PRIVACY POLICY

INTRODUCTION

Your privacy is important to us. Through this document, we explain what data we collect from users, how we use it, and for what purposes, among other indications.

For your knowledge, we will never request more information than necessary for the required services, we will never share it with third parties except in cases of legal obligation or with your prior authorization, and we will never use your data for purposes other than those previously indicated.

As a user, it is important that you carefully read this Privacy Policy regularly and whenever you provide your personal data since this document may undergo modifications as the provider may adjust any information on the website to comply with regulations or update the policy without prior notice or informing users. Publication on the provider's website will be sufficient.

DATA CONTROLLER:

Identity: LAB NOMA S.L. (also the provider)

Tax ID: B16696072

Postal address: Av. Via Augusta 15-25, Parc Empresarial @Sant Cugat, 08174, Sant Cugat del Vallès, Barcelona

Email: dpd@labnoma.com

Data Protection Officer: PYMELEGAL, S.L.

LAB NOMA SL, as the responsible party for the website, in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) on the protection of natural persons regarding the processing of personal data and on the free movement of such data, as well as the current legislation on the protection of personal data and Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSICE), informs you that it has implemented the necessary security measures, both technical and organizational, to guarantee and protect the confidentiality, integrity, and availability of the entered data.

METHOD OF DATA COLLECTION, TYPES OF DATA COLLECTED, AND PURPOSE:

The data we collect, how we obtain it, and the purpose of the processing are as follows:

Contact Forms:

Required data: name, position, email, phone

Purpose: to respond to inquiries and/or provide information requested by the user

Legal basis: user's consent

Registration Form:

Required data: name, email

Purpose: to create a user account to access website functionalities

Legal basis: user's consent

Newsletter Subscription Forms:

Required data: name and email

Purpose: to send relevant commercial information about our products and/or services via email

Legal basis: user's consent

If you make a purchase through our website:

Required data: name, shipping address, billing address, email, phone number, payment information

Purpose: to process your order, deliver the purchase, provide updates on order status, handle returns or claims

Legal basis: performance of the purchase and sale contract

Cookies and Similar Technologies:

We use cookies and similar technologies on our website to automatically collect certain information. This includes technical data such as IP address, browser type, internet service provider, referring/exit pages, operating system, date/time, and user tracking data. This data is used to analyze trends, administer the website, track user movement on the site, and collect demographic information.

The legal basis for the use of cookies is your consent, which is requested when you visit our website for the first time. You can configure your browser to reject all or some cookies or to notify you when cookies are being sent. However, please note that this may affect the functionality of the website and limit your browsing experience.

DATA TRANSFER TO THIRD PARTIES:

In principle, we will not share your personal data with third parties unless we are legally obliged to do so or we have obtained your prior consent. However, we may use external service providers to help us operate our website, process payments, send emails, or

perform other activities related to the provision of our services. In these cases, we will ensure that such providers comply with applicable data protection regulations and adopt appropriate measures to ensure the security of your data.

DATA SECURITY:

We have implemented appropriate technical and organizational security measures to protect your personal data against loss, misuse, alteration, or unauthorized disclosure. These measures include firewalls, data encryption, physical and logical access controls, information security policies, and staff training.

DATA RETENTION PERIOD:

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting purposes. Once the purpose has been fulfilled, we will securely delete or anonymize your data.

USER RIGHTS:

As a user, you have certain rights in relation to your personal data, including the right to access, rectify, erase, restrict, port, and object to the processing. If you wish to exercise any of these rights or if you have any questions or concerns about the handling of your personal data, you can contact us through the contact details provided at the beginning of this Privacy Policy.

CHANGES TO THE PRIVACY POLICY:

We reserve the right to update or modify this Privacy Policy at any time. Any changes we make will be posted on this page, and you will be notified through a prominent notice on our website. We recommend that you periodically review this Privacy Policy to stay informed about how we protect your personal data.