We set out below the criteria used by HIPRA regarding the processing of the personal data that you voluntarily choose to provide to us through this website:
When using this Website or these Applications and/or when communicating electronically with HIPRA, each user’s personal data may be collected and processed. The processing of such personal data will be governed by this Privacy Policy and by applicable law.
DATA CONTROLLER
The Data Controller is HIPRA, S.A., with Tax ID No. A-55189310, which has its registered office at Avda. La Selva 135, 17170 Amer (Girona), Spain.
PURPOSE OF THE PROCESSING
We wish to inform you that we will use your data for the following purposes: (i) to manage any commercial and/or contractual relationship with HIPRA; (ii) to provide you with information of interest according to the consent provided or the legitimate interest of HIPRA (iii) to use your information as a point of contact for HIPRA; (iv) to send you information, for training or for events as part of HIPRA’s own professional activities; (v) to respond to inquiries or issues you may submit through the Website or other applications and/or (vi) to monitor the safety of medicines, including to detect, assess and prevent adverse reactions and report to health authorities; as well as any other purposes imposed by law or by the authorities.
LEGITIMATE BASIS
The legitimacy of the processing is your consent and/or HIPRA’s legitimate interest in maintaining the relationship that exists with you, as applicable. Personal Data may also be processed for compliance with legal obligations, such as pharmacovigilance. HIPRA will therefore collect and process your data for as long as the relationship with you continues and provided that you do not revoke the consent you have given to the processing of your data.
If you inform us of unwanted adverse events or other issues related to the safety or quality of HIPRA products, we will be legally required to process your communication and may need to contact you for clarification purposes. Subsequently, it is possible that
we may need to notify the competent health authorities regarding the problems reported by you. In this context, your information will be sent under pseudonym. In other words, no information will be sent can directly identify you.
Your personal data will be kept for as long as is strictly necessary to achieve the objectives for which they were obtained, unless the applicable legislation requires their retention for a longer period or it is necessary to keep them for a longer period in accordance with the provisions of Art. 5.1 GDPR.
USE BY MINORS
This Website is not intended for individuals under the age of 18, so the personal data of minors will not be knowingly processed. If you are under the age of 18 or are legally a minor under the laws of your home country, you will need the permission of your parents or legal guardian in order to use the Website. If the personal data of minors under 18 years of age come to our attention without the required consent, HIPRA will delete them immediately upon notification or request to do so.
As an exception, in cases of reporting adverse effects, for the purposes of compliance with pharmacovigilance regulations, the data of minors under 18 years of age may be processed even without the consent of their parents or legal guardians.
DATA TRANSFER
As a group of companies with an international presence, HIPRA may communicate and exchange user data with other companies belonging to the HIPRA Group that are listed on the website and solely for the purposes indicated above. In any case, such data will be processed with the level of protection required under applicable regulations.
HIPRA may also transfer personal data: (i) to subcontracted service providers in order to provide services (e.g.: web hosting, data analysis, provision of information technologies and related infrastructure, customer service, sending emails, auditing and other services); (ii) to other companies with whom we collaborate in connection with particular products or services; and (iii) to comply with applicable laws and requests from public authorities.
AUTOMATIC DATA COLLECTION
Certain information may be collected automatically while you are browsing the Website. For more information about the cookies used on the Website you can access our Cookies Policy.
EEA and UK users:
CROSS-BORDER DATA TRANSFERS
Data collected through the Website may be processed in any country where HIPRA has facilities, affiliates or service providers. Some of these countries may not have the same level of protection as countries in the European Economic Area (EEA), so HIPRA will ensure that it takes appropriate measures to protect personal data in accordance with this Privacy Notice and as permitted by applicable data protection laws. In cases of transfers from the EEA to countries deemed not appropriate by the European Commission, HIPRA will take appropriate necessary measures for the protection of personal data, including ensuring that the recipient will be bound by EU standard contractual clauses.
ARCO RIGHTS
We inform you that, under the terms set forth in current legislation, you have at all times the right to exercise the rights of access, rectification or cancellation of your data, as well as to request that the processing thereof be limited, and also to object entirely to the processing thereof, request their portability and at any time to revoke the consent given.
If you wish to exercise any of your rights, you may do so by writing to the following address: Avda. La Selva 135, 17170 Amer (Girona), Spain, or to the email address privacy@hipra.com, without prejudice to also contacting the competent local or national Data Protection authority.
You undertake to report any changes or modifications to the personal data that you have provided. HIPRA is not liable for any loss or damage caused by the communication of erroneous, inaccurate or incomplete data.