Privacy

Data Controller

The Controller of data collected through this Website is Esteve Healthcare, S.L., with tax identification number (NIF) B-08599615 and registered office at Passeig de la Zona Franca, 109, 4ª Planta, 08038 - Barcelona, Sole-Shareholder company (hereinafter, "ESTEVE"), with telephone number 93 446 60 00 and e-mail address contactcenter@esteve.com.

ESTEVE considers it essential to maintain the privacy and security of our users' personal data. Most of our services do not require any type of registration, which means that you can visit our Website without having to identify yourself. However, in order to access some of our services and information, it may be necessary for you to provide us with your personal data.

Purposes of the processing, legal basis and storage periods

We process your personal data for a specific purpose and we only process such data as is relevant to fulfil that purpose. In this regard, we inform you that the personal data you provide or that we collect may be processed for the following purposes as appropriate:

(i)

To respond to your queries: To deal with requests for information and/or queries that you make through the various contact channels that we make available to you. The legal basis allowing us to process your data in this way is: i) when you send us your query via a form, your consent; ii) when you send us your query via any other means (e-mail, telephone, etc.), our legitimate interest in responding to your query. We will process your data for as long as it takes to deal with your request or query, after which time we will retain your data for the legally stipulated storage and limitation of liability periods.

(ii)

Management of the relationship with customers and suppliers: To enable, manage and maintain the relationship with ESTEVE. The legal basis for such data processing is: i) in relation to a customer or supplier who is considered to be self-employed, the performance of a contract to which the data subject is a party; ii) in relation to legal representatives or natural persons who, while providing their services to the customer or supplier (contact persons) come into contact with ESTEVE, the legitimate interest of ESTEVE. We will process your data for the time it takes to fulfil the aforementioned purposes. Thereafter, we will keep them duly stored and protected for the legally stipulated storage and limitation of liability periods.

(iii)

Interactions with healthcare and patient organisations: In the event that we maintain any type of interaction with a healthcare and/or patient organisation, we will process their personal data in order to contact the organisation and to allow this relationship with ESTEVE to be maintained, developed and managed. The legal basis for processing such data is ESTEVE's legitimate interest in contacting the healthcare or patient organisation. We will retain your data for the time it takes to fulfil the purposes for which it was collected and, thereafter, for the legally stipulated storage and limitation of liability periods.

(iv)

Transparency: In order to comply with our obligations regarding transparency in relation to possible transfers of value made to you and as a member laboratory of "Farmaindustria", ESTEVE will process the personal data you provide in the context of your relationship with ESTEVE in order to publish transfers of value in accordance with the requirements of the Code of Good Practice of the Pharmaceutical Industry. The legal basis upon which such data processing is carried out is the legitimate interest of ESTEVE in making such information transparent, according to Article 6.1.f) of the GDPR, as established by the Spanish Data Protection Agency in its report of April 22, 2016. ESTEVE will retain the documentation accrediting transfers of value in its archives for the legally stipulated storage and limitation of liability periods.

(v)

Selection processes: To enable the management of the candidate selection process. - Spontaneous applications: In the event that you send us your application spontaneously through any channel available for this purpose and without it being destined for any specific open selection process, the legal basis upon which such data processing is carried out is your consent. We will delete your CV six (6) months after we receive it, so if you wish to remain in our database after this period, you will have to send us your updated CV. - Open job offer: In the event that you send us your application for an open selection process, the legal basis for this data processing is to take pre-contractual steps at the request of the data subject prior to entering into a contract. We will delete your CV once the selection process has been completed, taking into account the legally stipulated storage and limitation of liability periods.

Recipients

Your personal data will not be disclosed for use by third parties unless we have obtained your consent or are legally required to do so.

Furthermore, in the course of our activities, we may need to give access to your personal data to other companies in the ESTEVE group that support us in the services we provide to you (you can consult the companies in our group here: www.esteve.com/global/legal-notice).

The data may also be disclosed to the following categories of specialised providers who help us to provide our services and are considered data processors: providers of electronic communications, office automation, hosting, housing, computer maintenance, business administration, accounting, auditing, consultancy and legal representation, among others.

International transfers

Your data may also be transferred and processed outside the European Economic Area (EEA), to countries whose level of data protection may be lower than that of European countries. In such cases we will adopt appropriate safeguards to ensure the security of the international transfer of personal data, for example by entering into specific agreements with the importer of such data.

Security measures

The data will be processed with the necessary degree of protection, adopting appropriate technical and organizational measures to prevent their alteration, accidental loss, unauthorized disclosure or access and any other improper form of processing. When applying such measures, we take into account, among other aspects, the nature of the data processed, the risks, as well as the advances in technology and the costs of their implementation. We update and maintain our databases to ensure that your data is always correct and accurate.

Rights

We inform you that as the owner of the data, you may at any time exercise your rights of access, rectification, deletion, limitation of processing, data portability, opposition and the right not to be subject to automated individual decisions with regard to your data, including profiling, free of charge. Likewise, in those cases when the processing of user data is based on the consent given by the user, the latter has the right to withdraw said consent at any given time, which does not consequently affect the lawfulness of the processing based on consent prior to the withdrawal thereof.

To exercise these rights the interested party may send a written request to Esteve Healthcare, S.L. (A/A DPO), Passeig de la Zona Franca, nº 109, 4ª Planta, 08038 - Barcelona (Spain), by filling in our contact form or by sending an email to privacy@esteve.com.

Esteve has appointed a Data Protection Officer who can be contacted by sending your request to Esteve Healthcare, S.L. (A/A DPO), Passeig de la Zona Franca, 109, 4ª Planta, 08038 - Barcelona (Spain) or to the following e-mail address privacy@esteve.com.

In any case, you have the right to lodge a complaint with the Spanish Data Protection Agency, if you deem it appropriate so to do.