Privacy policy
Last updated
This policy explains how OHMYLABS, S.L. handles personal data when you visit this website, write to us or work with us. It follows the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Spanish Organic Law 3/2018, of 5 December, on the protection of personal data and guarantee of digital rights (LOPDGDD).
Who is responsible for your data
The controller of your personal data is:
- Company name
- OHMYLABS, S.L.
- Trade name
- OhMyLabs
- Tax ID (NIF)
- B75842401
- Registered office
- Calle Sorbe, 11, 3.º 2, 28019 Madrid, Spain
- hola@ohmy-labs.es
What data we collect and why
When you visit this website
This website does not use analytics, advertising or social media tools, and it does not set cookies. To deliver its pages, the servers that host it automatically process technical data such as your IP address, browser type, the page requested and the date and time of the request.
- Purpose
- To deliver the website and keep it secure and working properly.
- Legal basis
- Our legitimate interest in running a secure website (art. 6.1.f GDPR).
- Retention
- Server logs are kept for a short period, only as long as needed for security and troubleshooting, and then deleted.
When you write to us
When you email us, we receive your name, your email address and whatever you choose to include in your message, such as your organization or role.
- Purpose
- To answer your message and, if you ask, to discuss how we could work together.
- Legal basis
- Our legitimate interest in replying to people who contact us (art. 6.1.f GDPR) and, when you ask about our services, steps taken at your request before entering into a contract (art. 6.1.b GDPR).
- Retention
- As long as needed to answer you and handle any follow-up. If the conversation leads to a working relationship, the next section applies.
When you or your organization work with us
If your organization becomes a client or supplier, we process the contact details of the people we deal with (name, role, work email and phone) and the data needed for contracts, invoices and payments.
- Purpose
- To manage the working relationship, invoicing and payments, and to meet our accounting and tax obligations.
- Legal basis
- The performance of the contract (art. 6.1.b GDPR), our legal obligations (art. 6.1.c GDPR) and, for people acting on behalf of an organization, our legitimate interest in keeping in touch with them (art. 6.1.f GDPR and art. 19 LOPDGDD).
- Retention
- For the duration of the relationship and afterwards for the periods the law requires, such as six years for accounting records under article 30 of the Spanish Commercial Code, and the limitation periods for tax and legal claims.
Data in the software we build and run
When we build or run software for a client, the data stored in it belongs to that client. We process it only on the client’s instructions, under a data processing agreement (art. 28 GDPR), and the client’s own privacy policy applies to it.
We do not sell your data, use it for advertising or make automated decisions about you, including profiling.
Who we share it with
We share personal data only when needed:
- With providers that help us run our business, such as website hosting, email and IT services, and our accounting and tax advisers. They act as data processors under contracts that require them to protect your data and use it only on our instructions.
- With banks and payment providers, to make or receive payments.
- With public authorities, courts and tax authorities, when the law requires it.
International transfers
Some of our providers may store or access data outside the European Economic Area. When that happens, we make sure the transfer is protected by an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework for certified companies, or by the standard contractual clauses approved by the Commission.
Your rights
You can ask us at any time to:
- give you access to the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- delete your data;
- restrict how we process it;
- stop processing it, including processing based on our legitimate interest;
- give you your data in a portable format, or send it to another organization.
Where we rely on your consent, you can withdraw it at any time. This does not affect processing carried out before you withdrew it.
To exercise these rights, email us at hola@ohmy-labs.es or write to us at Calle Sorbe, 11, 3.º 2, 28019 Madrid, Spain. We may ask you to confirm your identity. We will reply within one month; for complex requests we may need up to two more months, and we will tell you if so.
If you think we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es). We would appreciate the chance to sort it out with you first.
How we protect your data
We apply technical and organizational measures suited to the risk, such as access limited to the people who need it, encryption where appropriate and a careful choice of providers.
Minors
This website and our services are aimed at organizations and professionals. We do not knowingly collect data from children under 14.
Changes to this policy
We may update this policy to reflect changes in the law or in how we work. The date at the top shows when it was last updated. If a change is significant, we will make that clear on this website.