PRIVACY NOTICE
- Who is/are the data controller/s?
The data controller is Grifols International, S.A., with address for contact purposes at Avda. de la Generalitat 152, 08174, Pol. Ind. Can Sant Joan – Sant Cugat del Vallés, Barcelona – (Spain) ("Grifols").
- Who is the data protection officer of Grifols and how can you contact him/her?
The data protection officer acts as an interlocutor between Grifols and you in order to ensure Grifols' compliance with the data protection legislation and guarantee your rights under such legislation. You may contact the data protection officer at dpo@grifols.com.
- For which purposes does Grifols process the personal data?
Grifols processes the personal data to:
(a) manage the access to and offer information regarding the quality and safety of Grifols' plasma-derivative products and the service itself, as well as permit that the data subject accesses this information in the language selected by him/her. Additional information is available in the Cookies policy, and
(b) respond to requests of information and/or suggestions.
- Which is/are the lawful basis/bases to process the personal data?
The legal bases to process the personal data are:
(a) the consent provided through the data collection forms, and
(b) the legitimate interest of Grifols to share your personal data with third party distributors and the Grifols' group companies engaged in the sale and distribution of plasma-derivative products, to the extent that this may be necessary to manage and provide with access to the aforementioned information or, only in the case of said Grifols' group companies, to respond to requests of information and/or suggestions.
We consider that the legitimate interest in which Grifols bases the processing of personal data overrides data subjects' fundamental rights and freedoms, given that the processing is part of the daily management of a multinational group of companies. In any case, you may exercise your right to object by addressing such request to privacy@grifols.com.
- How long does Grifols retain the personal data?
Once the purposes for which the personal data processed are fulfilled, Grifols retains the personal data until the end of statutes of limitation of any liabilities that may arise and during the term required to comply with any applicable legal obligation.
- With whom does Grifols share the personal data?
In order to verify if the institution to which the data subject belongs is a customer, it may be necessary to provide the personal data to third party distributors and to Grifols' group companies that sell and distribute plasma-derivative products, depending on the location of the health institution that uses Grifols' plasma-derivative products. Likewise, these Grifols' group companies may have access to the data of the data subject in order to respond to its requests of information and/or suggestions.
- Which are your data protection rights?
| Rights |
Content |
| Access |
You may request confirmation as to whether or not your personal data is being processed and, if so, you can obtain access to your personal data included in Grifols' files. |
| Rectification |
You may request the rectification of your personal data if this is inaccurate. |
| Erasure |
You may request that your personal data is erased. |
| Objection |
You may request that your personal data is not processed in specific circumstances. |
| Portability |
You may request receiving, in an electronic file, the personal data that you provided Grifols, as well as the right to transmit it to other parties. |
| Restriction of processing |
You may request a restriction on how personal data is processed when:
- the accuracy of your personal data is being verified after you have contested its accuracy.
- processing of your personal data is unlawful and you oppose to its erasure.
- Grifols does no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
- you have objected to the processing for the performance of a task carried out in the public interest or necessary for the purposes of a legitimate interest, whilst it is being verified whether the legitimate grounds of Grifols override yours.
|
| Withdrawal of consent |
You may withdraw your consent without affecting the lawfulness of processing based on consent before its withdrawal. |
You may exercise, when appropriate, the data protection rights by sending a written communication to privacy@grifols.com and indicating as subject matter of the communication "Pedigri". For these purposes, Grifols may request a copy of your ID card/passport in force or any other valid document evidencing your identity.
In addition, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with any other data protection authority.
Date of last update: April 2020
|
|
|
