Privacy Policy

1. Data Controller

2. What Personal Data We Process

Depending on how you interact with us, we may process the following categories of data:

2.1. Data Provided by You

• Contact form: name, email, reason/project type, and message content (and any additional data you include).
• Email contact: the data contained in your communication.

2.2. Technical Data (browsing/security)

When visiting the Website, technical data may be generated such as IP address, device identifiers, date and time, pages visited, and logs necessary for security, abuse prevention, and site operation.

Note: please avoid including especially sensitive data in your message (health, biometric, ideology, etc.) or confidential information that is not necessary.

3. Why We Process Your Data (purposes)

We process your data to:

• Manage and respond to your requests sent through the form or by email.
• Prepare a proposal, quote, or pre-contractual relationship when your inquiry requires it.
• Maintain Website security, prevent fraud, abuse, or spam, and perform maintenance tasks.
• Comply with applicable legal obligations (for example, requirements from competent authorities).

We will not use your data to send you commercial communications unless you expressly request it or clearly authorize us (opt-in).

4. Legal Basis (legitimation)

The legal bases we use are:

• Pre-contractual measures at the request of the data subject (e.g., quote request or information for contracting).
• Consent (e.g., when you submit the form and request that we respond to you).
• Legitimate interest in ensuring Website security, preventing abuse, and ensuring proper operation.
• Legal obligation when applicable.

5. How Long We Keep Your Data

We keep data only for as long as necessary to fulfill the described purposes:

• Form/email inquiries: for the time necessary to handle the request and, subsequently, for a reasonable period of up to 12 months for follow-up, traceability, and defense against potential claims.
• If a contractual relationship is established: during the relationship and, subsequently, for the applicable legal periods (tax, accounting, contractual).

We may retain blocked data when necessary for the formulation, exercise, or defense of claims.

6. Who We Share Your Data With (recipients)

In general, we do not share your data with third parties.

However, your data may be accessed by:

• Service providers acting as data processors, necessary to operate the Website or manage communications (for example: hosting, email services, support tools, or CRM if used).
• Competent authorities, when there is a legal obligation.

7. International Transfers

If we use providers located outside Andorra or the European Economic Area, we will apply the appropriate safeguards required by regulations (e.g., standard contractual clauses or other recognized mechanisms).

8. Your Rights

You may exercise, as applicable, the rights of:

• Access
• Rectification
• Erasure
• Objection
• Restriction of processing
• Portability
• Withdrawal of consent (when processing is based on consent)

To exercise them, send an email to contact@beast-labs.com with the subject "Data Protection" indicating:

• your name and contact email,
• the right you wish to exercise,
• and the information necessary to process your request.

We may request additional information to verify your identity when necessary.

9. Complaints to the Supervisory Authority

If you believe your rights have not been properly addressed, you may file a complaint with the Andorran Data Protection Agency (APDA) or the competent authority as applicable.

10. Security

We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, loss, or destruction. However, no system is completely infallible.

11. Changes to This Policy

We may update this Privacy Policy. The current version will be the one published on the Website with the "Last updated" date.