PRIVACY POLICY

Privacy Policy for the website, in application of the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 and the Organic Law 3/2018 of 5 December, on the Protection of Personal Data and the Digital Rights Guarantee. The Privacy Policy must be posted in a website when any personal data is collected from the user.

PROTECTION OF PERSONAL DATA

Through this Privacy Policy, GRUPO FARMASIERRA, S.L. informs the users of its website www.farmasierra.com about the treatment and protection of the users’ personal data which may be collected when browsing or contracting services in this portal. The use of this website by the user implies the acceptance of this Privacy Policy.

FARMASIERRA GROUP, S.L. takes the necessary measures to ensure the security, integrity and confidentiality of the data in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and subsidiarily the Organic Law 3/2018 of 5 December, on the Protection of Personal Data and the Digital Rights Guarantee and the Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce.

Personal data are collected and processed for each user through registration forms or e-mails, the processing of which is ruled by this Privacy Policy. These data are necessary for the management and maintenance of some of the services provided by GRUPO FARMASIERRA, S.L.

DATA CONTROLLER

The party responsible for processing the personal data provided by the user when accessing and using the website is, as its owner, GRUPO FARMASIERRA, S.L., with NIF/CIF B83653014, with registered office at Carretera de Irún Km. 26,200 – 28709 San Sebastián de los Reyes – Madrid. Registered in the Mercantile Register of Madrid, Volume 18809, Sheet 92, Section 8, Page M327963, Entry 1 telephone number 916570659 and email address: raquelddfarmasierra.com

Data Protection Officer: PABLO GORGE Y ASOCIADOS SLU

DPO Contact: protecciondatos@farmasierra.com

GRUPO FARMASIERRA, S.L. undertakes to implement the computer security measures provided for in the aforementioned regulations, in order to prevent access to or improper use of the data, its manipulation, deterioration or loss.

DATA STORAGE PERIOD

As data controller, GRUPO FARMASIERRA, S.L., undertakes to store and manage the personal data and information collected through this website with regard for due confidentiality for as long as the professional relationship is going on and the interested party does not request its removal, and where appropriate, for a period not exceeding 5 years, starting from the end of the commercial relationship established between the user and GRUPO FARMASIERRA, S.L. However, the data controller may keep the data, duly blocked, to meet any possible administrative or jurisdictional responsibilities.

PURPOSES OF DATA PROCESSING

The operations, management and technical procedures, whether automated or non-automated, that make possible the collection, storage, modification, transfer and other actions on personal data are considered as personal data processing.

At GRUPO FARMASIERRA, S.L. we process the personal data that the user provides us with through www.farmasierra.com in order to include them in the contact agenda, manage the commercial relationship requested and thus use this information as the company’s contact information. Furthermore, the processing of collected data also implies sending the requested information and responding to the queries or questions sent by the user through the website, facilitating equally service offerings to those interested.

The fields must be filled in so that GRUPO FARMASIERRA, S.L. can fulfil the aforementioned purposes.

The user may oppose the sending of commercial communications at any time by sending an email to the address indicated above.

LEGITIMACY FOR DATA PROCESSING

The processing of the personal data provided by the user is carried out on the following legal bases that legitimise it:

The contracting of services from GRUPO FARMASIERRA, S.L. and the execution of the requested professional order, the terms and conditions of which will be made available to the user prior to any possible contracting. In order to be able to carry out this requested professional relationship, the interested party is obliged to provide their details.

Free, specific, informed and unequivocal consent, since after reading this Privacy Policy the user is informed and, if he or she agrees, can accept it by means of a declaration or a clear affirmative action, such as checking a box provided for this purpose.

In the event that the interested party does not provide the aforementioned data or they are erroneous or inaccurate, we will not be able to attend to your request, being impossible for us to provide you with the requested information or to carry out the contracting of the services. Therefore, the data controller, GRUPO FARMASIERRA, S.L. will be exonerated from any responsibility that may arise from the failure to carry out the professional assignment or from the consequences arising from this inaccurate or erroneous information.

DATA COMMUNICATION

In general, GRUPO FARMASIERRA, S.L. will not communicate these personal data to third parties, except when the provision of a service implies the need for a contractual relationship with a data processor and this is strictly necessary to manage and maintain the relationship between the user and the aforementioned company. This will be done only for the time necessary to enable the execution of the contract of assignment, and under the same conditions and with the same responsibilities required of the data controller. Once the order has been completed, the data processor shall return the personal data to the data controller and delete any copies he or she may have in his or her possession.

On the other hand, only those third parties with whom GRUPO FARMASIERRA, S.L. has a legal or contractual obligation to provide these personal data will have the right to access to them, including, for example, the Ombudsman and those judges and courts interested in the procedures related to the complaints submitted.

DATA SUBJECTS’ RIGHTS

The user may at any time, under the terms established in the legislation in force, exercise the rights of access to, rectification or erasure of data, request that the processing be limited, oppose it, request the portability of his or her data, as well as revoke the consent, rights recognised in the aforementioned Regulation (EU). Users may exercise these rights by contacting the Data Protection Officer.

For the effective exercise of these rights, the user must prove his or her identity by providing his or her name and surname(s), a photocopy of the National Identity Document (DNI) or equivalent document proving his or her identity, a request specifying the application, an address for the purposes of notifications, and the date and signature of the applicant.

Likewise, the user may lodge a complaint with the Spanish Data Protection Agency (the Control Authority competent in this matter), especially when he or she has not obtained satisfaction in the exercise of his or her rights, by means of a letter addressed to the same, C/Jorge Juan, No. 6, 28001 – Madrid, or through the website: https://www.aepd.es