Privacy Policy

PRIVACY POLICY

Below, we inform you about the Privacy Policy that will apply in those cases where the interested party, through navigation on the website www.superhealth-laboratories.com (the "Website"), provides us with their personal data. This Privacy Policy will inform about the destination of the personal data you provide us, including those we collect by virtue of browsing our Website.

IDENTIFICATION OF THE DATA CONTROLLER

Controller: SUPERHEALTH PRODUCTS, S.L. ("SUPERHEALTH");
Registered Office: C/ Pintor Moreno Carbonero, 18, 28028, Madrid;
Tax ID: B-75278853;
Public Registry: Registered in the Commercial Registry of Madrid, Sheet M831265;
Email: hello@superhealth-laboratories.com;
Phone: + 34 626 84 59 03.

INFORMATION AND CONSENT

In accordance with the provisions of the General Data Protection Regulation (EU) 679/2016 ("GDPR") and Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights ("LOPDGDD"), by accepting this Privacy Policy, the web user (the "Data Subject") GIVES THEIR CONSENT informed, express, free and unequivocal to process the personal data collected through the Website, either through forms enabled for such purposes or through information collected by cookies.

Likewise, the Data Subject consents that this data be processed by the Controller to provide their services applying the organizational and security measures required by the GDPR.

All personal data requested from the Data Subject on the Website is mandatory, and it is not possible to provide the service without the corresponding data processing by the Controller. However, browsing the Website is free.

The Data Subject guarantees that the personal data provided to the Controller are true and accurate, so SUPERHEALTH will not be responsible for any incident arising from the inaccuracy or falseness of the information provided by Data Subjects, beyond the possibility that the Data Subject has to exercise their right of rectification.

In the event that the Data Subject provides us with data from third parties, as data controller or processor, they will be responsible for complying with all applicable data protection regulations. In addition, the Data Subject guarantees that they have obtained all legally necessary consents, authorizations and/or approvals before including personal data from third parties on the Website.

SOURCE, PURPOSE AND LEGAL BASIS

The personal data of the Data Subject, or of third parties that are transferred by the Data Subject, will be processed confidentially and will be incorporated into the corresponding processing activity of the Controller.

The processing activities carried out by the Controller include:

ACTIVITY: DATA SUBJECT CONTACT:
• SOURCE: From the Data Subject themselves via email available on the SUPERHEALTH Website.
• LEGAL BASIS: General Data Protection Regulation, in particular: Art. 6.1 b) GDPR - Execution of a contract and/or application of pre-contractual measures at the request of the data subject
• PROCESSING PURPOSES: Attend and respond to queries requested by the Data Subject
• COLLECTIVE: Natural or legal persons.
• DATA CATEGORY: Email; any other personal data that the Data Subject voluntarily provides through their query.
• RECIPIENTS: No transfer to third parties is foreseen, except legal obligation.
• INTERNATIONAL TRANSFER: No international transfer of data is foreseen.
• RETENTION PERIODS: Data will be retained for the period strictly necessary to fulfill the purpose for which it was collected, unless the Controller must maintain it due to legal obligation or to defend itself in the event of a claim.

ACTIVITY: DATA SUBJECT CONTACT VIA WHATSAPP:
• SOURCE: From the Data Subject themselves through calls to the phone number available on the SUPERHEALTH Website.
• LEGAL BASIS: General Data Protection Regulation, in particular: Art. 6.1 b) Execution of a contract and/or application of pre-contractual measures at the request of the Data Subject.
• PROCESSING PURPOSES: Attend and respond to queries requested by the Data Subject.
• COLLECTIVE: Natural or legal persons.
• DATA CATEGORY: Phone number; any other personal data that the Data Subject voluntarily provides through their query.
• RECIPIENTS: No transfer to third parties is foreseen, except legal obligation.
• INTERNATIONAL TRANSFER: No international transfer of data is foreseen.
• RETENTION PERIODS: Data will be retained for the period strictly necessary to fulfill the purpose for which it was collected, unless the Controller must maintain it due to legal obligation or to defend itself in the event of a claim.

ACTIVITY: DATA SUBJECT CONTACT VIA PHONE
• SOURCE: From the Data Subject themselves through calls to the phone number available on the SUPERHEALTH Website.
• LEGAL BASIS: General Data Protection Regulation, in particular: Art. 6.1 b): Execution of a contract and/or application of pre-contractual measures at the request of the Data Subject.
• PROCESSING PURPOSES: Attend and respond to queries requested by the Data Subject.
• COLLECTIVE: Natural or legal persons.
• DATA CATEGORY: Phone number; any other personal data that the Data Subject voluntarily provides orally through their query.
• RECIPIENTS: No transfer to third parties is foreseen, except legal obligation.
• INTERNATIONAL TRANSFER: No international transfer of data is foreseen.
• RETENTION PERIODS: Data will be retained for the period strictly necessary to fulfill the purpose for which it was collected, unless the Controller must maintain it due to legal obligation or to defend itself in the event of a claim.

ACTIVITY: SENDING COMMERCIAL COMMUNICATIONS AND NEWSLETTER TO THE DATA SUBJECT
• SOURCE: From the Data Subject themselves by indicating their email address in a specific section for these purposes.
• LEGAL BASIS: General Data Protection Regulation, in particular: Art. 6.1 a): Consent from the Data Subject.
• PROCESSING PURPOSES: Inform the Data Subject electronically about content of interest linked to products offered by SUPERHEALTH.
• COLLECTIVE: Natural or legal persons.
• DATA CATEGORY: Email.
• RECIPIENTS: No transfer to third parties is foreseen, except legal obligation.
• INTERNATIONAL TRANSFER: No international transfer of data is foreseen.
• RETENTION PERIODS: Data will be retained for the period strictly necessary to fulfill the purpose for which it was collected, unless the Controller must maintain it due to legal obligation or to defend itself in the event of a claim.

ACTIVITY: DATA SUBJECT REGISTRATION ON THE WEBSITE
• SOURCE: From the Data Subject themselves through the form provided on the Website.
• LEGAL BASIS: General Data Protection Regulation, in particular: Art. 6.1 b): Application of pre-contractual measures at the request of the Data Subject.
• PROCESSING PURPOSES: Process the Data Subject's request to register for the first time as a SUPERHEALTH user or log in.
• COLLECTIVE: Natural or legal persons.
• DATA CATEGORY: Name, surname, email.
• RECIPIENTS: No transfer to third parties is foreseen, except legal obligation.
• INTERNATIONAL TRANSFER: No international transfer of data is foreseen.
• RETENTION PERIODS: Data will be retained for the period strictly necessary to fulfill the purpose for which it was collected, unless the Controller must maintain it due to legal obligation or to defend itself in the event of a claim. When the Data Subject has registered on the Website, they have become a customer. Therefore, given that the limitation period for contractual liability expires after five (5) years, the Data Subject's data may be retained for a period of five (5) years from when the contractual relationship between them ended. In the event that the Data Subject decides to exercise their right to erasure of this data, SUPERHEALTH will block it, but will not delete it until five (5) years have elapsed.

ACTIVITY: SERVICE PROVISION
• SOURCE: From the Data Subject themselves through the Website when placing an order for any of the products offered on it by SUPERHEALTH.
• LEGAL BASIS: General Data Protection Regulation, in particular: Art. 6.1 b): Execution of a contract to which the Data Subject is party.
• PROCESSING PURPOSES: Attend to the Data Subject's request to acquire products offered by SUPERHEALTH on the Website, including their shipment to the address indicated by the Data Subject.
• COLLECTIVE: Natural or legal persons.
• DATA CATEGORY: Identifying data: name, surname. Contact data: complete postal address, email, mobile phone.
• RECIPIENTS: Personal data may be communicated to the transport company that will be responsible for shipping the products whose acquisition has been requested by the Data Subject. Said transport company(ies) will act as data processors, limiting themselves to facilitating the delivery of products.
• INTERNATIONAL TRANSFER: No international transfer of data is foreseen.
• RETENTION PERIODS: Data will be retained for the period strictly necessary to fulfill the purpose for which it was collected, unless the Controller must maintain it due to legal obligation or to defend itself in the event of a claim.

DATA SUBJECT'S DATA

The Data Subject guarantees that they are over eighteen (18) years of age and that the data provided are true, accurate, complete and updated, being responsible for any damage or prejudice, direct or indirect, that could be caused as a consequence of non-compliance with such obligation, beyond the possibility that the Data Subject has to exercise their right of rectification.

In the event that personal data belongs to a third party, the Data Subject guarantees that they have informed said third party of the aspects contained in this document and obtained their authorization to provide their data to the Controller for the aforementioned purposes.

The Controller cannot guarantee the absolute invulnerability of systems, therefore, it assumes no responsibility for damages arising from alterations that third parties may cause to computer systems, electronic documents or files.

COOKIES POLICY

In accordance with the provisions of the GDPR and Law 34/2002, on Information Society Services, all personal data obtained through cookies during the use of the Website will be processed in accordance with the provisions of the Cookies Policy.

EXERCISE OF RIGHTS

In accordance with the provisions of the GDPR, we inform you that you can exercise your rights of access, rectification, erasure, opposition, data portability and limitation of processing directly before the Controller.

For the exercise of such rights, the Data Subject may send a message to that effect, indicating their identifying data, to the following email address: dpo@superhealth-laboratories.com.

In the event that the Data Subject considers that the request for the exercise of their rights has not been properly attended to by the Controller, they may also exercise their rights by filing a complaint with the Spanish Data Protection Agency.

ACCEPTANCE OF THE PRIVACY POLICY

The Data Subject ACKNOWLEDGES AND ACCEPTS HAVING READ AND UNDERSTOOD this Privacy Policy whose content constitutes the entire agreement between the Data Subject and the Controller regarding the use and processing of their personal information. The Data Subject expressly accepts to be bound by the terms of this Privacy Policy, in its full extent and scope, without excepting any of its provisions.

Express acceptance of this Privacy Policy will be essential when the Data Subject registers through the Website by filling out the corresponding registration form.

2025 © All rights reserved SUPERHEALTH PRODUCTS, S.L.
Last update: September 2025

Privacy Policy