privacy policy and GDPR

Last Updated: July 1, 2026

Introduction

PEPTIDÁE respects your right to privacy and is committed to protecting the personal data of all website users, customers, business partners, and visitors.

This Privacy Policy and GDPR – Personal Data Processing Policy explains how we collect, use, store, disclose, and protect your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable national legislation.

By using this website or providing your personal data, you acknowledge that you have read and understood this Policy.

Data Controller

The Data Controller is:

NEDERMANN LAB SRL, a company registered in Romania under registration number J2026030228009, with its registered office in Cluj-Napoca, Cluj County, Romania.

If you have any questions regarding the processing of your personal data, please contact us using the information available on the Contact page of our website.

Personal Data We Collect

Depending on how you use our website, we may collect the following categories of personal data:

Identification Data

Full name
Company name
Tax Identification Number (where applicable)
Job title or position within the company

Contact Information

Email address
Telephone number
Billing address
Shipping address

Order Information

Order history
Products ordered
Order value
Payment method used
Order status

Technical Data

IP address
Browser type
Operating system
Device information
Cookies and similar technologies
Website usage data

How We Collect Your Data

Personal data may be collected:

when you create an account
when you place an order
when you complete forms on our website
when you subscribe to our newsletter
when you contact us
through cookies and similar technologies
through your use of the website

Purposes of Processing

Your personal data may be processed for the following purposes:

processing orders
issuing invoices and tax documents
delivering products
communicating regarding your orders
verifying identity and business eligibility
fraud prevention
improving our services
managing customer accounts
complying with legal obligations
handling complaints and customer support requests
statistical analysis
marketing communications, only with your consent where required

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

performance of a contract
compliance with legal obligations
legitimate interests
the data subject's consent
protecting the legitimate rights and interests of PEPTIDÁE

Disclosure of Personal Data

Your personal data may be shared only where necessary with:

payment service providers
courier and logistics companies
IT service providers
hosting providers
analytics and cybersecurity service providers
public authorities where required by law
legal advisors, accountants, and auditors
We do not sell or rent your personal data to third parties.

International Data Transfers

In certain circumstances, your personal data may be processed or stored outside the European Economic Area (EEA).

Whenever such transfers occur, we ensure that appropriate safeguards are implemented, including:

Standard Contractual Clauses approved by the European Commission
Adequacy Decisions
other lawful transfer mechanisms permitted under the GDPR

Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal obligations.

Once the applicable retention periods expire, personal data will be securely deleted, anonymized, or archived.

Data Security

PEPTIDÁE implements appropriate technical and organizational measures to protect personal data against:

unauthorized access
accidental disclosure
unauthorized alteration
destruction
loss
misuse

These measures include, but are not limited to:

SSL/TLS encrypted connections
access control mechanisms
secure authentication systems
infrastructure monitoring
regular data backups
internal information security policies

Your Rights

Under the GDPR, you have the following rights:

the right to be informed
the right of access
the right to rectification
the right to erasure ("Right to be Forgotten")
the right to restriction of processing
the right to data portability
the right to object
the right to withdraw your consent at any time
the right not to be subject to a decision based solely on automated processing
the right to lodge a complaint with the competent data protection authority

This website uses cookies and similar technologies to operate our services, perform analytics, and improve the user experience.

More detailed information is available in our Cookie Policy.

Links to Third-Party Websites

Our website may contain links to websites or services operated by third parties.

PEPTIDÁE is not responsible for the privacy practices or content of such third-party websites.

We encourage you to review the privacy policies of every website you visit.

Changes to this Privacy Policy and GDPR Policy

We reserve the right to amend this Privacy Policy and GDPR Policy whenever necessary to reflect legislative, technological, or operational changes.

The updated version will be published on this page together with the date of the latest revision.

Contact

If you have any questions regarding this Privacy Policy and GDPR Policy or the way we process your personal data, please contact us using the information available on the Contact page of our website.

We will respond to your requests within a reasonable period and in accordance with applicable data protection legislation.

We are committed to handling all requests promptly, transparently, and in compliance with Regulation (EU) 2016/679 (GDPR).

LEGAL DISCLAIMER

The products offered on this website are intended exclusively for laboratory research use. They are not medicines, dietary supplements, cosmetics, food products, or products intended for human or veterinary use.

By purchasing products from this website, customers confirm that they comply with all applicable laws and regulations in their respective jurisdiction.

Privacy Policy and GDPR Compliance