privacy-policy-may-2018

PRIVACY POLICY

1. Who is the data controller?

The data controller is Grifols International, S.A., with address for contact purposes at Avenida de la Generalitat 152, 08174, Sant Cugat del Vallés, Barcelona (España) ("Grifols").

2. Who is the data protection officer at Grifols and how can I contact him/her?

The data protection officer acts as an interlocutor between you and Grifols to ensure Grifols' compliance with the data protection legislation and guarantee your rights under such legislation. You can contact the data protection officer at the following email address: dpo@grifols.com.

3. How does Grifols use your personal data?

Grifols uses your personal data to:

  1. contact you and set up visits so that the companies within the Grifols group may give you a presentation on how Kiro Oncology® works, and
  1. e-mail you information about products, services, activities and events related to the Grifols' group hospital division.

 

When you inform Grifols of your interest in receiving by email information about products, services, activities and any other events related to the Grifols group hospital division, Grifols shall create a user profile for each data subject interested in receiving this information.

4. Why does Grifols use your personal data?

The legal basis that allows Grifols to process your professional and personal data is:

  1. Grifols' legitimate interest in (i) contacting you with the aim of explaining how Kiro Oncology® works in order to assess any potential business opportunities with the entity you represent and, thus, develop our business, (ii) provide your personal data to the European companies within the Grifols group if it were necessary in order to present you how Kiro Oncology® works or to send you the information specified in section 3(b).
  1. your express consent given when you marked the corresponding checkbox to receive information about products, services, activities and any other events relate to the Grifols group hospital division.

 

We understand that this legitimate interest, on which Grifols bases the processing of your data, does not diminish your fundamental rights and freedoms since it is exclusively limited to assessing a potential business opportunity with the entity you represent. However, please bear in mind that you may exercise your right to opposition, at any time, by sending your request to privacy@grifols.com.

5. How long does Grifols retain your personal data?

Grifols will only process your personal data while it assesses a business opportunity with the entity you represent, and, in any event, until you inform us that you do not wish to receive further information about products, services, activities and events related to the Grifols group hospital division.

Once this period has elapsed or you have informed us that you do not wish to receive any notifications, Grifols shall retain your data, without processing it, until the end of the statutes of limitation of any liabilities arising from the processing of your data. The maximum period for storing your data is of five years.

6. With whom does Grifols share your personal data?

Grifols will provide your personal data to the European companies within the Grifols group if it were necessary in accordance with section 4(a). Additionally, if necessary, it will share your personal data with third parties in order to comply with its legal obligations.

7. What are your rights when you provide Grifols with your personal data?

Right

Content

Notification channel

Access

You may access your personal data included in Grifols' files.

privacy@grifols.com

 

Rectification

You may modify your personal data if it is inaccurate.

Erasure

You may request that your personal data is erased.

Objection

You may request that your personal data is not processed.

Portability

You may receive, in an electronic file, the personal data that you provided Grifols with, as well as send it to different entities.

Restrictions of processing

You may request a restriction on how your data is processed when:

 

  • the accuracy of your personal data is being verified after you have contested its accuracy,
  • processing of your data is illegal and you oppose to the erasure of your data,
  • Grifols does no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims,
  • you have objected to the processing for the performance of a task carried out in the public interest or necessary for the purposes of a legitimate interest, whilst it is being verified whether the legitimate grounds of Grifols override yours.

 

You may withdraw your consent at any time, without this having any effect on the legitimacy of the processing of data previously carried out, by sending an email to privacy@grifols.com, with the subject line "Demo Kiro® Oncology ". To exercise your rights and withdraw consent you must also send a copy of your ID card or of any other document that confirms your identity.

In any event, you may lodge a complaint with the Spanish Data Protection Agency (www.agpd.es) or with any other competent data protection authority.

Created on: May 2018