Privacy Policy of Kelp Labs

Last updated: 31/10/2025

Owner
Kelp Labs, S.L.
Tax ID (NIF)
B22870646
External DPO
YOUANDLAW, S.L.

1. Data Controller

Kelp Labs, S.L.
Registered office: Calle Antonio Acuña 3, 6º Centro Izquierda
28009 Madrid, Spain
Tax ID (NIF): B22870646

Kelp Labs is the controller of the personal data collected through the website kelp.work, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on Data Protection (LOPDGDD).

2. Data Protection Officer

The External Data Protection Officer appointed by Kelp Labs is YOUANDLAW, S.L., in accordance with Article 37 of the GDPR and Article 34 of the LOPDGDD.

DPO contact: legal@kelp-labs.com

3. Purposes and Legal Bases for Processing

Personal data collected through the website will be used solely for the following purposes:

a) Handling enquiries or communications

Sent to Kelp Labs through the contact form or by email.

Legal basis: Art. 6.1(b) GDPR: taking pre-contractual steps at the request of the data subject.

b) Newsletter and informational communications

Subscription to the newsletter and sending of communications related to the activities of Kelp Labs.

Legal basis: Art. 6.1(a) GDPR: consent of the data subject.

c) Job applications

Receipt and handling of applications sent through the "Work with us" form.

Legal basis: Art. 6.1(b) GDPR: application of pre-contractual measures at the request of the data subject.

Data will be processed fairly, lawfully and transparently, limited to the purposes stated and for no longer than strictly necessary for them.

4. Disclosure and International Transfers of Data

Kelp Labs does not plan to disclose personal data to third parties except where necessary to comply with legal or contractual obligations, nor to carry out international transfers of data.

Should such transfers take place in the future, Kelp Labs will ensure they are carried out with appropriate safeguards in accordance with Articles 44 to 49 of the GDPR, informing data subjects in advance.

5. Data Retention

Personal data will be kept only for as long as necessary to fulfil the purpose for which it was collected and to determine any liabilities arising from the processing.

Once the legal retention periods have expired, the data will be securely deleted in accordance with Kelp Labs' internal information retention policies.

6. Rights of Data Subjects

Users may at any time exercise their rights of:

  • Access
  • Rectification
  • Erasure
  • Restriction
  • Objection
  • Portability

In accordance with Articles 15 to 22 of the GDPR, and may withdraw their consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, contact the external Data Protection Officer, YOUANDLAW, S.L., at the email address: legal@kelp-labs.com

Data subjects have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their personal data does not comply with the regulations in force.

7. Security Measures

Kelp Labs will implement appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of personal data, in accordance with Article 32 of the GDPR and the principle of accountability in Article 5.2 of the GDPR.

These will include, among others:

  • Access controls
  • Backups
  • Restoration procedures
  • Encryption mechanisms where appropriate

Kelp Labs staff will receive regular training in data protection and information security.

8. Updates and Validity

This Privacy Policy will be reviewed annually by the External Data Protection Officer, YOUANDLAW, S.L., or sooner in the event of legislative changes or changes to the processing carried out by Kelp Labs.

The updated version will be published on the website kelp.work, stating the date of publication, and will replace any previous version.

This policy will remain in force until it is replaced by a new version approved by Kelp Labs and communicated through the same website.


Last updated: 31/10/2025