Privacy Policy

Effective date: August 2026

Data Controller

This privacy policy applies to all websites and digital publications operated by the Company, including:

wtmbgroup.com — the Company's corporate website
www.biopharmatrend.com — an online media and research platform covering biotechnology and life sciences

Our newsletter "Where Tech Meets Bio" is published via the Substack platform at www.techlifesci.com. Substack acts as a data processor on our behalf for newsletter delivery and subscription management. However, cookies and platform functionality on techlifesci.com are governed by Substack's own Privacy Policy 🡭, which we do not control. This privacy policy applies to the personal data we collect and process through Substack (such as your email address and subscription data), but not to Substack's own platform operations.

The data controller is:

WTMB Research & Media SL
CIF: B93869147
C/ Almirante Cadarso nº 26, 46005 Valencia, Spain
Email: info(at)wtmbgroup.com

The Company is the data controller responsible for your personal data within the meaning of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales ("LOPDGDD").

This privacy policy forms part of our Terms of Use.

What Information We Collect

Information collected automatically

When you visit our websites, we automatically collect non-personally-identifying information of the sort that web browsers and servers typically make available, including browser type, language preference, referring site, operating system, and the date and time of each visit. We also collect potentially personally identifying information in the form of Internet Protocol (IP) addresses.

We collect this information to understand how visitors use our websites, to improve its content and design, and to monitor its security.

Information you provide directly

When you subscribe to our newsletter, register an account, submit content, or contact us, you may provide us with personal information including your name, email address, and any other information you choose to include. When registering as a contributing author, we may also collect a short biography, photograph, and links to your public profiles.

Information from third parties

We may receive information about you from other users of our websites — for example, when another user provides your details to register you as a contributor, with your authorisation.

How We Use Your Information

We use the information we collect for the following purposes:

To deliver and maintain our websites and newsletter
To process and manage your subscription
To identify you as an author or contributor
To enable secure login to your account
To send you newsletter editions and updates related to your subscription
To improve our websites's content, layout, and user experience
To analyse website usage through analytics tools
To comply with legal obligations
To respond to your enquiries

Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal bases:

Consent (Article 6(1)(a) GDPR): When you subscribe to our newsletter, submit content, or otherwise provide your information voluntarily. You may withdraw your consent at any time.
Legitimate interest (Article 6(1)(f) GDPR): For website analytics, security monitoring, and improving the user experience. Our legitimate interest is balanced against your rights and does not override your fundamental freedoms.
Contractual necessity (Article 6(1)(b) GDPR): Where processing is necessary to perform a contract with you, such as providing paid subscription services.
Legal obligation (Article 6(1)(c) GDPR): Where we are required to process your data to comply with applicable law.

Data We Process

Data category	Purpose	Legal basis	Retention
Email address	Newsletter delivery, account management	Consent / Contract	Until you unsubscribe or account is deleted
Name	Author attribution, account identification	Consent / Contract	Until you request removal or account is deleted
IP address	Security, analytics	Legitimate interest	26 months (analytics), logs deleted after 12 months
Browser and device data	Analytics, website optimisation	Legitimate interest	26 months (aggregated in analytics)
Payment data (if applicable)	Subscription processing	Contract	Managed by Stripe; we do not store card details
Author biography and photo	Publication on website	Consent	Until you request removal

Data Sharing and Processors

We share your personal data only with the following third-party processors, who process data on our behalf under appropriate data processing agreements:

Processor	Purpose	Location	Privacy Policy
Substack	Newsletter hosting and delivery	USA	Privacy Policy 🡭
Stripe	Payment processing	USA	Privacy Policy 🡭
DigitalOcean	Website hosting	USA/EU	Privacy Policy 🡭
Google Analytics	Website analytics	USA	Privacy Policy 🡭
Google Workspace	Email and document management	USA/EU	Privacy Policy 🡭

We do not sell, trade, or otherwise share your personal information with any other third parties, except where required by law.

International Data Transfers

Some of our processors are located outside the European Economic Area (EEA), primarily in the United States. Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, including:

The European Commission's adequacy decisions where applicable
Standard Contractual Clauses (SCCs) approved by the European Commission
The processor's participation in recognised data protection frameworks

By using our websites and providing your personal data, you acknowledge that your data may be transferred to and processed in countries outside the EEA, subject to these safeguards.

Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected:

Newsletter subscribers: Until you unsubscribe or request deletion.
Registered users and contributors: Until you request account deletion, or for 3 years after your last interaction with our websites, whichever is earlier.
Analytics data: Aggregated and anonymised data may be retained indefinitely. Identifiable analytics data is retained for no longer than 26 months.
Payment data: Managed by Stripe in accordance with their retention policies and applicable financial regulations. We do not store payment card details.

After the retention period, personal data is deleted or anonymised.

Cookies

We use cookies and similar technologies to provide functionality, analyse usage, and improve your experience. For full details, please refer to our Cookies Policy.

Your Rights

Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:

Right of access — to obtain confirmation of whether your data is being processed and to receive a copy of it.
Right to rectification — to have inaccurate or incomplete data corrected.
Right to erasure ("right to be forgotten") — to request deletion of your data where there is no compelling reason for its continued processing.
Right to restrict processing — to request that we limit how we use your data.
Right to data portability — to receive your data in a structured, commonly used, machine-readable format.
Right to object — to object to processing based on legitimate interest, including profiling.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Right not to be subject to automated decision-making — including profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact us at: info(at)wtmbgroup.com

We will respond to your request within one month. If your request is complex or we receive a high volume of requests, we may extend this period by a further two months, and we will inform you of any such extension.

Right to Lodge a Complaint

If you believe that your data protection rights have been infringed, you have the right to lodge a complaint with the relevant supervisory authority:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es 🡭

You also have the right to lodge a complaint with the supervisory authority of your habitual residence or place of work within the EU.

Email Marketing

We send newsletter editions and marketing communications through the Substack platform. When you subscribe, Substack collects your email address, IP address, and the date and time of subscription.

You can unsubscribe at any time by:

Clicking the unsubscribe link at the bottom of any email
Contacting us at info(at)wtmbgroup.com

We do not send unsolicited marketing communications. All email marketing is based on your explicit consent at the time of subscription.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include HTTPS encryption, secure hosting with reputable providers, and access controls limiting who can access personal data.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

Our websites is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that data promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Material changes will be posted on this page with an updated effective date. Where practicable, we will notify subscribers of material changes by email.

Contact

For any questions about this privacy policy or to exercise your data protection rights, contact:

WTMB Research & Media SL
C/ Almirante Cadarso nº 26, 46005 Valencia, Spain
info(at)wtmbgroup.com