Privacy Policy

Disit Biotech is fully committed to complying with Spanish and European regulations on the protection of personal data. We guarantee full adherence to the obligations established under the General Data Protection Regulation (GDPR) (EU) 2016/679, of April 27, and Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In compliance with these regulations, we inform users that the use of our website may require the collection of certain personal data through contact forms or emails. These data will be processed by Disit Biotech, the data controller, whose details are:

Data Controller Identification

Company Name: Disit Biotech, S.L.
Trade Name: Disit Biotech
Tax ID (CIF): [Include if available]
Registered Address: Hospital Universitario de, Cam. del Molino, 2, 28942 Fuenlabrada, Madrid
Phone: 676 00 24 96
Email: contact@disitbiotech.com
Website Domain: [Include if available]
Business Activity: Biotechnology and Pharmaceutical Research

Collection and Processing of Personal Data

Personal data refers to any information related to an individual: name, email, address, phone number, ID/NIE, etc. Additionally, when users visit our website, certain information is stored automatically for technical reasons, such as the IP address assigned by the user’s Internet service provider.

As the data controller, Disit Biotech must inform users of the collection of personal data that may occur through email communication or by completing forms available on the website.

We only collect the necessary data required to provide the requested service or to adequately respond to user inquiries. The collected data is limited to basic identification information and does not include sensitive or special category data. Under no circumstances will data be used for purposes other than those for which they were collected.

Contact Forms / Emails

Purpose: To respond to user inquiries submitted through our contact forms.
Legal Basis: User consent, which may be withdrawn at any time.
Data Sharing: Personal data may be processed through third-party servers that act as data processors.

Newsletter Subscription Forms

Purpose: To send communications, including commercial messages, that may be of interest to users based on the website’s content. As per LSSICE, Disit Biotech commits to identifying all commercial communications. Messages sent to existing customers to maintain contractual relationships are not considered commercial communications.
Legal Basis: User consent, which may be withdrawn at any time.
Data Sharing: Personal data may be processed through third-party servers such as MailChimp, SendGrid, or other email marketing providers.

Minors

Only individuals over the age of 14 may provide personal data on this website. Under LOPD and GDD, parental or guardian consent is required for processing the data of minors under 14 years old.

Additionally, only individuals over the age of 18 may contract services through this website. If a minor under 18 wishes to use our services, they must provide parental or legal guardian consent, unless they are legally emancipated.

Security Measures

Disit Biotech has implemented all available technical and organizational security measures to prevent data loss, misuse, alteration, unauthorized access, or theft. These measures ensure the confidentiality, integrity, and security of stored information in compliance with current data protection laws.

The website also has SSL encryption, ensuring that personal data is securely transmitted via contact and registration forms.

Accuracy of the Data

Users confirm that all data provided is accurate and truthful and commit to keeping it updated. Users are solely responsible for any disputes or legal issues that may arise due to false or incorrect data.

To ensure updated and correct information, users must notify Disit Biotech of any changes to their personal data.

Data Sharing

Disit Biotech does not share personal data with third parties except in cases where:

Legal obligations require it (e.g., tax authorities, labor inspections, etc.).
It is strictly necessary to provide a contracted service.

Data may be shared with:

IT service providers (e.g., hosting, cloud storage).
Payment service providers (e.g., banks, payment gateways).
Shipping and courier services (for order delivery).
Third-party service providers operating on our behalf (e.g., accounting, legal, or tax consulting services).

All data transfers will be conducted with strict confidentiality and legal safeguards such as confidentiality agreements or adherence to third-party privacy policies.

Users may refuse data sharing requests in writing via the contact details provided above.

User Rights

According to LOPD and GDPR, users may exercise the following rights over their personal data:

Right of Access – Obtain confirmation of whether personal data is being processed and request access to such data.
Right to Rectification – Request corrections if data is inaccurate or incomplete.
Right to Erasure (“Right to be Forgotten”) – Request deletion of unnecessary or excessive data.
Right to Restriction of Processing – Limit data processing to specific legal purposes (e.g., for defending legal claims).
Right to Object – Object to processing for marketing or automated decision-making purposes.
Right to Data Portability – Request a structured, commonly used, and machine-readable format of personal data for transfer to another entity.
Right to Withdraw Consent – Withdraw consent at any time without affecting the lawfulness of prior processing.

Users may exercise these rights by submitting a written request along with a valid ID document (e.g., passport, national ID) to:

Email: contact@disitbiotech.com
Postal Address: Hospital Universitario de, Cam. del Molino, 2, 28942 Fuenlabrada, Madrid

If a user believes their data is being misused, they can file a complaint with the Spanish Data Protection Agency (AEPD) or the relevant supervisory authority.

Data Retention

Personal data collected through contact forms or emails will be stored only as long as necessary to respond to inquiries.

For customers, personal data will be stored until the contractual relationship ends. Retention periods include:

4 years – Social security and employment-related obligations.
5 years – Personal legal claims (Spanish Civil Code, Art. 1964).
6 years – Business records (Commercial Code, Art. 30).
10 years – Money laundering prevention regulations.
Indefinite retention – Anonymous and aggregated data.

Newsletter subscribers’ data will be retained until consent is withdrawn.

Confidentiality

All information provided by users will be treated confidentially. It will not be used for purposes other than those described in this privacy policy. Disit Biotech commits to protecting user data and not disclosing information about inquiries or contractual relationships.

Policy Validity

This Privacy Policy was last updated on January 14, 2024, and may change due to legal updates or changes in business operations. Users should review this document periodically to stay informed of their rights and obligations.