Privacy Policy
Last updated: August 2026
Biocontrol Technologies, S.L. processes the personal data of individuals who visit this website, request technical documentation, place an order, or contact the company. This policy explains what data is collected, for what purposes it is used, and what rights apply to data subjects, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
1. Data Controller
Data Controller: Biocontrol Technologies, S.L. (“BCT”)
Tax ID (NIF): B63545446
Registered Address: Av. Madrid, 217 — 08014 Barcelona, Spain
Phone: 93 409 18 48
For any questions regarding data protection, please contact the email address above, indicating “Data Protection” in the subject line.
2. Summary
- Only the data necessary to provide the requested service is collected.
- Personal data is never sold to third parties.
- Marketing communications are only sent with express consent and can be unsubscribed from with a single click.
- Advertising and analytics cookies are only activated if the user accepts them in the cookie banner.
- Consent may be withdrawn at any time.
3. What Data We Process
3.1. Technical Documentation Download Forms
- Name
- Document requested, the page from which the request is submitted, and the location on the page (header or footer)
- Campaign parameters associated with the visit, where applicable: source, medium, campaign name, and specific ad
3.2. Contact Form and Email
- Identification and contact details provided by the data subject
- Content of the inquiry
3.3. Orders Placed Through the Online Store
- Identification, billing, and shipping details
- Order details
Payment data is processed directly by the relevant payment provider. BCT does not store full card numbers.
3.4. Browsing and Advertising Data
If the user accepts the relevant cookies, data is processed regarding the pages visited, the device used, the source of the visit, and the actions taken on the site, including documentation requests. This data is used to measure the performance of advertising campaigns and to display ads on Meta platforms. Further details are available in the Cookie Policy.
If the user does not accept these cookies, browsing remains fully functional and no processing is carried out for advertising purposes.
No special categories of data are processed under any of the scenarios described above.
4. Purposes and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Sending the requested dossier or technical documentation | Performance of the data subject’s request, Art. 6(1)(b) GDPR |
| Sending technical and marketing communications about T34 Biocontrol® and other BCT solutions | Express consent, Art. 6(1)(a) GDPR |
| Handling inquiries and requests for information | Consent of the data subject, Art. 6(1)(a) GDPR |
| Managing orders, billing, and after-sales service | Performance of a contract, Art. 6(1)(b) GDPR, and legal obligations, Art. 6(1)(c) GDPR |
| Measuring website usage and compiling aggregate statistics | Consent given via the cookie banner, Art. 6(1)(a) GDPR |
| Measuring advertising campaign performance, displaying ads, and building custom and lookalike audiences on Meta platforms | Consent given via the cookie banner, Art. 6(1)(a) GDPR |
| Maintaining the security and operation of the website | Legitimate interest of the controller, Art. 6(1)(f) GDPR |
Consent to receive communications is independent of the delivery of the requested document: the dossier can be downloaded without accepting marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
5. How Long We Retain the Data
| Processing Activity | Retention Period |
|---|---|
| Documentation download data and marketing communications | For as long as consent is maintained, and in any case up to 3 years from the data subject’s last interaction |
| Inquiries handled | 1 year from resolution of the inquiry |
| Order and billing data | The statutory retention periods applicable under tax and commercial law |
| Browsing and advertising data | The periods specified for each cookie in the Cookie Policy, with a maximum of 24 months |
Once these periods have elapsed, the data is deleted or blocked in accordance with Article 32 of the LOPDGDD, remaining available exclusively to the competent authorities for the statute-of-limitations period applicable to any potential liabilities.
6. Who Receives the Data
BCT does not sell or transfer personal data to third parties, except where legally required. However, the following categories of providers do have access to the data, acting as data processors under the corresponding agreement in accordance with Article 28 of the GDPR:
- Website hosting and maintenance provider
- Email communication and delivery management platform
- Automation tool that forwards received requests to the providers listed above
- Administrative and accounting management service provider
- Payment entities and logistics operators, in the case of orders
- Google Ireland Limited, as provider of the web analytics service
Joint Controllership with Meta
This website incorporates technologies from Meta Platforms Ireland Limited designed to measure advertising effectiveness and build campaign audiences. With respect to the collection and transmission of this data, BCT and Meta act as joint controllers within the meaning of Article 26 of the GDPR, in accordance with the Controller Addendum published by Meta.
Under this agreement, Meta assumes the obligations of providing information and handling data subject rights requests regarding the subsequent processing it carries out on its own infrastructure. Data subjects may exercise their rights either through BCT or directly through Meta, and may review Meta’s policy at facebook.com/privacy/policy.
<!– OPCIONAL — descomentar solo si se activa la API de Conversiones de Meta:Cuando el usuario ha prestado su consentimiento, determinados eventos pueden transmitirse a Meta desde los servidores de BCT mediante la API de Conversiones, en lugar de o además de desde el navegador. Los identificadores enviados por esta vía se transmiten cifrados y con la misma finalidad y base jurídica descritas en esta política.
–>International Transfers
Some of the providers mentioned above are located outside the European Economic Area or belong to corporate groups headquartered in the United States. In such cases, the transfer relies on the European Commission’s adequacy decision regarding the EU-U.S. Data Privacy Framework or, failing that, on the standard contractual clauses provided for in Article 46(2) of the GDPR. Data subjects may request information about the safeguards applied by writing to the contact address.
7. Profiling
When the user accepts marketing cookies, their browsing data may be used to group them with other users who share similar characteristics in order to display more relevant ads. This processing does not produce legal effects or significantly affect the data subject, and there are no automated decisions within the meaning of Article 22 of the GDPR.
Users may object at any time by withdrawing their consent through the cookie preferences link or through the ad settings of their Meta account.
8. Data Subject Rights
Any individual may exercise the following rights:
- Access: to know what data of theirs is being processed
- Rectification: to correct inaccurate or incomplete data
- Erasure: to request the deletion of their data
- Objection: to object to specific processing activities, including personalized advertising
- Restriction: to request that processing be restricted
- Portability: to receive their data in a structured, commonly used format
- Withdrawal of consent at any time
To exercise these rights, simply write to biocontrol@biocontroltech.com or to the postal address indicated above, enclosing a copy of a document proving your identity. Requests are handled within a maximum period of one month.
Marketing communications also include a direct unsubscribe link that takes effect immediately. Cookie consent can be changed at any time via the cookie preferences link in the footer.
If the data subject believes their rights have not been adequately addressed, they may file a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
9. Accuracy of Data
The data subject guarantees that the data provided is accurate and undertakes to report any changes. They are responsible for the accuracy of the data and for any damages that may arise from its inaccuracy.
10. Security Measures
BCT implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR, and reviews them periodically.
11. Minors
The services offered on this website are intended for professionals in the agricultural sector. They are not intended for individuals under the age of 14, and BCT does not knowingly collect data from minors under that age.
12. Changes to This Policy
This policy may be updated to reflect regulatory changes or the evolution of the services offered. The version in effect is always the one published on this page, with its update date indicated.
Related documents: Legal Notice . Cookie Policy
