EN

Personal Data Privacy Policy

Last updated: 18/10/2025

1) Introduction and scope

At Labyes, we value and respect your privacy. This Policy explains how we collect, use, and protect personal data when you visit www.labyes.com and its territorial subdomains (including, without limitation: labyes.com.ar, labyes.com.br, labyes.com.co, labyes.com.mx) and when you interact with our web forms, newsletters, contests, customer service activities, and complaint handling processes (including pharmacovigilance).

This Policy is complemented by country annexes and local notices (Argentina, Brazil, Colombia, and Mexico) and by our Cookie Policy. If there is any conflict between the global section and a local annex, the annex for the data subject’s country prevails.

Corporate note: For clarity, the entities listed are affiliated companies of the Labyes Group and may act as independent distributors in each country; they may also carry out commercial, marketing, support, or customer service activities as applicable.

2) Controller and contact

Labyes Group composed of affiliated companies of the Labyes Group:

  • Labyes S.A. – CUIT 30-60618845-1 (Argentina). Abel Costa 833, Morón, Provincia de Buenos Aires. CP B1708.
  • Labyes do Brasil Comercial Importadora de Medicamentos e Produtos Veterinários Ltda. – CNPJ 08.632.691/0001-58 (Brasil). Avenida Benjamin de Paula França 338, Bairro Vale Verde, Valinhos – SP, 13279-173.
  • Labyes de Colombia S.A.S. – NIT 901762711 (Colombia). Carrera 9 No. 72-81, Oficina 206, Bogotá D.C.
  • Labyes de México S.A. de C.V. – RFC LME1205149V5 (México). Av. Santa Fe 94, Torre A Piso 7. Col. Zedec Santa Fe. Ciudad de México CP 01219. México.

Single privacy channel: data.privacy@labyes.com. The Group appoints a privacy officer/DPO; identification can be requested through this channel.

3) Applicable legal framework

We process data in accordance with the local data protection laws of the countries where we operate: Argentina (Law 25.326 and supplemental regulations), Brazil (LGPD), Colombia (Law 1581 of 2012 and implementing decrees), and Mexico (LFPDPPP), as well as guidance from competent authorities. Country‑specific details are set out in the annexes.

4) Data we collect

  • Identification and contact details (name, country, email, phone).
  • Professional information for job applications (CV, experience).
  • Browsing and usage data (IP, device/browser type, pages visited, cookie/SDK identifiers).
  • Information you share in forms (inquiries, claims, surveys, subscriptions and/or requests).

We do not collect sensitive or financial data without a legal basis and explicit consent where required.

5) Purposes of processing

Necessary purposes:

  • Responding to inquiries, requests, or complaints (including pharmacovigilance).
  • Complying with legal and regulatory obligations.
  • Website security, fraud and abuse prevention.

Additional purposes (opt‑in depending on jurisdiction):

  • Sending commercial and institutional communications.
  • Analytics and experience improvement (measurement, A/B testing, non‑intrusive personalization).

6) Legal bases

  • Consent (e.g., marketing, non‑essential cookies; explicit consent where required by law).
  • Performance of a contract/service (handling applications, responding to requests).
  • Legal obligation (statutory/regulatory retention, reporting to authorities).
  • Legitimate interests (security, aggregated metrics, fraud prevention) subject to balancing tests and opt‑out mechanisms where required.

7) Cookies and similar technologies

We use cookies/SDKs to operate the site, measure performance and, where you accept, for analytics and advertising. Manage your preferences via the cookie banner and/or your browser settings. See the Cookie Policy.

8) Recipients and international transfers

  • Affiliated companies of the Labyes Group and service providers (hosting, CRM, analytics, support, advisory) under confidentiality and data processing agreements.
  • Administrative/judicial authorities as required.

We transfer data to other countries only with appropriate safeguards (e.g., model contractual clauses or locally recognized instruments, transfer impact assessments, and supplementary measures), in accordance with applicable laws.

9) Retention

We retain data for as long as necessary for the stated purposes, legal/regulatory obligations, and limitation periods applicable in each country. We then delete or anonymize the data per internal policies.

10) Security and incidents

We apply administrative, technical, and physical measures proportionate to risk (access controls, encryption in transit and at rest where applicable, segmentation, backups, security testing). We will notify data subjects and authorities of relevant security incidents when required by law.

11) Data subject rights and how to exercise them

You may exercise your rights by writing to data.privacy@labyes.com. We will respond within the legal time frames applicable in your country of residence. Depending on jurisdiction, rights include access, rectification/update, erasure/deletion, objection, portability, withdrawal of consent, and others provided by local law (see annexes).

12) Minors

We do not knowingly collect data from minors without authorization from a parent or legal guardian. If you believe a minor has provided data without valid consent, please contact us.

13) Third‑party links

The site may contain links to third‑party sites. We do not control their content or policies. We recommend reading their privacy policies.

14) Changes to this Policy

We may update this Policy. We will publish the current version with its effective date.

Annexes

Annex A – Argentina

  • Authority: Agency for Access to Public Information (AAIP).
  • Rights: ARCO (Access, Rectification, Cancellation, and Objection) and other rights recognized by applicable law.
  • Time frames: requests will be handled within the time limits set by current regulations.

Annex B – Brazil

  • Authority: National Data Protection Authority (ANPD).
  • Rights (Art. 18 LGPD): confirmation of processing, access, rectification, anonymization, blocking, erasure, portability, information about data sharing, information about the possibility of not providing consent and its consequences, withdrawal of consent, objection, as well as the right to file a petition with the ANPD.

We may not always be able to fully comply with your request for deletion or objection, insofar as there are cases in which we may continue processing your personal data to comply with legal and/or regulatory obligations, to exercise rights in legal proceedings, to perform your contract with us, to pursue Labyes’ legitimate interests, among other reasons that may prevent us from taking the requested actions. When this occurs, we will inform you in our response and remain available to address any questions.

In addition to the above rights, in Brazil you have the right to petition the National Data Protection Authority (ANPD) if you believe your personal data has been processed unlawfully or in violation of applicable legislation.

Annex C – Colombia

  • Authority: Superintendence of Industry and Commerce (SIC).
  • Rights: to know, update, rectify and delete; to revoke authorization; to file a complaint before the SIC.

Annex D – Mexico

  • Legal address Labyes de México S.A. de C.V.: Av. Santa Fe 94, Torre A Piso 7. Col. Zedec Santa Fe. Ciudad de México CP 01219. México.
  • Authority: National Institute for Transparency, Access to Information and Personal Data Protection (INAI).
  • Rights: ARCO (Access, Rectification, Cancellation and Objection) and withdrawal of consent.