Privacy policy

Controller

Asociación MolinoLab (trading name: Sinfonía Biótica), CIF G02695880, address Camino de la Estación 41, 37470 Sancti-Spíritus (Salamanca), Spain. Email: info@molinolab.org. Shop email: hola@sinfoniabiotica.xyz.

No data protection officer has been appointed. Privacy requests may be sent to info@molinolab.org.

Purposes, legal bases and data

We process personal data for:

  • Website operation and security (technical connection data): legitimate interest in a secure, working site (Art. 6(1)(f) GDPR).
  • Contact forms (name, email, subject, message): consent or pre-contractual steps (Art. 6(1)(a) or (b)). Contact forms use a self-hosted anti-spam mechanism (ALTCHA) and local checks (data are not sent to Google for that purpose).
  • Comments, if enabled (form data, IP address and user agent, to help detect spam): consent and legitimate interest in moderating the site. An anonymised hash of your email may be sent to Gravatar (Automattic) to display an avatar; see https://automattic.com/privacy/.
  • Customer account and shop (identity, contact, shipping and billing address, orders, payments): performance of the contract and legal obligations (Art. 6(1)(b) and (c) GDPR), including tax and consumer-law duties.
  • Order-related messages: performance of the contract.
  • Newsletters, only if you subscribe: consent (Art. 6(1)(a)), withdrawable at any time.

We do not carry out automated decision-making with legal effects. We do not routinely request special-category data.

Retention

Contact data are kept while the enquiry is handled and thereafter as needed for legal liability. Comments and their metadata may be kept indefinitely so later comments can be recognised. Customer and invoicing data are kept for the statutory periods (commercial, tax and consumer limitation periods). Accounts may be deleted on request, subject to legally required retention.

Recipients

Data are not sold. They may be accessed by hosting and transactional email providers, the shop platform (WooCommerce) and, when you pay electronically, the payment provider you choose at checkout (card data are processed by that provider; the Association does not store the full card number). Newsletter providers only with consent. Public authorities where legally required. Gravatar, as described above. Some providers may be outside the EEA; appropriate safeguards will be used where required.

Rights

You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent where that is the legal basis, without affecting prior lawful processing. Write to info@molinolab.org and provide proof of identity. You may also lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es).

Children

The shop and forms are not directed at children under 14. Improperly collected data of a child will be deleted.

Updates

This policy may be updated. The current version is the one published on this page. Date of this version: 14 November 2026.

Back to top