Onalabs Inno-hub, S.L. (“Onalabs”) respects the current legislation on personal data protection, the privacy of users or data subjects and the secrecy and security of personal data. All data of data subjects are processed in accordance with the principles of lawfulness, loyalty and transparency, purpose limitation and retention period, data minimisation, accuracy, integrity and confidentiality, among others, as well as respecting the other obligations and guarantees established in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, adopting the necessary technical and organisational measures to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided, taking into account the state of technology, the nature of the data and the risks to which they are exposed.
1. Identity and contact details of the data controller and owner of the website
Onalabs Inno-hub, S.L.
Address: Avinguda Parc Tecnològic 3, 08290 Cerdanyola del Vallès (Spain).
NIF: B66905936
Registration: Registro Mercantil de Barcelona, al Tomo 45712, Folio 105, Sección 8ª, Hoja B-496621
Website: www.onalabs.com
Communication contacts
Address: Avinguda Parc Tecnològic 3, 08290 Cerdanyola del Vallès (Spain).
Email: legal@onalabs.com
Phone: +34 935 820 100
2. What is personal data?
Personal data consists of information that identifies or makes it possible to identify individual persons such as name, postal address, e-mail address, telephone number, etc.
3. What data we collect: data collected, purpose, legitimacy
a. Web users (cookies)
Our website (www.onalabs.com) uses cookies to improve and optimise the user experience. Reference is made to the cookie policy to know in detail what data is collected by cookies: Cookies policy.
b. Information request and other queries received by Onalabs
In case you contact with Onalabs and/or submit any query or question via web forms, e-mail, letter, exhibition, trade fair and/or any social platform:
Data collected: we may collect your personal or company name, electronic e-mail, phone number, user ID or any other identification information that you may submit to facilitate the communication.
Purpose: we collect the personal data to: (a) Attend the query that has been requested; (b) Incorporate the contact email provided to our internal management program (CRM), for the purpose of sending commercial communications for similar products or services; (c) Incorporate the contact email provided to our internal management program (CRM), for the purpose of sending commercial communications and/or newsletter related with Onalabs in case you expressly authorise commercial communications and/or to receive our newsletter.
Legitimation: (a) Legitimate interest, consisting of providing an answer to the queries received, informing the data subject about similar goods and services and take any necessary steps at the request of the data subject prior to entering into a contract; (b) Consent provided by the data subject when submitting their query via web form (or paper form in off-line processes) for processing their personal data for the purpose set out above and /or using the personal data for commercial communications and/or to receive our newsletter; c) Consent provided by the data subject via e-mail for processing their personal data for the purpose set out above and /or using the personal data for commercial communications and/or to receive our newsletter.
c. Job Application In case you contact with Onalabs and submit CVs and applications for job candidates via web forms, e-mail, letter and/or any social platform:
Data collected: we may collect your personal, CV and applications for job candidates. or company name, electronic e-mail, phone number, user ID or any other identification information that you may submit to facilitate the communication.
Purpose: In the event that we have job vacancies, this data will be used exclusively to study the profile of the candidate and, if necessary, contact the candidate to arrange a job interview. If there are no vacancies at the time the curriculum is sent, it will be destroyed.
Legitimation: (a) Legitimate interest, consisting of having a channel for receiving job applications and take any necessary steps at the request of the data subject prior to entering into a contract; (b) Consent provided by the data subject when submitting their query via web form for processing their personal data for the purpose set out above; (c) Consent provided by the data subject via e-mail for processing their personal data for the purpose set out above.
4. Retention period
In compliance with the principle of limitation of the storage period, the data collected will be processed solely and exclusively for the time necessary and for the purposes for which they have been collected at any given time.
Therefore, the personal data you provide to us will be kept for the duration of the business relationship or for as long as you exercise your right to erasure, opposition or limitation of processing. However, we will retain certain personally identifiable data for as long as necessary after the termination of the contractual relationship for use in legal proceedings or for as long as necessary for the fulfilment of legal obligations.
a. Web users (cookies)
Reference is made to the cookie policy to know in detail what data is collected by cookies: Cookies policy.
b. Information request and other queries received by Onalabs
The contact data is kept for a reasonable period, in any case no longer than 12 months since last contact with the data subject, to answer to any follow up question or query. In case the data subjects accepts to receive commercial communications and/or ours newsletter, the necessary information to provide such information shall be maintained as long as the data subject does not cancel their subscription. The data subject will be provided a link to cancel their subscription in all commercial communications and/or newsletter.
c. Job Application
After the assessment of the application, it will be destroyed, unless the candidate is hired, in which case the data will remain for the duration of the employment relationship and finalized during the period necessary to respond to legal liabilities.
5. Recipients
Onalabs does not transfer or communicate data, unless there is a reasonable need to do so in order to comply with an administrative body (national and european public bodies), judicial procedure, legal obligation or after obtaining the data subject’s consent.
Although this is not a transfer of data, it may be that third party companies, acting as our suppliers, such as providers of information society services – such as web servers, e-mail servers, hosting providers, software as a service (SAAS), information management (CRM), office automation service companies, accounting, and/or postal and courier providers access your information in order to carry out the service we have contracted from them.
These third parties suppliers access your data on our instructions and may not use it for any other purpose and shall maintain the strictest confidentiality.
There are no international transfers of your data to countries outside the European Economic Area (EEA). We have agreed with our suppliers, for the provision of the contracted service, they will make use of servers located in the EEA and if, in the future, they need to make use of servers located outside the EEA territory, appropriate measures will be taken, which will be incorporated into this Privacy Policy, ensuring that the appropriate safeguards are in place.
6. Exercise of rights
The data subject has the right to exercise the following rights before Onalabs:
– Right of access: allows the data subject to know and obtain information about his or her personal data subject to processing.
– Right of rectification: allows the data subject to request rectification, correction of errors and amendment of data that prove to be inaccurate or incomplete.
– Right of erasure: allows the data subject to have the data deleted when, among other reasons, the data are no longer necessary for the purposes for which they were collected, are inappropriate or excessive.
– Right to object: the data subject’s right not to have their personal data processed or to discontinue processing their personal data, in which case we will cease processing their data, except for compelling legitimate reasons or for the defence of possible claims.
– Right to limit processing: in certain circumstances, data subjects may request that we limit the processing of their data, in which case we will only retain the data for the purpose of exercising or defending claims.
In accordance with the regulations in force, data subjects may request the limitation of processing their data when: (a) they have exercised their rights of rectification or objection and Onalabs is in the process of dealing with their request; (b) the processing is unlawful, which would lead to the data being erased, but the data subject objects to this; (c) the data is no longer necessary for processing, but the data subject needs it for the purpose of exercising or defending claims.
– Data portability: the right of the data subject to request portability of the data provided to us for transfer to another data controller. . In this case the data will be transferred to another controller or to the data subject in a structured, commonly used and machine-readable format.
– Withdrawal of consent: all data subjects who have given consent for a specific purpose have the right to withdraw this consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out prior to the withdrawal of consent.
These rights can be exercised by sending an email to legal@onalabs.com. In the subject you can indicate “Exercise of rights” and, in the text of the e-mail, you should provide the following information: (a) full name and surname; (b) specify which right(s) you want to exercise; (c) copy of your ID.
Within one month of receiving the request to exercise the data subject’s rights, Onalabs will inform the data subject of the action it has taken on the basis of the request. In the case of particularly complex requests, we will contact you within a maximum of two months.
In any case, if the data subject is not satisfied with Onalabs’s response, he or she can lodge a complaint with the competent Data Protection Supervisory Authority:
Agencia Española de Protección de Datos.
Address: Calle Jorge Juan, 6, 28001 Madrid.
Phones: +34 901 100 099 / +34 91 266 35 17
Website: Agencia Española de Protección de Datos | AEPD
7. How do we protect your information?
We use reasonably reliable and effective physical, organisational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and ensuring your privacy.
In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of your personal data.
In the case of the contracts we sign with our suppliers, we include clauses requiring them to maintain the duty of secrecy with respect to the personal data to which they have had access by virtue of the assignment, as well as to implement the necessary technical and organisational security measures to guarantee the permanent confidentiality, integrity, availability and resilience of the systems and services for the processing of personal data and to make use of servers located in EEA and inform in case of any potential international data transfer to adapt the necessary measures.
All these security measures are regularly reviewed to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed, and no security system is impenetrable so, in the event that any information under our control and subject to processing is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Supervisory Authority and, where appropriate, those data subjects who may have been affected to take appropriate action.
8. Modification of the privacy policy
Onalabs reserves the right to modify this policy in order to adapt it to changes in the way data is processed, new legislation, jurisprudence or industry practice. In the event of any future modifications to this policy, we will inform you via the website or by other means so that you can be informed of the new privacy conditions introduced.
Last modified: [22 febrero 2023]
