Privacy Policy - Arquea Biological Innovations

Effective date: 31st August 2025

TITULARITY

In compliance with the obligations established in Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights and article 10 of Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce, it is stated that this page corresponds to the entity Arquea Biological Innovations SL.

Who is responsible for the processing of your data?

Arquea Biological Innovations SL with address at Calle Estibadores, 6 (Edificio Pharo), 33490 Avilés (Asturias) and with VAT number: B70809892 registered in the Mercantile Registry of Asturias.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top.

WEB OR EMAIL CONTACTS

You can contact the email for any communication. Contact email: contact@arquea.bio

In compliance with the General Data Protection Regulation (GDPR) and applicable Spanish legislation, we inform you of the following:

1. What data do we collect through the Website?

Browsing Data: We may process your IP address, operating system, browser type, and the duration of your visit anonymously.
Contact Form Data: If you provide data through our contact form, we will collect personal information to identify you and respond to your inquiry if necessary.

2. How do we collect your data?

We collect data directly from you when you:

Voluntarily complete a customer survey or provide feedback via email.
Use or view our website via your browser’s cookies.

3. For what purposes will we process your personal data?

General Users:

Answer your queries, requests, or petitions.
Manage the requested service, respond to your request, or process your petition.
Communicate with you electronically regarding your request.
Send commercial or event information electronically, provided you have given express authorization.
Conduct analyses and improvements on the website, products, and services. Enhance our commercial strategy.

Suppliers:

Communicate with you electronically regarding your request.
Send commercial or event information electronically, provided you have given express authorization.
Manage administrative, communication, and logistics services performed by the Data Controller.
Handle billing and related transactions.
Ensure compliance with tax obligations and manage recovery processes.

Job Applicants:

Organize recruitment processes for hiring employees.
Invite you for interviews and evaluate your application.
Inform you that after one year from receiving your CV, we will proceed to its secure destruction.

Claims and Complaints:

Collect your complaint or claim to process it accordingly.
Comply with legal obligations established by current legislation related to professional associations.
Process your request, provided you have given express consent by submitting the form and accepting the privacy policy.

4. What is the legitimacy for the processing of your data?

General Users: Your acceptance and consent: By completing a form and clicking the submit button, you express your consent to the processing of your data as described.
Suppliers: Acceptance of a contractual relationship or, failing that, your consent when contacting us or offering products by any means.
Job Applicants: Your unequivocal consent when sending your CV.
Claims and Complaints: Compliance with legal obligations and your consent when submitting the form.

5. Will we make communications by electronic means?

Communications will be made to manage your request, using the contact information you have provided.
Commercial communications will only be sent if you have expressly authorized them.

6. What security measures do we apply?

We have adopted an optimal level of protection for the personal data we handle, implementing all means and technical measures at our disposal according to the state of technology to prevent loss, misuse, alteration, unauthorized access, or theft of personal data.

Specifically, we apply measures such as: encryption of data in transit (SSL/TLS), regular backups, strong access controls, and pseudonymization where appropriate, to ensure the confidentiality, integrity, and availability of your data.

7. To which recipients will your data be communicated?

Your personal data will not be transferred or consulted by third parties. All processing and storage of your data takes place within the European Union (EU).

8. What rights do you have?

You have the right to:

Access: To know if we are processing your data. And to access your personal data.
Rectification: To request the rectification of inaccurate data.
Deletion: To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
Limitation: To request the limitation of processing in certain cases.
Portability: To request data portability, provided in a structured format, commonly used, and machine-readable. If you prefer, we can send them to a new data controller you designate.
Opposition: To object to the processing of your data in certain circumstances.
Withdrawal of Consent: To withdraw consent for any processing for which you have consented, at any time.
Complaint: To file a complaint with the Spanish Data Protection Agency or the competent authority if you believe we have not addressed your concerns appropriately.

If you modify any data, please inform us to keep them updated.

To exercise any of these rights, you may use forms prepared by the Spanish Data Protection Agency or third parties. These forms must be signed electronically or accompanied by a photocopy of your ID. Please send your signed request to our contact email: contact@arquea.bio