Privacy policy
Controller
DULASPORT S.L., Calle Creativitat 4B, 08850 Gavá (Barcelona), Spain, NIF B75932913 is the controller of your personal data. Contact: contacto@bioactivelabs.eu.
Purposes and legal bases
- Processing and delivering your orders and after-sales service — performance of the contract (Art. 6(1)(b) GDPR).
- Accounting and tax obligations — legal obligation (Art. 6(1)(c)).
- Marketing communications and newsletter — your consent (Art. 6(1)(a)), withdrawable at any time.
- Audience measurement, advertising and personalisation — your consent through the cookie banner.
- Market research, statistics and fraud prevention — legitimate interest (Art. 6(1)(f)).
Recipients
We use processors that handle data on our behalf: Shopify (store, payments and hosting), Klaviyo (email and automation), Google (Ads, Analytics and Merchant Center), Meta (advertising pixel), OpenAI (ChatGPT Ads pixel), TikTok, Judge.me (customer reviews) and the carriers handling delivery. Some of these processors may handle data outside the European Economic Area, on the basis of the European Commission's standard contractual clauses.
Retention
Order-related data is kept for as long as accounting and tax obligations require. Contact data used for marketing is kept until you withdraw your consent.
Your rights
You may exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to contacto@bioactivelabs.eu. You may also withdraw consent at any time and lodge a complaint with a supervisory authority — in Spain, the AEPD; otherwise the authority of your country of residence.
