Privacy Policy

  1. Data Controller

In compliance with the provisions of Regulation (EU) 2016/679, General Data Protection Regulation (“GDPR”), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”), and any other applicable data protection legislation, users of this Website are hereby informed that the personal data provided will be processed by:

  • Data Controller: LABORATORIOS BELLOCH, S.A.
  • Tax Identification Number (CIF): A-46313144
  • Registered Office: C/ Ciudad de Sevilla No. 5, Fuente del Jarro Industrial Estate, 46988 Paterna (Valencia), Spain
  • Contact email: rgpd@belloch.com
  • Telephone: +34 961 340 062

Hereinafter, LABORATORIOS BELLOCH, S.A. shall be referred to as the “Owner”.

  1. Purpose of this Privacy Policy

This Privacy Policy provides information on the processing of personal data collected through the Website, as well as on the rights available to users.

Personal data shall be processed in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality established under the GDPR.

  1. What personal data do we process?

Depending on how the user interacts with the Website, the Owner may process the following categories of data:

  • identification data (first name and surname);
  • contact details (email address and, where applicable, telephone number);
  • data provided through forms or communications sent to the Owner;
  • data provided through newsletter subscriptions;
  • browsing data obtained through cookies or other similar technologies, in accordance with the Cookie Policy.

The user guarantees that the data provided is truthful, accurate and up to date.

  1. How do we obtain personal data?

Personal data is provided directly by the user through:

  • forms available on the Website;
  • newsletter subscriptions;
  • sending emails;
  • browsing the Website when the user accepts the use of cookies;
  • any other communication voluntarily initiated with the Owner.
  1. For what purposes do we process personal data?
Purpose Legal basis
To respond to enquiries, requests for information or communications submitted by the user. Application of pre-contractual measures or legitimate interest, depending on the nature of the enquiry.
To manage newsletter subscriptions and send commercial communications regarding the Owner’s brands, products, promotions, news or events. Newsletter management may be carried out through the Intuit Mailchimp platform or any platform that may replace it in the future. Consent of the data subject.
To ensure the proper functioning, security and improvement of the Website, as well as to obtain usage statistics, analyse browsing activity and measure the effectiveness of advertising campaigns through tools such as Google Analytics, Meta, LinkedIn or TikTok, where applicable. Legitimate interest in relation to technical cookies and user consent for all other cookies.
To comply with the legal obligations applicable to the Owner and respond to requests from the competent authorities. Compliance with a legal obligation.

The user may withdraw their consent to receive commercial communications at any time by using the unsubscribe link included in each newsletter or by contacting the Owner.

  1. How long do we retain personal data?

Personal data shall only be retained for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the periods established by applicable legislation in order to address any potential legal liabilities.

Processing Retention period
Enquiries and requests for information For as long as necessary to manage and respond to the enquiry and, thereafter, for the applicable statutory limitation periods.
Newsletter subscription Until the user withdraws their consent or requests to unsubscribe from the service.
Browsing data For the periods established in the Cookie Policy and, where applicable, until the withdrawal of the consent given.
Compliance with legal obligations For the periods established by applicable legislation.

Once these periods have elapsed, the data shall be deleted or anonymised where possible.

  1. Who do we share personal data with?

Personal data may only be disclosed where necessary for the provision of services offered through the Website or to comply with legal obligations.

In particular, the following parties may have access to the data:

  • authorised personnel of the Owner;
  • technology service providers acting as data processors (for example, web hosting, IT maintenance, web analytics, email marketing platforms or digital marketing services);
  • public authorities, courts and other competent authorities where there is a legal obligation to do so.

All service providers who have access to personal data shall do so subject to the appropriate security measures and data processing agreements required under Article 28 of the GDPR.

The Owner does not sell or transfer personal data to third parties for commercial purposes.

  1. International Data Transfers

Some of the technology service providers used by the Owner, such as web analytics services, social media platforms or newsletter management services, may process personal data outside the European Economic Area.

Where this occurs, the Owner shall ensure that such transfers are carried out in accordance with Articles 44 et seq. of the GDPR, using the appropriate safeguards provided for under applicable legislation, such as European Commission adequacy decisions or Standard Contractual Clauses.

For further information regarding the processing carried out by these providers, users may consult their respective privacy policies.

  1. What rights can users exercise?

Users may exercise, at any time, their rights of access, rectification, erasure, objection, restriction of processing, data portability and withdrawal of consent, in accordance with the terms established by applicable legislation.

To exercise these rights, users may contact the Owner at the email address indicated in this Privacy Policy.

Furthermore, if users consider that the processing of their personal data does not comply with applicable legislation, they may lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the competent supervisory authority.

  1. Minors

The Website is intended for the general public and is not specifically aimed at children under fourteen (14) years of age.

The Owner does not knowingly collect personal data from children under that age. If the Owner becomes aware that personal data belonging to a minor has been provided without the appropriate authorisation, it shall proceed to delete such data as soon as possible.

  1. Security Measures

The Owner implements appropriate technical and organisational measures to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access, in accordance with applicable legislation.

However, users should be aware that security measures on the Internet are not completely invulnerable.

  1. Social Media

The Website may include links to the Owner’s official profiles on Facebook, Instagram, LinkedIn, YouTube and TikTok.

The user’s interaction with such platforms shall be governed by the privacy policies of their respective providers, which shall act as independent data controllers with regard to the processing of data carried out through their services.

  1. Automated Decision-Making

The Owner does not make decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect the user, within the meaning of Article 22 of Regulation (EU) 2016/679.

  1. Amendments to the Privacy Policy

The Owner may amend this Privacy Policy in order to adapt it to regulatory changes, guidance or criteria issued by supervisory authorities, or changes to the processing activities carried out through the Website.

The version published at any given time shall be the applicable version as of its date of publication.