Biohealth Dental Lab S.L.

Privacy Policy

This policy aims to inform data subjects about the personal data processing activities carried out by Biohealth Dental Lab S.L. through this website, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD).

Last updated: January 2026

1

Data Controller

Company name Biohealth Dental Lab S.L. (hereinafter, BDL)
Tax ID (CIF) B67823864
Address CV70, CC Urbania L20, 03502 Benidorm, Alicante, Spain
Phone +34 613 054 044
Email info@bdslabdental.com
Website https://bdslabdental.com

BDL has not appointed a Data Protection Officer, as none of the circumstances requiring mandatory designation under Article 37 of the GDPR are applicable.

2

Purposes of Processing

Website users and visitors

  • Responding to information, quote or contact requests received via the web form, email or WhatsApp.
  • Sending commercial communications (promotions, laboratory news) to those who have given their express consent by ticking the corresponding box.
  • Analysing browsing behaviour for statistical and website improvement purposes using Google Analytics (anonymised / pseudonymised data).
  • Detecting and preventing potential cyberattacks or fraudulent use of the website.
  • Complying with applicable legal obligations.
  • Protecting and exercising BDL's rights or responding to third-party claims.

Healthcare professionals and partner clinics

  • Managing the business relationship: case reception, delivery date confirmation and invoicing.
  • Sending communications related to the status of orders or work in progress.
  • Managing the customer database and commercial relationship tracking, potentially using the HubSpot CRM platform (data processor).
  • Sending commercial communications to existing customers about services or materials of interest, under the legitimate interest provided in Article 21.2 of the LSSI.

Job applicants

  • Managing and evaluating submitted applications.
  • Communicating the status of the selection process.
3

Legal Basis for Processing

Website users

  • Consent of the data subject (Art. 6.1.a GDPR): for sending commercial communications and using analytics or marketing cookies. Withdrawal of consent does not affect the lawfulness of prior processing.
  • Legitimate interest (Art. 6.1.f GDPR): for cybersecurity analysis and protection of BDL's systems.
  • Compliance with legal obligations (Art. 6.1.c GDPR): when required by applicable law.

Partner clinics and professionals

  • Performance of a contract or pre-contract (Art. 6.1.b GDPR): for managing the business relationship.
  • Legitimate interest (Art. 6.1.f GDPR): for sending communications to existing customers about services of interest and for using HubSpot CRM for internal management.
  • Compliance with legal obligations (Art. 6.1.c GDPR).

Job applicants

  • Consent of the data subject (Art. 6.1.a GDPR): by voluntarily submitting the CV.
4

Retention Periods

Personal data will be retained for as long as necessary to fulfil the purposes for which they were collected. Once they are no longer necessary, they will be blocked and made available to public authorities, courts or the public prosecutor during the applicable statutory limitation periods, after which they will be permanently deleted.

As a guideline, the following retention periods apply:

  • Contact or information requests: until the request is resolved and, where applicable, for the limitation period of potential liabilities (5 years).
  • Customers and partners: for the duration of the commercial relationship and, once terminated, for the limitation periods applicable to commercial and tax obligations (up to 10 years under Spanish tax law).
  • Commercial communications: until consent is withdrawn or the right to object is exercised.
  • CVs and applications: maximum 1 year from receipt, unless consent is given for a longer period.
5

Automated Decisions and Profiling

BDL does not make automated decisions or carry out profiling as defined in Article 22 of the GDPR. Google Analytics is used in an anonymised or pseudonymised manner and is not linked to individual decisions that produce legal effects or significantly affect data subjects.

6

Recipients and Data Processors

BDL does not share personal data with third parties, except as required by law (courts, law enforcement, tax authorities or other competent authorities) or when strictly necessary for service delivery.

As data processors, BDL may use the following technology service providers, with whom data processing agreements are in place:

  • Google LLC (Google Analytics): web analytics tool. Data is processed in pseudonymised form. More information at policies.google.com/privacy.
  • HubSpot Inc. (CRM): customer relationship management platform used for commercial activity tracking. More information at legal.hubspot.com/privacy-policy.
  • Automattic Inc. (WordPress / web hosting): website platform and hosting.
7

International Data Transfers

Some of the data processors mentioned above (Google LLC, HubSpot Inc.) are based in the United States. These transfers are covered by Standard Contractual Clauses approved by the European Commission or the EU-US Data Privacy Framework, in accordance with Article 46 of the GDPR.

BDL does not carry out any other international data transfers.

8

Rights of Data Subjects

You may exercise the following rights at any time, free of charge:

  • Access: to know what personal data BDL holds about you.
  • Rectification: to request correction of inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): to request deletion of your data when it is no longer necessary for the purposes for which it was collected.
  • Restriction of processing: to request limitation of the use of your data in certain circumstances.
  • Objection: to object to the processing of your data where the legal basis is legitimate interest.
  • Portability: to receive your data in a structured, commonly used format when processing is based on consent or contract and carried out by automated means.
  • Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
  • Not to be subject to automated decisions: where applicable.

To exercise these rights, please write to info@bdslabdental.com or to the postal address in section 1, enclosing a copy of your ID or equivalent document.

If you consider that your rights have not been duly attended to, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), the competent supervisory authority in Spain.

If you no longer wish to receive commercial communications, you may unsubscribe at any time by emailing info@bdslabdental.com with the subject "UNSUBSCRIBE".

9

Accuracy of Data

The data subject warrants that the information provided is true, accurate, complete and up to date, and undertakes to notify BDL of any changes through the available channels. BDL shall not be liable for any damages arising from failure to comply with this obligation.

If you provide data about third parties, you declare that you have their consent and undertake to inform them of the content of this policy, releasing BDL from any liability in this regard.

10

Cookie Policy

This website uses first- and third-party cookies. You can find detailed information about the types of cookies used, their purpose and how to manage them in our Cookie Policy, accessible from the footer.

When you access the website, a cookie notice is displayed allowing you to accept, reject or configure their use. You may modify your preferences at any time via the "Manage cookies" link in the footer.

11

Amendments and Updates

BDL reserves the right to amend or update this privacy policy to adapt it to legislative changes, Spanish Data Protection Agency decisions or modifications to the website. We recommend reviewing it periodically.

If you have any questions, please contact BDL at info@bdslabdental.com.