LEGAL
Website Privacy Policy
Last updated: 30 September 2026
Controller: BASE4 BIOSCIENCES, S.L. (hereinafter, “BASE4”)
This Privacy Policy provides information on the processing of the personal data of individuals who browse the website https://base4bio.com/ (the “Website”) and those who contact BASE4 through its contact form. The processing of the data of customers who contract BASE4’s services through the platform (including, where applicable, health and genetic data) is governed by the Platform Privacy Policy, which is made available to them before they enter into a contract https://base4bio.com/legal-notice.
1. Identification of the data controller
BASE4 BIOSCIENCES, S.L., with its registered office at Cabrils (08348 Barcelona), Carrer de Can Campins, number 7, Floor 1, Door 1, tax identification number (NIF) B-24825846, is the sole controller of your personal data collected through the Website.
Contact details of the Data Protection Officer, whom you can contact at privacy@base4bio.com.
2. Data we process
Identification and contact details (name, email, telephone number) and the content of the enquiry you submit through the contact form.
Website usage data (browsing data, such as IP address, device and browser type or pages visited), obtained through cookies and similar technologies under the terms of our Cookies Policy https://base4bio.com/cookies.
Please do not include health data or other special categories of data in the contact form, as they are not necessary to handle your enquiry. If you provide them, BASE4 will process them only to the extent strictly necessary to respond to you and will erase them once the enquiry has been handled.
3. Purposes of processing
To handle and respond to enquiries or requests for information that you submit through the contact form, including those relating to our services.
To ensure the proper functioning and security of the Website.
If you consent through the cookie settings panel, to analyse the use of the Website and show you personalised advertising, in accordance with the Cookies Policy.
Sending newsletters or commercial communications: if you expressly authorise this by ticking the box provided for this purpose, to send you commercial communications about BASE4’s products and services by electronic means.
To comply with applicable legal obligations.
4. Legal basis
Handling enquiries: taking steps at the data subject’s request prior to entering into a contract when the enquiry concerns contracting BASE4’s services (Article 6(1)(b) GDPR) and, in other cases, BASE4’s legitimate interest in handling requests addressed to it (Article 6(1)(f) GDPR).
Functioning and security of the Website: BASE4’s legitimate interest in ensuring network and information security (Article 6(1)(f) and Recital 49 GDPR).
Non-technical cookies and commercial communications: your consent (Article 6(1)(a) GDPR, in conjunction with Articles 21 and 22.2 LSSI-CE), which you may withdraw at any time.
Compliance with legal obligations (Article 6(1)(c) GDPR).
The fields in the contact form marked as mandatory are necessary to handle your enquiry; if you do not complete them, BASE4 will be unable to respond to you. You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Article 21 GDPR).
5. Recipients of the data
Technology providers that support the Website (hosting, contact form management and email), acting as processors, with whom BASE4 has entered into the corresponding contract pursuant to Article 28 GDPR.
Public authorities, courts and tribunals, and law enforcement authorities, where there is a legal obligation.
No information is disclosed to third parties for commercial or advertising purposes.
6. Data retention
Contact form data: for as long as necessary to handle your enquiry and for a maximum of 24 months from the last communication, unless the enquiry leads to a contract for the services, in which case the periods set out in the Platform Privacy Policy will apply.
Browsing data and cookies: for the periods specified in the Cookies Policy.
Once these periods have elapsed, the data will be kept blocked in accordance with Article 32 LOPDGDD for the limitation period applicable to any liabilities that may arise from the processing, and will be permanently erased at the end of that period.
7. International transfers
As a general rule, data processed through the Website is hosted by an infrastructure and storage provider in the European Economic Area (EEA). If any technology provider were located outside the EEA or could access the data from outside it, the transfer would be based on an adequacy decision of the European Commission (including, for the United States, the EU–US Data Privacy Framework in respect of certified entities) or on the appropriate safeguards provided for in Article 46 GDPR, in particular the standard contractual clauses approved by the European Commission. You may request information about these safeguards at privacy@base4bio.com.
8. Automated decision-making and profiling
No decisions are made through the Website based solely on automated processing of your data that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR). If analytics or advertising cookies involving profiling are used, information about this will be provided in the Cookies Policy.
9. Your rights
You may exercise your rights of access, rectification, erasure, restriction of processing, objection and data portability, and withdraw your consent at any time without affecting the lawfulness of prior processing, by contacting privacy@base4bio.com or writing to the postal address indicated in section 1.
BASE4 will respond to you within one month, which may be extended under the terms of Article 12(3) GDPR, and may request additional information to confirm your identity where there are reasonable doubts about it (Article 12(6) GDPR).
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
10. Security
BASE4 applies appropriate technical and organisational measures to protect your data in accordance with Article 32 GDPR.
11. Changes to this policy
BASE4 may update this Privacy Policy to reflect regulatory or operational changes. Substantial changes will be notified through the Website, indicating the date of the latest update.
12. Contact
For any enquiries about this Privacy Policy or the processing of your data, you may contact privacy@base4bio.com.
© Base4 Biosciences. All rights reserved.