABO’LIFE Data Protection Manager can be contacted at: gdpr@labolife.com
Personal data we may process
- Identity data, including name(s) and surname(s).
- Contact data, including email address, home or business postal address, phone number, and fax number.
- Professional data (of healthcare professionals), including title, specialty, and registration number or association membership.
- Financial data, such as bank details (IBAN) and payment information.
- Job applicant data, including CV, academic and professional data, and type of applicant (student).
- Usage and device-related data, including IP address, browser plugin types and versions, operating system, and user platform.
Purposes | Legal basis | Storage |
Response to users and visitors contacting via the website | Users and visitors consent Legitimate interest of LABO’LIFE | The time needed for the purpose of the processing and depending on the applicable prescription period and the consent given |
Collection of personal data (cookies) to improve our website | Users and visitors of the website consent | 13 months as per the Cookie Policy |
Newsletter subscriptions and communications | Users and visitors consent Legitimate interest of LABO’LIFE | The time needed for the purpose of the processing and depending on the applicable prescription period and the consent given |
Collection and registration of healthcare professionals’ data in the professional area | Healthcare professional consent Legitimate interest of LABO’LIFE | The time needed for the purpose of the processing and depending on the applicable prescription period and the consent given |
Management of client and supplier relationships and CRM system maintenance | Healthcare professional consent Legitimate interest of LABO’LIFE | The time needed for the purpose of the processing and depending on the applicable prescription period and the consent given |
Order management and processing | Required time for contract execution (order) | The time needed for the purpose of the processing and depending on the applicable prescription |
Receiving job applications | Applicants consent Legitimate interest of LABO’LIFE | The time needed for the purpose of the processing and depending on the applicable prescription period and the consent given |
Management of the association’s social media (LinkedIn, Facebook, Instagram, etc.) | Legitimate interest of LABO’LIFE | The time needed for the purpose of the processing and depending on the applicable prescription period |
Finally, we inform you that we do not collect health data or any other special categories of personal data without the corresponding data subject’s consent. Additionally, we do not collect or process personal data of minors.
Communication of personal data
Personal data received through this website may be shared among group companies and communicated to company collaborators, as per the purposes and legal bases detailed in this notice. LABO’LIFE, like many companies, may need the help of suppliers to perform certain business activities and therefore may need to share personal data with collaborators with whom it has processing agreements in place.
Transfers of your personal data outside the European Economic Area (EEA)
There will be no transfers of personal data outside the EEA.
Security of personal data
LABO’LIFE adopts appropriate technical and organizational measures to ensure a level of security adapted to the risk posed by personal data processing, protecting the rights and freedoms of individuals. These measures are designed to protect personal data from destruction, loss, alteration, accidental or unlawful disclosure, or access by unauthorised third parties.
Your rights
Data subjects can exercise the following rights:
- Right of access: they have the right to obtain confirmation of whether their personal data has been processed and, if so, to receive precise information on the processing of their data. They also have the right to request a copy of the information we hold on data subjects.
- Right to rectification: they have the right to request that we rectify any inaccurate personal data, including completing or correcting any information we hold.
- Right to erasure (right to be forgotten): they can request the deletion of their personal data, if applicable.
- Right to restrict processing: they can request that some of their data not be processed.
- Right to data portability: they can request to retrieve their information in a structured, commonly used, and machine-readable format and transfer it to other data controllers.
- Right to object: they can object to the processing of their personal data.
The application of these rights is not absolute. Requests to exercise rights will be evaluated by the DPO or the LABO’LIFE Data Protection Manager.
When the processing of your data is based on consent, you may withdraw it at any time, without justification.
To obtain more information or exercise your rights, contact the DPO or Data Protection Manager of LABO’LIFE.
You also have the right to lodge a complaint with the Data Protection Authority of the EU Member State where you reside, work, or where the alleged infringement occurred, if you believe your personal data is not being processed in accordance with the GDPR.
You can find contact details of the various European Data Protection Authorities at this link: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm](https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
Revised version dated August 28, 2024.