DATA CONTROLLER
The company responsible for processing your data according to this Privacy Policy is:
MEDICHEM, S.A.
NIF: A08287104
Address: C/ Fructuós Gelabert, 6-8 – 08970 Sant Joan Despí (Barcelona)
E-mail address: dataprotection@medichem.es
Website: www.medichem.es
Telephone no.: 934776440
Registered in the Companies’ Register of Barcelona (tomo 2.013, folio 23, Libro 1.418, Section 2 Sheet number 19.791, now B-39.584)
At MEDICHEM, S.A., we recognize the importance of protecting your personal information and we are committed to processing it responsibly and in compliance with the data protection laws.
The purpose of this privacy policy is to regulate all the aspects relating to the processing of data of the different USERs browsing the website or providing their personal details on the different forms to be found on it.
Personal Data:
Personal Data is information that identifies you or may be used to identify you. Through the website, we collect the personal data that the USER provides in the designated boxes established for those purposes, including their name, surname, email address, telephone number, postal code, city, and any other information submitted.
We also collect any personal data that the USER voluntarily provides through any social network on which the USER is registered. In such cases, the applicable privacy settings will depend both on the configuration established by the USER and on the terms and conditions of the relevant social network.
When a USER visits the website, this does not mean that he/she must provide any information about his/her personal data. However, if such information is provided, the data will always be processed lawfully and in accordance with the principles and rights set out in the GDPR (EU) 2016/679 of 27 April 2016 and the LOPDGDD 3/2018 of 5 December.
Purpose, duration and legitimation of the processing:
We will process the data provided to us by the USER for the following purposes:
1.- To deal with the USER’s application or request made using the contact form on the website. We collect and process the USER’s personal data to enable us to process and manage his/her application, query or any request made using said form. We will keep this data for the time necessary to comply with the request and for the time established by law, with a minimum duration of 3 years.
The basis for legitimation of data processing will be the consent granted by the USER when checking the box for acceptance of our privacy policy before sending the request. The USER has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
2.- To improve USER’s experience when browsing the website. We will keep the data for as long as the USER does not revoke his/her consent to them being processed by deleting the cookies, for the time established by law and for a minimum duration of 3 years.
The legitimate basis for improving website browsing is the consent given by the USER when accepting the cookies. The USER has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
3.- To manage the CV/résumé sent by the data subject using the form provided for this purpose and include it in the database of company candidates. These data will be kept for a maximum of one year, after which time the data will be blocked for the time established by law, with a guarantee that confidentiality will be fully respected both in their processing and subsequent destruction.
The legitimate basis for managing and processing the data subject’s CV/résumé is his/her consent; this is given by carrying out the affirmative action of sending it and checking the box for acceptance of our privacy policy prior to it being sent. The USER has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
4.- To manage our social networks and send USERs information about our activities and products. We will keep these data for as long as the USER does not revoke his/her consent to them being processed, for the time established by law and for a minimum duration of 3 years.
The legitimate basis for managing our social networks and sending USERs our activities and new features is the consent we are given to do so. The USER has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
5.- To perform security tests to differentiate between human USERs and bots to prevent fraud. This processing is done using a Google CAPTCHA. This data will be kept as long as necessary for the purpose or until the USER changes their IP address, browser, or deletes the associated cookies.
The legal basis for processing this data is the legitimate interest of the Data Controller in ensuring system security, preventing fraudulent access, and protecting services against misuse.
6.- To establish and maintain our commercial and contractual relationships. In those cases, personal data will not be retained for longer than the time that is necessary to fulfil our purposes, and it will not be communicated to third parties, except if we need to comply with our legal obligations, or to disclose it to our providers (acting either as a Controllers or Processors) to comply with our contractual obligations and relationships.
The basis for legitimation of the data processing will be the performance of a contract to which the data subject is a party. If the user does not provide his/her personal data, it will not be possible to manage his/her purchase and the requested service cannot be provided.
7.- To send commercial information about CONTROLLER products, services and new features if consented by USER in the contact form. The data shall be kept until such a time as the USER objects to receiving communications. We will keep this data for as long as the user does not revoke his/her consent to them being processed, for the time established by law and for a minimum duration of 3 years.
The basis for legitimation of the data processing will be the consent granted by the user when checking the box for acceptance of our privacy policy before subscribing to the commercial information in the form provided for this purpose on the website or in social media. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
Assignment or communication of personal data and international transfers:
Your data will not be communicated or transferred to third parties unless there is a legal obligation, or to those service providers associated with the Controller which act as data processors.
Data will not be transferred internationally; if, at any time, this might be required, the USER will be informed so that his/her consent can be obtained.
Updating of data:
In order for us to keep the personal data up to date, the USER must always inform us of any change in said data; if this is not done, we cannot be liable for the veracity of the data.
The USER guarantees that the personal data provided are true and guarantees that all the information provided corresponds to reality, is up to date and is accurate. He/she is obliged to communicate any modification thereto.
Third Party Data:
If the USER provides third party data for any purpose to MEDICHEM, S.A., he/she guarantees that he/she has obtained these data lawfully, has informed the affected parties in advance, has obtained his/her consent to communicate them, and that the information provided is accurate and true.
Compulsory nature of the information requested:
All our forms have an asterisk (*) to indicate which details are compulsory. If the USER does not complete these fields, or does not check the privacy policy box, the information will not be sent.
Rights of data subjects:
You have the right to access your data and obtain confirmation regarding the processing thereof, as well as a copy of the personal data being processed. You have the right to update them and request that any inaccurate data be corrected, or request removal of the data when there are not necessary for the purposes for which they were collected. You may request a restriction in the processing of your data and object to them being processed by revoking your consent, or also exercising your right to data portability. Similarly, you have the right not to be the subject of decisions based solely on the automated processing of your personal data. You may exercise your rights by contacting us C/ Fructuós Gelabert, 6-8 – 08970 Sant Joan Despí (Barcelona) or at dataprotection@medichem.es
If you consider that your rights have not been duly respected, you have the right to lodge a complaint with the Spanish Data Protection Agency www.aepd.es
Processing of the data of Minors:
Anyone providing data through the forms on this website and accepting the processing of such states that he/she is at least 14 years old. Access to, and use of the website is prohibited for anyone younger than 14. If, at any time, the Data Controller detects that a person younger than 14 years of age has provided personal data, we will cancel said data. In addition, parents or tutors may in any event write to MEDICHEM, S.A. to block any access account created by minors in their charge who have registered by falsifying their identity.
Social Networks:
The object of social tools such as Facebook, Twitter, Instagram, etc. or other social networks is to give visibility and dissemination of the activities that take place in our organization. These social tools store personal data in the servers of the corresponding services and are governed by their own privacy policy. It is recommended to review and read the conditions of use and the privacy policy of the social network at the time of registration, considering the different configuration´s possibilities regarding the privacy of the USER’s profile in the social network. In addition, the Controller reserves the right to erase from its social networks any published information by third-parties that trespasses the legality, encourages to infringe it or contains messages that infringe upon human dignity or institutions. Likewise, the Controller reserves the right to block or report the author´s profile of such content.
Cookies:
A cookie is a small file that is downloaded and stored on the USER’s computer when he/she accesses a website. Cookies allow the website, amongst other things, to store and recover information on the browsing habits of the USER or of his/her computer and, depending on the information they contain and the way in which you use your computer, they may be used for USER recognition.
The USER has the option to prevent the generation of cookies, by selecting the corresponding option in his/her browser program. You can obtain more information by reading our Cookies Policy.