Privacy policy
Last updated: 12 November 2026.
This policy explains how we process the personal data we collect through www.afilaboratories.com, in accordance with the GDPR (Regulation (EU) 2016/679) and the Spanish Organic Law 3/2018 on Data Protection and the Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Controller: Aplicaciones Farmacéuticas Industriales, S.L.
- Tax ID (NIF): B60570884
- Registered address: C/ Mas Pujol, 36, Pol. Ind. Congost, 08520 Les Franqueses del Vallès (Barcelona), Spain
- Contact: info@afilaboratories.com · +34 938 497 313
2. What data we process
- Contact and quote request form: name, company or brand, email address, telephone number, product type, estimated volume and any project information you send us.
- Email and telephone: the data you provide when you write to us or call us.
- Browsing data: only if you accept them in the cookie banner, statistical data on the use of the Website via Google Analytics (see the Cookie policy).
Please do not request or send health data or other special categories of data through the Website.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry or quote request and preparing a proposal | Taking steps prior to entering into a contract at the data subject’s request (art. 6.1.b GDPR) and your consent when submitting the form (art. 6.1.a) |
| Managing the business relationship if we end up working together | Performance of the contract (art. 6.1.b) and compliance with legal obligations (art. 6.1.c) |
| Maintaining professional contact with contact persons at client or prospective client companies | Legitimate interest (art. 6.1.f GDPR and art. 19 LOPDGDD) |
| Measuring use of the Website for statistical purposes | Your consent (art. 6.1.a), which you may withdraw at any time |
We do not make automated decisions or create profiles that produce legal effects concerning you.
4. Retention period
We keep enquiry data for as long as necessary to deal with them and, if no business relationship begins, for a maximum of two years. If we enter into a contract, we will keep the data for the duration of the relationship and, thereafter, for the statutory limitation periods (for example, six years for commercial and accounting records). Google Analytics statistical data are kept for 14 months.
5. Recipients and processors
We do not disclose your data to third parties unless required by law. To provide the service, some suppliers access the data as processors, under a contract and with safeguards in accordance with the GDPR:
- Vercel Inc. (Website hosting, USA).
- FormSubmit (formsubmit.co), which forwards the forms you send us to our email.
- cdmon (10DENCEHISPAHARD, S.L., Spain), our email provider.
- Google Ireland Ltd. / Google LLC (Google Analytics, only with your consent, and Google Fonts to display the Website’s typefaces).
Some of these suppliers may process data outside the European Economic Area. In that case, the transfers are covered by the EU–US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by writing to info@afilaboratories.com or by post to our registered address, stating the right you are exercising. If you consider that we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data: the Website uses HTTPS encryption and access to information is limited to the staff who need it.
8. Changes to this policy
We may update this policy to reflect legal or service changes. We will always publish the current version on this page, together with the date it was last updated.