GDPR Policy | PEPTIDÁE

GDPR Privacy Policy on the Processing of Personal Data

Last Updated: July 1, 2026

Introduction

This GDPR Privacy Policy on the Processing of Personal Data describes how PEPTIDÁE collects, uses, stores, protects, and processes the personal data of website users, customers, business partners, and other individuals with whom it interacts.

Personal data is processed in accordance with:

Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR)
applicable national data protection legislation
other applicable legal provisions

Data Controller

The Data Controller is:

NEDERMANN LAB SRL, a company registered in Romania.

For any requests regarding the processing of personal data, please contact us using the contact information available on the Contact page of our website.

Categories of Personal Data Processed

Depending on your relationship with PEPTIDÁE, we may process the following categories of personal data:

Identification Data

full name
company name
job title
tax identification number (where applicable)
Contact Data
email address
telephone number
billing address
shipping address
Commercial Data
order history
products ordered
transaction value
tax documents
communication history
Technical Data
IP address
browser information
operating system
online identifiers
cookies
website usage data

Purposes of Processing

Personal data may be processed for the following purposes:

customer account management
order processing
issuing tax documents
product delivery
communication regarding orders and services
verification of identity and business eligibility
compliance with legal obligations
fraud prevention and website security
handling complaints
service improvement
statistical analysis
sending marketing communications, only where consent has been provided, when required

Legal Bases for Processing

Personal data is processed on one or more of the following legal grounds:

performance of a contract or taking steps prior to entering into a contract
compliance with a legal obligation
legitimate interests of the Data Controller
consent of the data subject
establishment, exercise, or defense of legal claims

Data Recipients

Where necessary, personal data may be shared with:

payment service providers
courier and logistics companies
IT and hosting service providers
security and analytics service providers
legal advisors, accountants, and auditors
public authorities or competent institutions where required by law

All partners processing personal data on behalf of PEPTIDÁE are required to comply with GDPR requirements and implement appropriate security measures.

Transfers Outside the European Economic Area (EEA)

Where personal data is transferred outside the European Economic Area (EEA), such transfers will take place only under appropriate safeguards, including:

Standard Contractual Clauses approved by the European Commission
adequacy decisions
other transfer mechanisms permitted under the GDPR

Data Retention Period

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or for the period required under applicable accounting, taxation, and document retention laws.

Once the applicable retention period expires, personal data will be securely deleted, anonymized, or archived.

Rights of Data Subjects

In accordance with the GDPR, you have the following rights:

the right to be informed
the right of access to your personal data
the right to rectification
the right to erasure ("right to be forgotten")
the right to restriction of processing
the right to data portability
the right to object to processing
the right to withdraw consent at any time without affecting the lawfulness of processing carried out before such withdrawal
the right not to be subject to decisions based solely on automated processing, including profiling, where provided by law
the right to lodge a complaint with the competent data protection authority

Exercising Your Rights

Requests relating to the exercise of your GDPR rights may be submitted using the contact details available on our website.

PEPTIDÁE will respond without undue delay and, in most cases, within 30 days of receiving the request, with the possibility of extending this period where permitted under the GDPR.

Security Measures

To protect personal data, PEPTIDÁE implements appropriate technical and organizational security measures, including:

SSL/TLS encrypted communications
access control mechanisms
secure authentication
regular data backups
continuous system monitoring
internal information security policies
periodic assessment of security measures

Personal Data Breach

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, PEPTIDÁE will act in accordance with the obligations set out by the GDPR, including notifying the competent supervisory authority and, where applicable, the affected individuals within the legally prescribed timeframes.

Policy Updates

PEPTIDÁE reserves the right to update this GDPR Privacy Policy whenever necessary to reflect legislative, technological, or operational changes.

The updated version will be published on this page together with the date of the latest revision.

Contact

If you have any questions regarding the processing of your personal data or the exercise of your GDPR rights, please contact us using the contact details available on the Contact page of our website.

We are committed to handling all requests promptly, transparently, and in full compliance with Regulation (EU) 2016/679 (GDPR).

LEGAL DISCLAIMER

The products offered on this website are intended exclusively for laboratory research purposes. They are not medicines, dietary supplements, cosmetic products, or products intended for human or veterinary use.

By purchasing products from this website, customers confirm that they comply with all applicable laws and regulations in their respective jurisdiction.