Privacy Policy

In GABYPRADO.COM (xcentric lab s.l.) we work to guarantee the privacy in the treatment of your personal data.

We have updated our Privacy Policy to clearly disclose how we collect, use and safeguard the data of the people who contact us:

  • Responsible for the treatment
  • Purposes of data processing
  • Duration of data processing
  • Legitimation for data processing
  • Communication of your data
  • Your rights
  • Mandatory or optional nature of the information provided by the user
  • Safety measures

Responsible for the treatment

Gabriela Prado Salas, through the company xcentric lab s.l. is RESPONSIBLE for the processing of the USER’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of 27 April (GDPR), and Organic Law 3/2018, of 5 December (LOPDGDD).

The interested party who provides Gaby Prado / xcentric lab s.l.  with personal data through this or by other means is informed that the processing of his/her data is carried out by:

NIF/CIF: B66922303
Registered Address: Passeig del Remei 80A (08460) Santa María de Palautordera.
Phone: 687607496
E-mail Address: hola (at)

Purposes of Data Processing

In GABYPRADO.COM data processing is done to maintain a business relationship and because the treatment is legitimized by Article 6 of the GDPR.
The following purposes depending on the reason for which the USER has provided it to us:

  • Contact the sender of the information, respond to your request, request or inquiry made through any of the forms of contact that are made available to the USER on the website of the RESPONSIBLE and manage the publication of queries and comments as well as make a subsequent follow-up.
  • Manage, where appropriate, the participation of the USER in specific requests through the contact form.
  • Manage, where appropriate, your order and carry out the service contracted by the USER, its billing and collection.
  • Manage and control the client portfolio.
  • Evaluate and manage, if necessary, their curriculum vitae for selection processes that adapt to their professional profile and carry out the necessary actions for the selection and hiring of personnel.
  • Sending commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enable commercial communications.

These communications will be made by the RESPONSIBLE and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement.

In this case, third parties will never have access to personal data.

No communication of personal data to third parties is foreseen, except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the RESPONSIBLE has signed confidentiality and data processor contracts required by the privacy regulations in force.

Duration of Data Processing

The data for the management of the relationship with the customer and the billing and collection of services will be retained for as long as the contract is in force. Once this relationship has ended, if applicable, the data may be kept for the time required by the applicable legislation and until any liabilities arising from the contract expire.

Data for the management of queries and requests will be kept for the time necessary to respond to them, with a maximum period of one year.

Data relating to postings of comments on our products will be kept for the duration of the validity and advertising of the products or services to which they refer, unless you express your wish to have them deleted at any time.

The data for sending commercial communications about our products or services will be kept indefinitely until, if necessary, you express your desire to delete them.

Resume data for selection processes will be kept for three months.

When the data is no longer needed, it will be deleted with security measures to ensure the anonymization of the data or the total destruction of the data.

Legitimation for Data Processing

The legal basis for the processing of your data for the purposes is the performance of the corresponding service.

The prospective offer of products and services to customers is based on the satisfaction of the legitimate business interest consisting of being able to offer our customers the contracting of other products or services and thus achieve their loyalty. Such legitimate interest is recognized by the applicable legal regulation (General Data Protection Regulation), which expressly permits the processing of personal data on that legal basis for direct marketing purposes.

However, we remind you that you have the right to object to this processing of your data by any of the means described in this Policy.

The basis for sending commercial communications to non-customer users is the consent that has been requested, which may be revoked at any time. The withdrawal of such consent shall in no case affect the performance of the contract, but the processing of data for that purpose previously carried out shall not lose its lawfulness because the consent has been withdrawn.

The basis for the processing of resumes is the consent given by the candidate when sending it to participate in selection processes.

Communication of your Data

The data will be communicated to the following entities:

To the suppliers of the products marketed by GABYPRADO.COM / XCENTRIC LAB S.L.

To the financial entities through which the management of collections and payments is articulated.

To the competent public administrations, in the cases provided for in the Law and for the purposes defined therein.

Your Rights

Any person who provides us with their data has the following rights:

Any person has the right to obtain confirmation as to whether we are processing personal data concerning him/her. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under the conditions provided for in the General Data Protection Regulation, data subjects may request the limitation of the processing of their data or their portability, in which case we will only keep them for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. If you have given consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. In these cases, we will stop processing the data or, where appropriate, we will stop doing so for that specific purpose, except for compelling legitimate reasons or the exercise or defense of possible claims.

The rights of access, rectification, limitation of processing, deletion, data portability, cancellation and opposition to processing can be exercised, with the corresponding accreditation, through the means of contact listed in the “Data Controller” section of this Privacy Policy.

Contact information to exercise your rights:

Registered Address: Passeig del Remei 80A (08460) Santa María de Palautordera.
E-mail Address: hola (at)

Mandatory or Optional Nature of Information Provided by User

USERS, by checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to fulfill their request, by the provider, being voluntary the inclusion of data in the remaining fields. The USER guarantees that the personal data provided to the RESPONSIBLE are truthful and is responsible for communicating any changes to them.

The RESPONSIBLE informs that all data requested through the website are mandatory, as they are necessary for the provision of optimal service to the USER. In the event that not all data is provided, there is no guarantee that the information and services provided will be completely tailored to your needs.

Security Measures

That in accordance with the provisions of the regulations in force on personal data protection, the RESPONSIBLE is complying with all provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The RESPONSIBLE guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the USERS and has communicated the appropriate information to them so that they can exercise them.

For more information about privacy safeguards, you can contact the RESPONSIBILITY MANAGER at

Passeig del Remei 80A (08460) Santa María de Palautordera.
E-mail Address: hola (at)

Scroll to Top