Legal
Privacy policy
Explain how VBS processes personal data submitted through the public website.
Data controller
The data controller is VANGUARD BIOTECH SYSTEMS, S.L. (NIF B22881791), registered office Calle Pintor Romero Santana, 71, 21449 Lepe, Huelva, España, with its operational base in Granada, España, contact vanguardbiotechsystems@gmail.com. For any data-protection matter, or to exercise your rights, write to VBS at vanguardbiotechsystems@gmail.com. VBS has not designated a Data Protection Officer.
Data we process
We process the identification and contact data you submit through the enquiry form: full name, professional email, organisation, country and role, the enquiry category, and any optional context or message you provide. We do not request or process patient data, clinical records, sample identifiers, genomic files, sequences or credentials.
Purposes
We use the data solely to review, respond to and evaluate the institutional fit of your enquiry, and to maintain the related correspondence. We do not use it for advertising or profiling and we do not sell personal data.
Legal bases
The legal basis is the legitimate interest of VBS (Article 6(1)(f) GDPR) in reviewing and responding to your enquiry.
Recipients and processors
Enquiries are delivered to VBS through a first-party endpoint on VBS's own AWS infrastructure (Amazon Web Services, EU region eu-south-2, Spain): each submission is validated and stored in Amazon DynamoDB, a notification is published through Amazon SNS, and the relay credential is held in AWS Secrets Manager. A notification of each enquiry is received in a Google (Gmail) inbox. The website is served through AWS (Amazon CloudFront and Amazon S3). The website's typeface (JetBrains Mono) is self-hosted on VBS's own infrastructure, so the browser makes no third-party font request.
International transfers
Enquiry data is stored on VBS's own AWS infrastructure in the European Union (region eu-south-2, Spain) and is not transferred outside the European Economic Area for storage. A notification of each enquiry is received in a Google (Gmail) inbox, and Google may process that email outside the EEA under its own safeguards (e.g. Standard Contractual Clauses).
Retention
Enquiries that do not progress are retained for up to 12 months and then deleted or anonymised. If an evaluation or relationship begins, the data is retained for its duration and the legally required period.
Your rights
You may exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to the contact address in this policy. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
Security
The website is served over HTTPS with a strict security-headers policy. Enquiry data is minimised, is not stored in the browser, and is not sent to analytics. The form asks for no sensitive data; any data exchange for an evaluation happens only through a separately agreed, authorised secure channel.
Updates and contact
We may update this policy; the version and dates above identify the current text. For any privacy question or to exercise your rights, contact VBS at the address in this policy.
Related documents
Questions about this document
For questions about this notice, contact Vanguard Biotech Systems.