EVALaboratoire

Privacy policy

Last updated 2026-07-03

Data controller

The data controller is EVA — Biotecnologia Avançada, Lda. (NIPC 510319726), a company incorporated under Portuguese law.

For any question about your data: [email protected].

Data we process

Professional account data (identity, organisation, contact details) at sign-up; order and billing data where applicable; the content of messages sent via the contact form; technical browsing data (logs, cookies).

We do not collect sensitive data and only request the information necessary for each purpose.

Purposes and legal bases

Account and order management (performance of the contract); responding to your requests (legitimate interest); invoicing and accounting/tax obligations (legal obligation); audience measurement and communications (consent, where required).

Recipients and processors

Your data is accessible to authorised EVA staff and to its technical processors: hosting (Hetzner Online GmbH) and, depending on enabled features, email, payment, anti-bot security and audience-measurement providers.

These providers act only on EVA's instructions, under data-processing agreements (Art. 28 GDPR).

Affiliate programme: when an order is placed using a referrer's code, that referrer is given the date, the reference and the retained amount of that order, for the sole purpose of calculating their commission. No data identifying you — name, email address, delivery address, order contents — is passed on to them.

Transfers outside the European Union

Some providers may process data outside the EU. In that case, transfers are governed by appropriate safeguards (the European Commission's standard contractual clauses).

Retention period

Data is kept for as long as necessary for each purpose, then archived or deleted: account data while the account is active; billing documents for the applicable legal periods.

Cookies

The site uses cookies strictly necessary for its operation and, subject to your consent, audience-measurement cookies. Cookie management will be offered through a dedicated consent tool.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent. To exercise them: [email protected].

You may lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

Security

EVA implements appropriate technical and organisational measures to protect your data against unauthorised access, alteration or disclosure.