Privacy Policy

---

Version 22062024_1

1. General Information
   This privacy policy applies to the operations and services of [Medbiolab] (hereinafter referred to as "the Company") in the field of cosmetic manufacturing for other businesses. The Company is committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws.
   
2. Data Controller
   Company: Medbiolab
   Address: Vuorikatu 5B
   Business ID: 1966337-3
   Email: info@medbiolab.com
   Phone: +358451869757
3. Personal Data Processed
   The Company processes the following personal data:
   • Customer Data: Company name, contact person’s name, contact details (email, phone number), billing information
   • Contract Data: Contract and order details, service usage information
   • Communication Data: Content of emails and other communications
4. Purpose and Legal Basis for Processing Personal Data
   Personal data is processed for the following purposes:
   • Customer Relationship Management and Maintenance: Order processing, invoicing, customer service
   • Contract Performance: Providing and delivering services
   • Marketing and Communication: Marketing the Company’s products and services, customer surveys

The legal bases for processing are:

• Performance of a contract and fulfillment of contractual obligations
• Compliance with legal obligations
• Legitimate interest of the Company, such as managing customer relationships and direct marketing

1. Disclosure and Transfer of Personal Data
   The Company does not disclose personal data to third parties without your consent, except in the following situations:
   • Service Providers: We may share data with service providers who assist us in delivering our services (e.g., IT services, payment services).
   • Legal Obligations: We may disclose data to authorities or other parties when required by law.
2. Data Retention
   We retain personal data only as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law.
3. Rights of the Data Subject
   As a data subject, you have the following rights:
   • Right to Access: The right to review the personal data we have stored about you
   • Right to Rectification: The right to request the correction of inaccurate or incomplete data
   • Right to Erasure: The right to request the deletion of data
   • Right to Restrict Processing: The right to request the restriction of data processing
   • Right to Object: The right to object to the processing of data in certain circumstances
   • Right to Data Portability: The right to request the transfer of your data from one system to another

You can exercise your rights by contacting the data controller at the above-mentioned contact details.

1. Data Security
   The Company employs appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, loss, or destruction.
   1.1: The Company may share customer information with its partners if it is necessary for maintaining and managing the customer relationship. This may include, for example, sharing data with service providers or other partners who assist us in delivering our products and services. Such data sharing will always be done in compliance with applicable data protection laws, and we ensure that our partners uphold the same high standards for data protection as we do.
2. Changes to the Privacy Policy
   The Company reserves the right to update this privacy policy as necessary. We recommend reviewing this privacy policy regularly for any changes.
3. Contact Information
   If you have any questions or concerns regarding this privacy policy, please contact us through the Company's standard communication channels.

This privacy policy was last updated on [June 22, 2024].