In compliance with the Personal Data Protection regulations and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the treatment of personal data and the free circulation of these data (hereinafter, "RGPD") and with Organic Law 3/2018, of December 5, on the protection of personal data and guarantee of digital rights (hereinafter, "LOPDGDD" ), then Olistic Research Lab SL (hereinafter referred to as “ Olistic ” or “ Entity ” interchangeably), we provide you with information regarding the processing of your personal data.




NIF: B67622431

POSTAL ADDRESS: Ronda General Miter, 126 - Attic 2ª, 08021, Barcelona






Olistic may collect information about you through the registration form as a user and login to the channels enabled for this purpose.


Once registered and logged in, the user will be able to provide information, update data, consult information and manage their orders.


Channels have been set up on the web platform that allow users to contact Olistic and request any information about its products, services or make complaints, claims or comments. When contacting us, it may be necessary to collect personal data that allows us to respond to the requested management.


When you purchase a product in the Olistic online store, your data will be collected and it will be necessary for you to provide the payment platform with your bank and/or financial information to proceed with the payment, as well as the necessary information for sending the product. product.


The possibility of subscribing to Olistic's commercial communications is provided on the website through which you can stay informed about products, offers or news and/or other matters of interest to you.


The possibility of making a diagnosis of hair health is provided on the web. For this, it is necessary to collect personal data related to lifestyle and health data that will be used to prepare the diagnosis that will be sent by email to the user.


Olistic may collect information about your browsing on its platform by installing cookies. We recommend that you read the Cookies Policy for more information.



The purposes and legal bases through which Olistic processes your personal data are the following:

  • The data linked to the registration of a user will be processed in order to generate the user's profile in the private space of the web based on their consent when requesting registration (article 6.1.a) of the GDPR).
  • The data generated by registered users will be used to complete the user profile and enable the functionalities available such as order management, history or favorites consultation and other related functionalities available to registered users. This treatment may be based on the application of pre-contractual measures (article 6.1.b) of the GDPR) or based on consent (article 6.1.a) of the GDPR), as the case may be.
  • The assistance, management and attention to the requests, comments, queries, complaints or claims that you formulate through the channels enabled on the Olistic website are carried out based on your consent when submitting the request, comment, query, complaint or claim ( Article 6.1.a) of the GDPR).
  • The execution of the contractual obligations established between Olistic and you on the occasion of the acquisition of products, including the redirection to the corresponding payment platform, is carried out based on the contractual execution or the application of pre-contractual measures (article 6.1.b) of the GDPR).
  • Compliance with Olistic's legal obligations, possible judicial resolutions and other decisions determined by authorities of a public nature (including the State security forces and bodies in compliance with the obligations imposed by the applicable criminal regulations) will be carried out in based on compliance with legal obligations (article 6.1.c) of the GDPR) applicable to Olistic.
  • The sending of electronic commercial communications informing about services, promotions, products or activities is carried out based on your consent (article 21.1 of Law 34/2002, of July 11, on services of the information society and electronic commerce, and article 6.1.a) of the GDPR).
  • The data collected through the diagnostic tool will be processed exclusively for the preparation of the study on hair health that will be sent to you by email. This data processing may include the processing of health data and explicit consent will be requested in accordance with the provisions of article 9.1.a GDPR.
  • The sending of surveys related to the degree of satisfaction and functioning of our products and/or services with the purpose of improving them is carried out based on the legitimate interest of Olistic (article 6.1.f) of the GDPR).
  • The performance of studies and statistical reports in order to know the operation of Olistic's services and/or products is carried out on the basis of the legitimate interest (article 6.1.f) of the GDPR) in improving its products and/or services and developing and offer new solutions.

Personal data will be processed during the period of time necessary to comply with the purposes described in this Privacy Policy and with the obligations imposed by applicable laws, the legal prescription periods, and for the formulation, exercise or defense of claims ( for this case the personal data will be duly blocked).

Health data related to the diagnostic tool will be anonymized after sending the study by email.


Depending on the purpose for which your personal data will be processed, the following subjects may access them:


The Public Administrations, bodies and/or relevant competent authorities, in cases where there is a requirement, a legal obligation or there are sufficient indications and/or suspicions of a criminal offense (crime).


Payment platforms that act as data controllers and collaborators and third-party service providers that will process personal data as data processors.


Olistic, through providers, transfers personal data to countries located outside the European Economic Area. The international data transfers that are carried out have the appropriate level of protection in accordance with the Data Protection regulations. In any case, international data transfers carried out by Olistic are endorsed, in particular, by the use of standard contractual clauses approved by the European Commission.




The processing of personal data carried out by Olistic grants the owner of these the following rights:

  • Right to request access to personal data : you can check if Olistic treats your personal data, and if so, access them.
  • Right to request rectification if the data is inaccurate, or complete the data that is incomplete.
  • Right to request the deletion of your data .
  • Right to request the limitation of your treatment : in this case, only your personal data will be kept for the exercise or defense of claims.
  • Right to oppose the treatment : Olistic will stop processing your personal data, with the exception that they must continue to be processed for legitimate reasons or for the exercise or defense of possible claims.
  • Right to data portability : if you want your data to be processed by another controller, Olistic will facilitate, whenever technically possible, the transfer of your information to the new controller.
  • Right not to be subject to a decision based solely on the automated processing of your personal data.

In order to exercise your rights, you must contact Olistic by sending an e-mail to or in writing to the postal address mentioned in this Privacy Policy. Olistic reminds you that in the event that the treatment carried out based on your consent (article 6.1.a) or 9.1.a of the GDPR) you may revoke it at any time (without affecting the legality of the treatment carried out prior to the revocation). .

Likewise, whenever you consider it appropriate, you may file a claim with the Spanish Agency for Data Protection (



  • Child Use Policy . Olistic's services are aimed exclusively at people of legal age. In this sense and, consequently, Olistic does not deliberately collect information from minors. In any case, if you are a father, mother or legal representative and consider that your child or ward has sent us personal data, please contact Olistic by sending an email to
  • Personal data of third parties . If the personal data provided belonged to a third party, you guarantee that you have informed said third party of the aspects contained in this Privacy Policy, and have obtained their consent to provide the Entity with your data for the purposes indicated in said Policy.
  • links . On the Olistic website there may be links to other websites that the entity considers to be useful and of interest to you. Please note, however, that Olistic does not endorse the content or services on such platforms, nor is it responsible for their privacy policies. Olistic recommends that the privacy policies of all the platforms visited be taken into account and consulted. Remember that what is indicated in this Privacy Policy only applies to the data that Olistic collects and/or processes.
  • Updates . The processing of your personal data will be carried out in accordance with the provisions of the Privacy Policy in force at the time your personal data is collected. In the event that Olistic carries out a modification on the treatment of your data, you will be informed in a timely manner about it.
  • Contact Olistic. If at any time you consider that the provisions established in this Privacy Policy have not been complied with. Please report any issues by emailing .


Update date 7/25/2023