Privacy Policy

Repilabs is the data controller responsible for the personal data described in this policy. For any data protection matter, contact us at info@repilabs.com.

When you submit the contact form or email us, we may collect:

• your name and the company or institution you represent;
• your work email address and country;
• the contents of your message, including any compounds and quantities you mention.

We may also process limited technical data — such as aggregate, anonymized usage statistics and security logs — to keep the Website secure and functioning.

We process personal data for the following purposes and on the following legal bases:

• Responding to enquiries: legitimate interest (Art. 6(1)(f) GDPR); retained for as long as needed to handle the enquiry and any resulting business relationship.
• Order processing and supply: performance of a contract (Art. 6(1)(b) GDPR); retained for the duration of the order and related obligations.
• Accounting and tax records: legal obligation (Art. 6(1)(c) GDPR); retained for the period required by applicable accounting and tax law.
• Eligibility and age verification: legal obligation and legitimate interest; retained for the period of the business relationship.
• Website security: legitimate interest; retained for a limited period following any incident.
• Strictly necessary cookies: legitimate interest; no consent required; session-based.
• Analytics cookies (where enabled): consent (Art. 6(1)(a) GDPR); retained for a limited period.
• Handling data-subject and compliance requests: legal obligation; retained for a limited period after resolution.

We share personal data only where necessary: with processors who help us operate the Website, communications, and shipping; with independent professional advisers such as auditors and lawyers; and with public authorities where required by law. We do not sell personal data.

International transfers: where data is transferred outside the European Economic Area, we rely on European Commission adequacy decisions, Standard Contractual Clauses, or other lawful mechanisms under Chapter V of the GDPR. Copies of the relevant safeguards are available on request.

Subject to applicable law, you may exercise the following rights:

• Access (Art. 15): obtain confirmation and a copy of your personal data.
• Rectification (Art. 16): correct inaccurate or incomplete data.
• Erasure (Art. 17): request deletion, subject to legal exceptions.
• Restriction (Art. 18): limit processing while a matter is resolved.
• Objection (Art. 21): object to processing based on legitimate interest.
• Portability (Art. 20): receive your data in a structured, machine-readable format.
• Withdraw consent (Art. 7(3)): effective for future processing.
• Complaint (Art. 77): lodge a complaint with your local data protection authority.

We respond to requests within 30 days, extendable to 90 days for complex requests.

The Website uses only what is necessary to function and, where enabled, privacy-respecting analytics to understand aggregate usage. We do not use advertising cookies.

We apply reasonable technical and organizational measures — including encryption in transit (HTTPS/TLS), access controls, logging, and backups — to protect personal data. Where a breach is likely to result in a risk to your rights, we notify the relevant supervisory authority and, where required, affected individuals in accordance with Articles 33–34 of the GDPR.

The Website and the Goods are intended exclusively for adult professionals and institutions. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact us at info@repilabs.com.

We may update this policy to reflect changes in our processing or in the law. The current version is always available at repilabs.com. We will provide advance notice of substantial changes where appropriate.

For any question about this policy or your personal data, contact us at info@repilabs.com.