Data protection
Last updated: September 18, 2026
In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter, GDPR), and with Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights (hereinafter, LOPDGDD), it is reported that the controller of the personal data collected through this website is:
| Responsible | EDULCODIET, SL. |
|---|---|
| NIF | B-55553473 |
| Address | Industrial Estate, Private Interior Road 1, Warehouse 4, 43152 Perafort (Tarragona), Spain |
| contact@edulcodiet.com | |
| Phone | +34 977 61 59 29 |
| Website | edulcodiet.com |
Any questions regarding the processing of your personal data or the exercise of your rights can be directed to contact@edulcodiet.com.
EDULCODIET is committed to processing personal data lawfully, fairly and transparently, collecting only the data that is adequate, relevant and limited to what is necessary for the purposes stated in this policy.
We process the data you voluntarily provide through website forms, email, telephone, or within the framework of a business relationship, as well as data derived from your browsing activity. Specifically:
| Category | Data | Origin |
|---|---|---|
| Professional identification and contact information | Name and surname, company, position, email address, telephone, country. | Provided by the interested party in the forms on the website. |
| Content of the query | Product or project type, estimated volumes, industrial application, and any other information included in the message. | Provided by the interested party. |
| Commercial and billing information | Tax information, bank details, order history and communications. | Provided by the client within the framework of the contractual relationship. |
| Navigation data | IP address, device identifier, browser type, pages visited, origin of visit, date and time of access. | Collected automatically through cookies and similar technologies, with prior consent where required. |
We do not process special categories of personal data as defined in Article 9 of the GDPR. Please do not include such data in the free text fields of the forms.
Your data is processed for the following purposes, each based on the legal grounds indicated:
| Purpose | Legal basis | Consequence of not providing the data |
|---|---|---|
| To handle inquiries, requests for information, and requests for quotes or samples submitted through forms, email, or telephone. | Application of pre-contractual measures at the request of the interested party (art. 6.1.b GDPR) and, where appropriate, the consent of the interested party (art. 6.1.a GDPR). | It will not be possible to process your request. |
| Prepare and submit offers, formulation proposals and technical documentation. | Pre-contractual measures and execution of the contract (art. 6.1.b GDPR). | It will not be possible to prepare the proposal. |
| Manage the business relationship with customers and suppliers: orders, deliveries, invoicing, collections and after-sales support. | Contract execution (art. 6.1.b GDPR) and compliance with legal accounting, tax and food safety obligations (art. 6.1.c GDPR). | It will not be possible to formalize or execute the commercial relationship. |
| Send commercial communications and information about products, news, trade fairs and industry content. | Express consent of the interested party (art. 6.1.a GDPR) or, in the case of clients, legitimate interest in the promotion of own products similar to those already contracted (art. 6.1.f GDPR and art. 21.2 LSSI-CE). | You will not receive our marketing communications. |
| Analyze website usage and the effectiveness of our communication efforts using analytics and marketing automation tools. | Consent of the interested party given through the cookies panel (art. 6.1.a GDPR and art. 22.2 LSSI-CE). | Navigation will still be possible; no analytics data will be recorded. |
| To ensure website security, prevent fraud and automated form submissions, and maintain activity logs. | Legitimate interest of the controller in protecting its systems and users (art. 6.1.f GDPR). | Not applicable: the treatment is necessary for the safe operation of the site. |
| To address the exercise of rights and the information obligations arising from data protection regulations. | Compliance with a legal obligation (art. 6.1.c GDPR). | Your request cannot be processed. |
No automated decisions are made that produce legal effects concerning the data subject or similarly significantly affect them, nor are profiles created for that purpose. Segmenting commercial mailings by sector or interest does not produce effects of that nature.
| Inquiries and requests not converted into a business relationship | Up to one year from the last interaction, unless the interested party requests deletion earlier. |
|---|---|
| Customers and suppliers | During the term of the relationship and, once it has ended, during the legal limitation periods: six years in commercial matters (Art. 30 of the Commercial Code), four years in tax matters (Law 58/2003, General Tax Law) and those that are applicable in matters of food traceability. |
| Subscribers to commercial communications | Until the interested party revokes their consent or objects to the processing. |
| Browsing data and cookies | According to the duration indicated for each cookie in the Cookie Policy. |
| Record of consents and exercise of rights | As long as the possibility of claiming remains and as proof of regulatory compliance. |
After these periods have elapsed, the data will be deleted or, where appropriate, blocked in accordance with Article 32 of the LOPDGDD, remaining at the exclusive disposal of judges and courts, the Public Prosecutor's Office and the competent public administrations during the limitation period for actions.
Your data will not be shared with third parties except where legally required. However, to provide our services, we use suppliers who access the data in their capacity as those responsible for the treatment, with whom the contract required by Article 28 of the GDPR has been signed and who process the data only in accordance with our instructions.
The main one of these suppliers is:
| Supplier | Service | Treatment location |
|---|---|---|
| HubSpot, Inc. | Customer relationship management (CRM) system, website forms, contact management, and sending commercial communications. | European Union and United States. |
Likewise, and within the following categories of recipients, the following may have access to the data: web hosting and email service providers; providers of accounting, tax, labor and legal advisory services; transport and logistics companies, when necessary for the delivery of orders or samples; and financial entities, for the management of collections and payments.
The data may also be communicated to the State Tax Administration Agency and other public administrations when there is a legal obligation, as well as to courts, tribunals and Security Forces when legally required.
You can request the specific identification of the data processors involved at any given time by writing to contact@edulcodiet.com.
HubSpot, Inc., The CRM and website form provider is based in USA, Therefore, the processing of your data through this tool involves an international transfer outside the European Economic Area.
This transfer is covered by the safeguards provided for in Chapter V of the GDPR and, specifically:
You can view HubSpot's certification in the Data Privacy Framework public registry and request additional information about these guarantees, as well as a copy of them, by writing to contact@edulcodiet.com.
Apart from the scenario described, EDULCODIET does not carry out international transfers of personal data.
In accordance with Article 21 of the LSSI-CE, EDULCODIET will only send commercial communications electronically when the recipient has expressly authorized it or when there is a prior contractual relationship and the communication refers to its own products or services similar to those initially contracted.
All communications will identify EDULCODIET as the sender and will include a simple and free procedure to revoke consent and unsubscribe, via the link provided for this purpose or by writing to contact@edulcodiet.com with the word "BAJA" in the subject line.
The revocation of consent will not affect the lawfulness of the processing carried out prior to it, nor will it prevent the receipt of communications of a strictly contractual or administrative nature.
Data protection regulations grant you the following rights, which you can exercise free of charge:
You can exercise your rights by sending a request to contact@edulcodiet.com or by post to EDULCODIET, SL, Polígono Industrial, Vial Interior Privat 1, Nave 4, 43152 Perafort (Tarragona), indicating the right you wish to exercise and attaching a copy of your national identity document or equivalent document that proves your identity.
Your request will be processed within one month of receipt, which may be extended by two additional months in the case of particularly complex requests or a large number of them, in which case you will be informed of the extension and the reasons for it.
If you believe that the processing of your data does not comply with the regulations, or if you have not received satisfaction in the exercise of your rights, you can file a complaint with the Spanish Data Protection Agency, with registered office at C/ Jorge Juan, 6, 28001 Madrid, and electronic headquarters at www.aepd.es.
EDULCODIET has adopted the appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing.
Among others, the following are applied: encryption of website communications using TLS certificate, access control based on individual profiles and credentials, regular backups, system and software updates, and confidentiality commitment of personnel with access to the data.
However, users should be aware that internet security measures are not infallible. In the event of a personal data breach that poses a risk to the rights and freedoms of data subjects, EDULCODIET will notify the supervisory authority and, where appropriate, the affected parties, in accordance with Articles 33 and 34 of the GDPR.
The user guarantees that the data provided is truthful, accurate, complete and up-to-date, and is responsible for communicating any changes to it.
When the user provides personal data of third parties —for example, of colleagues in their company—, they declare that they have the necessary legitimacy to do so and undertake to have previously informed them of the content of this privacy policy, EDULCODIET being exonerated from any liability arising from non-compliance with this duty.
The services and content of this website are intended for professionals and businesses, not minors. EDULCODIET does not knowingly collect data from children under fourteen years of age. If you become aware that a minor has provided us with personal data, please inform us. contact@edulcodiet.com to proceed with its suppression.
EDULCODIET maintains profiles on social media. The processing of data from users who follow these profiles or interact with their posts will be governed by this policy where applicable, as well as by the terms of use and privacy policies of each social network, whose practices EDULCODIET does not control.
The legal basis for this processing is the user's consent, given by following or interacting with the profile, and its purpose is to inform about EDULCODIET's activities, products, and news. The user can unfollow the profile at any time through the social network's own tools.
This website uses its own and third-party cookies. You can consult detailed information about their type, purpose, ownership and duration, as well as manage or revoke your consent at any time, in the Cookie Policy.
EDULCODIET may modify this privacy policy to adapt it to regulatory, jurisprudential, or technical changes, or to new processing purposes. Modifications will be published on this same page with an indication of the update date.
When changes substantially affect treatments based on consent, the consent of the data subject will be obtained again.
Spanish Spanish 
English (UK)
German
French
Italian
Portuguese
Catalan
Russian
Hindi
English (Canada)
English (United States)
