Introduction
The CDSLAb Privacy Policy explains how BiO-Oxidantes S.L., under the trade name CDSLAb, collects, uses and protects the personal data of users of www.cdslab.es.
Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and other applicable data protection legislation.
Data Controller – CDSLAb Privacy Policy
The data controller responsible for the personal data collected through this website is:
Data Controller: BiO-Oxidantes S.L.
Trade name: CDSLAb
Tax ID (NIF): B02774958
Registered address: Carretera La Estación 127, 04600 Huércal-Overa, Almería, Spain
Email: info@cdslab.es
Website: www.cdslab.es
BiO-Oxidantes S.L. determines the purposes and means of processing the personal data collected through CDSLAb.
2. What personal data we process
Depending on the user’s relationship with CDSLAb and the services used, we may process different categories of personal data.
These may include:
- Identification data, such as first and last name.
- Contact details, such as postal address, email address and telephone number.
- Data required for billing.
- Data relating to orders, purchases and returns.
- Information required to manage payments.
- Data relating to the delivery and tracking of orders.
- Communications made through forms, email or other contact channels.
- Technical data relating to the use of the website, where applicable.
CDSLAb will only process the data necessary for the corresponding purposes.
3. Purposes of processing
Personal data may be processed for the following purposes:
Order and purchase management.
To manage orders placed through the online store, including their preparation, payment, invoicing, shipping, delivery, tracking, returns and after-sales service.
Customer service.
To respond to enquiries, requests, comments, incidents or complaints submitted by users.
Customer account management.
When the user creates an account, to manage their registration, identification and access to the available features.
Commercial communications.
To send commercial or promotional information about CDSLAb products, services or news when consent or another applicable legal basis exists.
Compliance with legal obligations.
To comply with tax, accounting, administrative, consumer protection and any other applicable legal obligations.
Website security and operation.
To maintain the security of the website, prevent fraudulent or abusive use and resolve possible technical incidents.
Website analytics.
To obtain statistical information about the use of the website when the technologies used for this purpose are permitted in accordance with the user’s consent preferences.
4. Legal bases for processing
Each processing activity involving personal data must be supported by a legal basis. The following legal bases may apply:
Performance of a contract or steps taken prior to entering into a contract.
This applies to processing necessary to manage purchases, orders, payments, shipments, returns and other services requested by the customer.
Consent of the data subject.
This applies when the user voluntarily provides consent, for example, for certain commercial communications or for certain cookies or technologies that require consent.
Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
Compliance with a legal obligation.
Certain data must be processed or retained in order to comply with tax, accounting, administrative or other obligations established by applicable legislation.
Legitimate interests.
Where applicable, certain processing activities may be based on the legitimate interests of BiO-Oxidantes S.L., provided that these interests are not overridden by the rights and freedoms of the individuals concerned.
5. Recipients of personal data
Personal data will not be sold to third parties.
However, certain data may be disclosed or made available to third parties when necessary to provide the contracted services or comply with legal obligations.
These may include:
- Financial institutions and payment service providers.
- Transport, courier and logistics companies.
- Technology, web hosting and maintenance providers.
- Administrative, accounting or professional service providers where necessary.
- Public administrations, authorities or other bodies where there is a legal obligation.
Providers processing personal data on behalf of BiO-Oxidantes S.L. must do so in accordance with applicable data protection obligations.
6. Shipments outside the European Union
When an order is destined for a country outside the European Union, certain data required to manage the shipment may be disclosed to transport companies, logistics operators, customs authorities or other competent bodies.
Such disclosures will be made when necessary to manage transport, customs formalities, taxes, duties or legal obligations relating to the transaction.
The previous document already expressly provided for the disclosure of data to customs authorities for orders outside the EU.
7. International data transfers
Some technology providers used by the website may process or store information from countries outside the European Economic Area.
Where an international transfer of personal data takes place, BiO-Oxidantes S.L. will endeavour to ensure that it is carried out in accordance with the mechanisms and safeguards provided for by applicable legislation.
Where applicable, users may obtain additional information about these transfers and their safeguards by contacting info@cdslab.es.
The existence and safeguards of international transfers form part of the information that must be provided to the data subject where applicable.
8. Data retention
Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected.
Subsequently, it may be kept duly restricted for the periods necessary to address possible liabilities and comply with applicable legal obligations.
In particular:
Data relating to purchases and invoicing: will be retained for the periods required by tax, accounting and other applicable legislation.
Enquiries and customer service: will be retained for the time necessary to deal with the request and, subsequently, for the period necessary to address possible liabilities.
Commercial communications: will be retained until the user withdraws their consent or requests to stop receiving them.
Customer account: data will be retained while the account remains active and, subsequently, for the periods necessary to comply with legal obligations or address possible liabilities.
The AEPD establishes that information must be provided about the retention period or, where it is not possible to determine a specific period, the criteria used to determine it.
9. User rights
Users may exercise the rights recognised under data protection legislation.
In particular, where applicable, users may request:
Access: to know what personal data we process about them.
Rectification: to request the correction of inaccurate or incomplete data.
Erasure: to request the deletion of their data where the legal requirements are met.
Objection: to object to certain processing of their data.
Restriction of processing: to request that the processing of their data be restricted in certain circumstances.
Data portability: to receive their data or request its transmission to another data controller where applicable.
Furthermore, where processing is based on consent, users may withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal. These rights and the possibility of withdrawing consent form part of the information required by the GDPR.
To exercise your rights, you may contact:
BiO-Oxidantes S.L.
Carretera La Estación 127
04600 Huércal-Overa, Almería, España
info@cdslab.es
Where necessary to verify the identity of the applicant, appropriate additional information may be requested for this purpose.
If you believe that the processing of your personal data does not comply with applicable legislation, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
Spanish Data Protection Agency
10. Purchases, payments and shipments
To make a purchase from CDSLAb, certain personal data must be provided.
This data will be used to manage the order, confirm the transaction, issue the invoice, manage payment, prepare the order and arrange its transport and delivery.
Where necessary, the data required for delivery may be provided to the corresponding transport company or logistics operator.
Payment service providers may process the data necessary to process transactions in accordance with their own legal obligations and applicable terms.
11. Forms and contact
When a user contacts CDSLAb through a form, email or another available channel, their data will be processed in order to respond to and manage their request.
Users should only provide the data necessary to manage their enquiry.
Where a form requests consent for an additional purpose, that purpose will be specifically indicated.
12. Commercial communications
CDSLAb may send commercial communications where there is a legal basis that permits it.
Where such communications are based on consent, users may withdraw their consent at any time.
In addition, electronic commercial communications sent by CDSLAb will, where applicable, provide a mechanism that allows users to stop receiving such communications.
13. Cookies and similar technologies
CDSLAb uses cookies and other similar technologies to enable the website to function and, where applicable, to obtain information about its use.
Cookies requiring consent will not be used until the user has made the corresponding choice through the consent management system.
Users can accept, reject or modify their preferences through the cookie management panel available on the website.
Detailed information about cookies, their purposes, duration and providers can be found in the Cookie Policy.
14. Analítica web
CDSLAb may use measurement and analytics tools to obtain statistical information about how the website is used and to improve its operation.
Where these tools involve the processing of personal data or the use of technologies requiring consent, their use will be subject to the preferences selected by the user.
Further information is also provided in the Cookie Policy.
15. Social media
CDSLAb may maintain profiles on social networks and other digital platforms.
When a user interacts with these profiles, the processing of their data will be subject both to this Privacy Policy, where applicable to CDSLAb, and to the policies and terms of the corresponding platform.
Users should be aware that certain information shared publicly on social networks may be visible to other users.
CDSLAb will process interactions received through its profiles in order to manage communications and maintain its relationship with users and customers.
16. Minors’ data
The products and services offered through CDSLAb are not specifically intended for minors.
Minors should not provide personal data or make purchases where they do not have the legal capacity or authorisations required under applicable legislation.
If BiO-Oxidantes S.L. becomes aware that personal data relating to a minor has been provided contrary to applicable legislation, it will take appropriate reasonable measures.
17. Data security
BiO-Oxidantes S.L. will implement appropriate technical and organisational measures, taking into account the nature, scope, context and purposes of the processing and the risks involved.
These measures are intended to protect personal data against destruction, loss, alteration, unauthorised disclosure or access.
Applicable legislation requires security measures to be adapted to the risks of the processing. Therefore, this Privacy Policy does not guarantee absolute security.
18. Automated decision-making
As a general rule, CDSLAb does not make decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect them.
If processing of this nature is implemented in the future, users will be provided with the information required by applicable legislation.
19. Changes to the Privacy Policy
BiO-Oxidantes S.L. may amend this Privacy Policy where necessary to adapt it to legislative, technical or organisational changes or changes relating to the services offered.
The applicable version will be the version published on www.cdslab.es at any given time.
20. Contact
For any questions relating to this Privacy Policy or the processing of personal data, please contact:
BiO-Oxidantes S.L.
CDSLAb
Carretera La Estación 127
04600 Huércal-Overa, Almería, España
Email: info@cdslab.es