1. Data Controller
The data controller responsible for the processing of personal data via this website is:
Matrix Biotek, S.L.
CIF: B22713846
Carrer de Ramon Turró 169
Talent Garden — 22@
08005 Barcelona, Cataluña, Spain
Email: info@matrixbiotek.com
2. Scope of This Policy
This Privacy Policy applies to personal data processed by Matrix Biotek, S.L. ("Matrix Biotek", "we", "us", "our") through this website (matrixbiotek.com), through email, telephone, postal correspondence, contact forms, downloadable resource forms, and other interactions you may have with us.
This working draft is intended to be reviewed against:
- Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR)
- Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD)
3. What Personal Data We Collect
We collect personal data only when you choose to provide it. The categories of personal data we may collect include:
- Identification data: name, surname, organisation name, professional role, country
- Contact data: email address, telephone number, postal address (where you provide it)
- Communication content: the content of any message you send us via contact forms or email
- Technical and website-usage data: information processed by the selected hosting provider and, only if you accept analytics, website-usage information processed through Google Analytics 4.
- Marketing preferences: consent to receive newsletters or product updates (where applicable)
We do not knowingly collect data from minors under 16 years of age.
4. Purposes of Processing & Legal Bases
We process your personal data for the following specific purposes, each based on a defined legal basis under GDPR Article 6:
- Responding to enquiries submitted via the contact form or email — legal basis: your consent (Art. 6(1)(a)) and/or our legitimate interest in operating our business (Art. 6(1)(f))
- Delivering requested resources (e.g. the Handbook of Biologics) — legal basis: your consent (Art. 6(1)(a))
- Providing quotes and processing orders for our products and services — legal basis: pre-contractual measures (Art. 6(1)(b))
- Managing distribution and partnership relationships — legal basis: contractual performance (Art. 6(1)(b)) and/or legitimate interest (Art. 6(1)(f))
- Operating and securing the website through the selected hosting provider — the final legal basis and provider disclosures must be confirmed before launch
- Website analytics through Google Analytics 4, only after you choose to accept analytics — legal basis: consent (Art. 6(1)(a)). No advertising tag is configured in this website package.
- Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c))
5. Data Recipients & Transfers
We do not sell, rent, or trade your personal data. We share your personal data only with:
- Service providers selected to help operate the business and website, such as hosting and email providers. The final provider list, roles, and contractual safeguards must be documented before launch.
- Google Analytics 4, only when you have accepted analytics, for aggregated website-usage measurement. The final provider disclosures, settings, retention configuration, and applicable transfer safeguards must be confirmed during legal review.
- Independent manufacturer and technical partner Matriks Biyoteknoloji Ltd. Şti. (Ankara, Türkiye), under the same sole ownership, where required to fulfil orders, quotations, or technical requests. The lawful transfer mechanism and contractual safeguards must be confirmed by legal counsel before launch.
- Legal and regulatory authorities where required by law.
Any international transfer outside the European Economic Area must use the safeguards required by applicable data-protection law. The final wording depends on the actual providers, contracts, and data flows selected for launch.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Specifically:
- Contact form enquiries and email correspondence: up to 24 months from last interaction, unless ongoing business relationship requires longer
- Resource download records: up to 24 months
- Customer order records: as required by Spanish commercial and tax law (typically 6 years)
- Marketing consent records: until consent is withdrawn or 24 months from last interaction, whichever is sooner
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access (Article 15) — to obtain a copy of the personal data we hold about you
- Right to rectification (Article 16) — to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten", Article 17) — to request deletion of your data
- Right to restriction of processing (Article 18)
- Right to data portability (Article 20) — to receive your data in a structured, machine-readable format
- Right to object (Article 21) — to object to processing based on legitimate interests
- Right to withdraw consent at any time, where consent was the legal basis
- Right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es
To exercise any of these rights, please contact us at info@matrixbiotek.com. We will respond within one month, in accordance with GDPR Article 12.
8. Cookies
This website stores functional preferences such as the selected light/dark theme locally in the browser. Google Analytics 4 is configured for website-usage measurement, but it is not activated unless you choose Accept analytics. If you reject analytics, the Google Analytics tag is not loaded for that visit. No advertising tag is configured. Your analytics choice is stored locally in your browser and can be changed using the Cookie settings control in the website footer.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS), access controls, secure hosting infrastructure, and regular security reviews. However, no system is perfectly secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this Policy indicates when changes were last made. We encourage you to review this Policy periodically.
11. Product Disclaimer
All Matrix Biotek S.L. products are For Research Use Only (RUO) and are not intended for use in diagnostic procedures.
12. Contact
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Matrix Biotek, S.L.
Carrer de Ramon Turró 169
Talent Garden — 22@
08005 Barcelona, Cataluña, Spain
Email: info@matrixbiotek.com
This Privacy Policy is provided in English for international accessibility. The Spanish version, where required, is available on request and prevails for matters of Spanish law interpretation.